Overview

Microsoft Sentinel is a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution available on the Microsoft Azure cloud platform. It helps organizations collect, analyze, and response to security threats across their entire environment. 

Connecting the Integration

To integrate Microsoft Sentinel with Secureframe, navigate to Integrations and search for "Microsoft Sentinel" on the "Available Integrations" page and click "Connect". (If you have the Custom Integration feature, click on "Add native connection"). On the connection form, follow the instructions to start the connection. 

You can now navigate to the “Integrations” page and you should be able to see your Microsoft Sentinel connection. 

Permissions, Fields Pulled, Controls, and Automated Tests

1. Click the provided link or navigate to the “Integration” page.
2. Select the “Available” tab.
3. Search for the integration.
4. Click “View Details”.