跳到主内容
Microsoft
separator
Products
Alibaba Cloud Networking
https://catalogartifact.azureedge.net/publicartifacts/azuresentinel.azure-sentinel-solution-alibabacloud-networking-84ea276d-897c-42fe-abcb-d22fdd6e5d96/image3_216.png

Alibaba Cloud Networking

作者 Microsoft Sentinel, Microsoft Corporation

Alibaba Cloud Networking

Alibaba Cloud Networking Solution for Microsoft Sentinel

Integrates Alibaba Cloud network data (API Gateway, VPC Flow, WAF) into Microsoft Sentinel for threat detection and investigation in multi-cloud environments.


Overview

This solution provides a Codeless Connector Framework (CCF) based data connector that ingests Alibaba Cloud networking logs into Microsoft Sentinel. It enables security teams to gain visibility into network activity across Alibaba Cloud environments alongside other cloud and on-premises data sources.


Data Sources

Alibaba Cloud network data (API Gateway, VPC Flow, WAF) using the https://www.alibabacloud.com/en/product/log-service

Components

  • CCP Data Connector — Polling-based connector with DCR for log ingestion
  • KQL Parsers — Three alias function parsers normalizing raw logs for each data source:

    • 为何选择 Microsoft 市场 博客 客户案例 办公时间 入门指南 技术文档 专用产品/服务 Microsoft Azure 使用量承诺 计费和开票 成为合作伙伴 成为合作伙伴 获取营销支持 技术文档 有关生成、发布和销售的分步指南 达到联合销售条件 面向合作伙伴的市场社区 渠道主导的市场销售 面向渠道合作伙伴的多方专用产品/服务
      Microsoft AI Microsoft 安全 Azure Dynamics 365 Microsoft 365 Microsoft Advertising Microsoft 365 Copilot Microsoft Teams 招贤纳士 关于 Microsoft 公司新闻 Microsoft 隐私 投资人
      中文（中国）
      你的隐私选择选择退出图标 你的隐私选择
      消费者健康隐私 站点地图 Contact Us 隐私和 Cookie 使用条款 商标 关于我们的广告 管理 Cookie