Forum Discussion
Integrating on premises SIEM with microsoft casb
I am looking for the solution integrating on premises SIEM with existing micsroft CaSB and viewing the incident and event of on premises devices on CASB. Is this possible ?
I don't think it is possible to ingest your SIEM into M365 Defender, however, you can ingest it into Sentinel. https://docs.microsoft.com/en-us/azure/sentinel/connect-common-event-format#supported-architectures
Thanks Joe, we were looking for a solution to make use of our existing siem with microsoft defender