About RobinK

RobinK · 09-10-2024

Hi everyone,Does anyone has experience in ingesting Entra ID Identity Protection Alerts (IdentityRiskEvent and IdentityRiskyUser) into SecOps SIEM? I only found the log type "MICROSOFT_IDENTITY_PROTECTION", which unfortunately does not have a parser ...

RobinK · 09-12-2024

Yes, it seems that "Entra ID Identity Protection" is not available via "Microsoft Graph Security API", when I look at the MS documentation.Do you have any preferred way to ingest data from an API into SecOps SIEM, for which there is no 3rd-party-API ...

RobinK · 09-12-2024

Hello dnehoda,Thank you for sharing these blogs with me. They were interesting to read. Unfortunately they are both not quite what I was looking for, even though they target topics close to what I need.We already have the Entra ID Feeds in use. In my...

My Stats

Soham_Dey's Bio

Badges RobinK Earned

Recent Activity

Ingest Entra ID Identity Protection Alerts into SIEM

Re: Ingest Entra ID Identity Protection Alerts into SIEM

Re: Ingest Entra ID Identity Protection Alerts into SIEM