Forum Discussion
on perm fileserver delete logs to cloud app security
Hi all, Is there any way to send the delete file logs from on perm fileserver to CAS ? Thanks. Gabor
I think what you are asking is if it is possible to monitor and alert when someone clears the security event log (Event ID 517 and 1102).
Cloud App Security won't do that for you, but Azure Sentinel or Azure Log Analytics will:
https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-security-events
Cloud App Security won't do that for you, but Azure Sentinel or Azure Log Analytics will:
https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-security-events
Thanks, I did this in the meantime Joe Stocker