Forum Discussion
Access monitoring Dynamics 365 - Sentinel
Hi, can you tell me what is the best way to integrate the access monitoring of crm dynamics 365 on sentinel? Thank you.
Hello Giulio22,
I assume that access to Dynamics 365 is performed based on a Microsoft user, and it means that you can see logs in Azure Active Directory -> Sign-in logs. If it is so, you should connect Azure Active Directory to Sentinel and filter logs by Application. Thereby you will be able to see who accesses Dynamic 365.
For example, by running this query:
SigninLogs
| where AppDisplayName contains "Dynamics 365"
| where AppDisplayName contains "Dynamics 365"