Forum Discussion
Azure Active Directory Identity Protection SIEM integration
Hi all We would like to integrate our AADIP system with QRadar platform, in order to forward alerts directly to the SIEM dashboard. To do this we would like to use the DSM connector available in the...
AADIP is now accessible via Microsoft Graph API (as of November 2019)
(https://aka.ms/RiskyUsersAPI, https://aka.ms/SigninsAPI, https://aka.ms/RiskDetectionsAPI),
Presumably you could use PowerAutomate (easy) or Azure Logic Apps (more programmatic) to be the intermediary connector between the Graph API and Azure Event Hub. I wasn't able to find a way to populate data from Microsoft Graph API directly into Azure Event Hub.
https://docs.microsoft.com/en-us/connectors/eventhubs/