Forum Discussion
Solved
Connector for DLP Alerts in Sentinel
What connector provides M365 DLP alerts to Sentinel?
- https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/ingest-office-365-dlp-events-into-azure-sentinel/ba-p/1031820 or https://samilamppu.com/2020/04/21/searching-for-o365-data-loss-prevention-dlp-event-data/
O365 does event data but you may need the activity api
https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/ingest-office-365-dlp-events-into-azure-sentinel/ba-p/1031820 or https://samilamppu.com/2020/04/21/searching-for-o365-data-loss-prevention-dlp-event-data/
O365 does event data but you may need the activity api
O365 does event data but you may need the activity api
- Thanks, I was looking for a connector that was focused on the compliance solutions and had forgotten that these events were included in the main o365 connector
