Forum Discussion
GaryBushey
May 12, 2020Bronze Contributor
ASC Compliance and Protection workbook
I just noticed this new workspace template. There seems to be a large number of data types that are required but it only states that the AzureSecurityCenter data connector is needed.
Is there going to be a blog posting about this and how to get the other data types?
BTW, what I can see of the workbook looks great!
Hi GaryBushey
The Overview pane has these listed:
Required data types:SecurityAlertProtectionStatusSecurityRecommendationSecurityBaselineSecurityBaselineSummaryUpdateConfigurationChangeRelevant data connectors:AzureSecurityCenter
I see your point, ConfigurationChange is from a solution not a connector. As with most workbooks that use a few sources, its unlikely everyone will have them all and you should still get some results.
The usage was blogged https://techcommunity.microsoft.com/t5/azure-sentinel/gain-compliance-posture-and-protection-insights-with-this-azure/ba-p/1290454 from the original prototype https://techcommunity.microsoft.com/t5/azure-sentinel/compliance-reporting-for-azure/ba-p/1259574
- CliveWatson
Microsoft
Hi GaryBushey
The Overview pane has these listed:
Required data types:SecurityAlertProtectionStatusSecurityRecommendationSecurityBaselineSecurityBaselineSummaryUpdateConfigurationChangeRelevant data connectors:AzureSecurityCenter
I see your point, ConfigurationChange is from a solution not a connector. As with most workbooks that use a few sources, its unlikely everyone will have them all and you should still get some results.
The usage was blogged https://techcommunity.microsoft.com/t5/azure-sentinel/gain-compliance-posture-and-protection-insights-with-this-azure/ba-p/1290454 from the original prototype https://techcommunity.microsoft.com/t5/azure-sentinel/compliance-reporting-for-azure/ba-p/1259574