Forum Discussion

Copper Contributor

Jun 22, 2020

Bringing data in from other tenants (e.g. 0365)

I'm experimenting with connecting data sources into my Sentinel environment. I'm trying to connect natively, an O365 (E3) source that I have provisioned through Partner Network licensing. It's under ...

Roblo1

Copper Contributor

Jun 22, 2020

Thanks GaryBushey. I've been thinking about that as an option too, although wanted to see if it's possible to bring it to my current environment - ideally with a native connector, rather than doing something else to pull it from an API and get it into Sentinel/LA. I'll do some further research on the method you've mentioned combining two instances.

Roblo1

Copper Contributor

Jun 25, 2020

Update for completeness:

https://techcommunity.microsoft.com/t5/microsoft-security-and/security-community-webinars/ba-p/927888

added a presentation on this on the 23rd June, which was useful.