Azure Sentinel | Azure B2C

Can you let me know if Azure Sentinel supports (out of the box) connections to Azure B2C Logs. The document states that Azure Sentinel can ingest Azure AD sign-in and audit logs but was not sure for ...

Chris Boehm
May 28, 2019
Lars_Kemmann

and Adrian Gordon

Valon_Kolica

To answer the question, yes we take in Azure AD B2C Audit logs

https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-reference-audit-logs

If configured, you'll see B2C Audit logs pulled over into Azure Sentinel whenever you've enabled Azure AD Audit connector within Sentinel.

Example:

Pulling a Query over the past 7 days, looking for B2C audit logs