Microsoft Sentinel M365 Audit & DLP Connector Released on GitHub Using Codeless Connector Framework

Summary

Microsoft Sentinel's native connectors fail to capture critical Microsoft 365 audit events, particularly Data Loss Prevention (DLP) logs and audit trails from 29 specialty services. A new community solution built with Sentinel's Codeless Connector Framework (CCF) has been released on GitHub that bridges this gap by ingesting the complete Unified Audit Log into a single custom table. This eliminates the need for Defender for Cloud Apps to access these high-fidelity events, providing a more comprehensive and streamlined approach to unified log ingestion for security monitoring.

Source

bskyMicrosoft Sentinel M365 Audit & DLP Connector Released on GitHub Using Codeless Connector Frameworkundercodetesting.com