Microsoft Dynamics in Azure Sentinel

[fedecharosky]

Hi team, we are looking at integrating Microsoft Dynamics into Azure Sentinel.

Has anyone seen a good integration methodology for this?

We are about to play with it in a Sandbox, but would like to hear success / failure stories.

Thanks!

[#2]

@fedecharosky Interested to hear what data you would like to see. Anything more than this?

https://docs.microsoft.com/en-us/power-platform/admin/enable-use-comprehensive-auditing

[#3]

@rodtrentwe plan to do a threat model exercise to undrestand the threat scenarios in detail and then I'll have a more qualified answer for you.

In terms of the integration of the events and telemetry into Sentinel and Log Analytics - would we get that straight into OfficeActivity (assuming E5 license)?

[#4]

Hi @fedecharosky a few months on did you manage to get a solution and some use cases for this?  I'm in a similar position now to where you were a few months ago and am thinking of use cases where we could ingest data from D365 into Sentinel to improve security

[#5]

It would be great to get some information on that too.
I was looking at possibly using the Office 365 Audit Logs /API bu would be great to know if anybody has already implemented it and possible use cases.

[#6]

@Rich King nothing specific - we kept it very "OfficeActivity" related for the most part. I'll check with the teams to see if they moved this any further.

[#7 · Accepted solution]

@Rich King, @fedecharosky , @caiodaruizcorrea : private preview for a Dynamics connector will start next month. You can join our Private Previews program to get updates.

[#8]

Thanks @Ofer_Shezaf. Will certainly do!

[#9]

Thanks @Ofer_Shezaf - perfect timing!

[#10]

@Ofer_Shezaf thanks for confirming!