Forum Discussion
Possible to Connect Azure Sentinel across different Directories?
Our environment is as follows:
Directory A:
Serves as the AD authority over our Exchange/SharePoint/OneDrive environment only.
Has a Subscription but only for the purpose of providing a Sentinal Workspace.
Directory B:
Totally separate AD Authority which manages our Dev resources and multiple Subscriptions.
Has Sentinel installed on a Test Subscription/Workspace.
If possible would prefer to aggregate ingested data to the above mentioned workspace.
Is this even possible?
2 Replies
- Yes, we use Lightouse for this scenario
https://techcommunity.microsoft.com/t5/azure-sentinel/using-azure-lighthouse-and-azure-sentinel-to-investigate-attacks/ba-p/1043899
