Forum Discussion

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor
    There is a Dynamics365 data connector as well as a Dynamics 365 Content hub solution (which I think would be your best bet)
    • mikhailf's avatar
      mikhailf
      Steel Contributor
      It would be the best bet if this connector ingests SignIn activity logs.
  • mikhailf's avatar
    mikhailf
    Steel Contributor

    Hello Giulio22,

     

    I assume that access to Dynamics 365 is performed based on a Microsoft user, and it means that you can see logs in Azure Active Directory -> Sign-in logs. If it is so, you should connect Azure Active Directory to Sentinel and filter logs by Application. Thereby you will be able to see who accesses Dynamic 365.

     
    For example, by running this query:
    SigninLogs
    | where AppDisplayName contains "Dynamics 365"

     

Resources