

The WatchGuard Firebox allows you to ingest firewall logs into Azure Sentinel. This REST API connector can efficiently export macOS audit events to Azure Sentinel in real-time. The NXLog BSM macOS data connector uses Sun’s Basic Security Module (BSM) Auditing API to read events directly from the kernel for capturing audit events on the macOS platform. With a single, cross-product view, you can make real-time, data-backed decisions to protect your most important assets. Morphisec's Data Connector provides users with visibility into many advanced threats including sophisticated fileless attacks, in-memory exploits, and zero days. The data connector and its new Workbook allow users to visualize their data, understand threat protection measures, and improve security investigations. The Forcepoint Cloud Security Gateway data con nector allows you to automatically export CSG logs into Azure Sentinel. This includes overview graphs with time-brushing for given timeframes, along with more detailed drill down functionality into specific breaches and incidents, where you can then view the breach back in the Darktrace UI for further exploration. The AI by Darktrace data connector allows you to send your model breaches and AI Analyst Incidents (AIA) to Azure Sentinel, where this data can be explored interactively through the provided data visualizations in the associated AI Analyst Darktrace Workbook. The data connector and its new Workbook allow users to visualize their data, create alerts and incidents and improve security investigations. The Cyberpion Security Logs data connector ingests logs from the Cyberpion system directly into Sentinel. Use the new Workbook to easily visualize and recognize risks to your important information, understand the severity of the incidents, and investigate the details you need to remediate.

You can use Cognni to autonomously map your previously unclassified important information and detect related incidents. The Cognni data connector offers a quick and simple integration with Azure Sentinel. Use the parser for Zscaler to build and correlate ZPA logs with other logs to enable rich alerting and investigation experiences. The Zscaler Private Access (ZPA) data connector provides the capability to ingest Zscaler Private Access events into Azure Sentinel. These new data connectors come in addition to the newly announced Azure Sentinel Solutions which features a vibrant gallery of 32 solutions for Microsoft and other products. With these new connectors, we are continuing the momentum to enable customers to easily bring data from different products into Azure Sentinel and analyze that data at cloud scale, giving them a broad view of their entire environment. Today, we are announcing over 15 new out-of-the-box data connectors for Azure Sentinel to enable data collection for leading products across different industries and clouds.
