https://store-images.s-microsoft.com/image/apps.6527.49571bd6-e479-4ed6-a8b0-7c1654cc0ed1.e0dbce8d-a03a-4b9b-9019-2cd84fa3e62c.9779e507-cb31-4116-a292-2bc2dc1bf3d9

vSEC:CMS Sentinel

por Versasec AB

Collect vSEC:CMS and vSEC:CLOUD system health statuses and system alerts.

The vSEC:CMS Connector for Microsoft Sentinel is an essential integration that leverages the Codeless Connector Framework (CCF). It securely streams data from your vSEC:CMS directly into a dedicated Log Analytics table. You instantly transform raw logs into correlation ready data fields, unifying events with your overall security operations.

Key technical advantages: Advanced Threat Correlation
Zero Infrastructure Overhead: Deployed as a Sentinel solution via the content hub catalogue via CCF, you eliminate the OpEx and maintenance burden of intermediate function apps or collectors.
Rapid Deployment: Follow a simple workflow in the Sentinel content hub, ensuring a secure, repeatable, and code-free deployment in minutes.

This solution includes
  • Data Connectors: 1
  • Custom Log Tables: 2
  • Data Collection Rules: 1

Prerequisities
  • This solution requires no extra license from Versasec.
  • Management URL to access the Versasec vSEC:CMS REST API
  • API Token for authentication
  • vSEC:C SREST API Service configured and enabled

Releasenotes: https://github.com/versasec/Azure-Sentinel/blob/master/Solutions/VersasecCMS/Readme.md

De un vistazo

https://store-images.s-microsoft.com/image/apps.24728.49571bd6-e479-4ed6-a8b0-7c1654cc0ed1.e0dbce8d-a03a-4b9b-9019-2cd84fa3e62c.1bdf8e33-538a-4fe9-9a6a-565da2215720