Contrast ADR for Azure Sentinel
door Contrast Security
Stream detected and blocked attacks from your application runtime into Microsoft Sentinel.
The Contrast Application Detection and Response (ADR) integration enriches Microsoft Sentinel by delivering vital application and API intelligence. Contrast ADR seamlessly integrates with Sentinel, providing a rich stream of actionable runtime telemetry directly from live applications and APIs. By observing internal application activity, Contrast delivers high-fidelity insights about probes, application abnormalities, and exploit attempts, complementing Sentinel’s broad data collection. This enriched data appears alongside Sentinel's ingested logs, allowing analysts to directly correlate infrastructure events with application-level security observations.
This deep integration empowers security teams using Microsoft Sentinel to:
Elevate Threat Detection: Pinpoint application-specific threats with greater accuracy by correlating Contrast's accurate application insights with Sentinel's broader security data.
Streamline Incident Response: Accelerate investigation and remediation using precise, contextual data from Contrast within Sentinel, supported by Contrast's guided runbooks for expert handling of application threats.
Maximize SOC Efficiency: Enable focused investigation of verified, high-priority application threats with Contrast’s context-rich alerts and actionable guidance.
Includes:
- 1 Data Connector
- 2 Parsers
- 6 Analytics Rules
- 9 Workbooks