Forum Discussion
Adding Endpoint Compliance info to Sentinel workspace
There is a new workbook in this solution Enable the Update Compliance solution - Windows Deployment | Microsoft Docs which needs to be added to a workspace. Should this be added to the same workspace as the one used by Sentinel or should it be put into a different one? What are the pros/cons of each option? the docs don't address this specific scenario.
- Rod_Trent
Microsoft
In my mind, it boils down to management.
Who needs to manage/view this information? Is it the same team that is tasked with monitoring IR? If, yes, probably want to enable it in the workspace for Sentinel (at resource group level). If no, you may want to install it in its own resource group.
