https://catalogartifact.azureedge.net/publicartifacts/cisco.cisco-duo-microsoft-sentinel-880168da-df92-49cc-b84e-d701adef025b/image3_CiscoDuoLogoLockupSolid2colorRGB.png
Cisco Duo for Microsoft Sentinel
par Cisco Systems, Inc.
Just a moment, logging you in...
Stream Cisco Duo logs to Microsoft Sentinel for identity intelligence and automated remediation.
The Cisco Duo connector for Microsoft Sentinel delivers an intelligence-led identity defense. By integrating Duo’s Auth and Admin APIs with Cisco Identity Intelligence, you stream high-fidelity risk signals and device health directly into your SOC.
This enables Microsoft Sentinel to correlate phishing-resistant MFA telemetry with environmental logs to expose sophisticated threats like session hijacking. Use automated Sentinel Playbooks to trigger instant remediation—such as disabling compromised accounts—via Duo’s Admin API. It’s the premier way to unify identity context and security operations for a proactive, resilient, and user-friendly perimeter.