Forum Discussion

msmotto21's avatar
msmotto21
Copper Contributor
May 27, 2021
Solved

Network mapping reconnaissance (DNS)

Hi everybody,  i get an warning in MCAS "Network mapping reconnaissance (DNS)" because of my Vulnerability Scanner. I wan't to get notified like in every alert rule in MCAS. But i can't find where i...
Cloud App Security
  • Joe Stocker's avatar
    Joe Stocker
    May 30, 2021
    "Is there a way to query and specifically filter the data from Defender for Identity in Azure Sentinel (LogAnalythic)?"
    Yes this is available now, per this article: https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-atp
msmotto21's avatar
msmotto21
Copper Contributor
May 30, 2021
Hi Joe, thank you very much for your reply. I almost thought so. I have already found and configured the notification function in Defender for Identity (ATP portal). Is there a way to query and specifically filter the data from Defender for Identity in Azure Sentinel (LogAnalythic)? It would be nice to push the data into a MS Teams SOC Channel.

Thank you very much.

Regards Sebastian
Joe Stocker's avatar
Joe Stocker
Bronze Contributor
May 30, 2021
"Is there a way to query and specifically filter the data from Defender for Identity in Azure Sentinel (LogAnalythic)?"
Yes this is available now, per this article: https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-atp