Edit

Sonrai Data connector for Microsoft Sentinel

  • Article

Use this data connector to integrate with Sonrai Security and get Sonrai tickets sent directly to Microsoft Sentinel.

Connector attributes

Connector attribute Description
Log Analytics table(s) Sonrai_Tickets_CL
Data collection rules support Not currently supported
Supported by Sonrai

Query samples

Query for tickets with AWSS3ObjectFingerprint resource type.

Sonrai_Tickets_CL 

| where digest_resourceType_s == "AWSS3ObjectFingerprint"

| limit 10

Vendor installation instructions

Sonrai Security Data Connector

  1. Navigate to Sonrai Security dashboard.
  2. On the bottom left panel, click on integrations.
  3. Select Microsoft Sentinel from the list of available Integrations.
  4. Fill in the form using the information provided below.

Next steps

For more information, go to the related solution in the Azure Marketplace.