Azure Information Protection Audit logs no longer supported on Sentinel/LAW

Tim Katsapas 1 Reputation point
2022-04-12T13:11:54.28+00:00

I recently tried to add the data connector in Sentinel for Azure Information Protection and I got notified that this is no longer possible.

Link to info:
https://learn.microsoft.com/en-us/azure/information-protection/removed-sunset-services?WT.mc_id=Portal-Microsoft_Azure_InformationProtection#azure-information-protection-analytics

Are MSFT planning to have Sentinel having AIP logs integrated or not? They are suggesting only using Context and File Explorer in the Compliance Portal, but a client specifically wants all logs to be available in Sentinel.
Will there be a way of ingesting AIP Audit Data into Sentinel in the future? Is there any roadmap from the PM team in AIP?

Thanks!

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
518 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
986 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Andrew Blumhardt 9,496 Reputation points Microsoft Employee
    2022-04-12T13:48:54.767+00:00