https://store-images.s-microsoft.com/image/apps.38964.9620d549-f573-4e0c-9539-c059f0bd50b5.bc69682c-6eb1-40c9-82f7-ff61b0194c46.3d26c3fd-8a71-40c2-b62a-9e42f0cf9719

Commvault Cloud for Sentinel

by Commvault

Bring Commvault security signals into sentinel for faster detection and automated response

Commvault Cloud for Microsoft Sentinel helps organizations gain real-time, automated cyber resilience that strengthens security and accelerates recovery. Automated security event ingestion helps enable centralized threat detection, incident response, and compliance monitoring for your data protection infrastructure.


Key Features

Collect security-relevant events like anomalies and cyber threats (by default) as documented in the Threat Indicators Dashboard. Refer to the detailed documentation for more.

Help eliminate security blind spots and reduce manual monitoring overhead in data protection environments with real-time threat detection, incident analysis, and orchestrated response actions.


How it Works

Generate access and refresh tokens in Commvault Cloud with Admin Privileges.

Create Azure Key Vault with required secrets (access-token, refresh-token, environment-endpoint-url).

Deploy Connector. Install from Sentinel Content Hub and configure Function App parameters.


Configure permissions and grant Function App access to Key Vault (Access Policies or RBAC). For detailed configuration steps, prerequisites, and automation setup, visit: https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Commvault%20Security%20IQ.