How To Integrate Microsoft Sentinel

Prerequisites 

• For integrating Microsoft Sentinel project to CloudDefense platform, you will need Microsoft Sentinel Workspace Credentials.

In order to create new integration with your organization’s Microsoft Sentinel account, please consider the following guidelines.

Step 1:

Log into CloudDefense.AI Portal

Step 2:

After logging in, open the Left Navigation Bar, go to Admin, and select Integrations.

Step 3:

Once you get into Integrations, you will find Microsoft Sentinel there.

Now, here are the steps to integrate Microsoft Sentinel with CloudDefense.AI:

• Click on the Connect Integration located at the bottom right corner.
  
  

• After clicking on Connect Integration, you need to complete a two-step process to integrate Microsoft Sentinel.
  
  

1. Workspace Info: Provide a Subscription Id, a Workspace Resource Id, and a Tenant Id.
   
   
   

2. Credentials: Provide the Client ID of Sentinel account and Client Secret.
   
   
   

• Once you are done with adding the Workspace Info and Credentials, click on the INTEGRATE button.

Your Microsoft Sentinel account is now successfully integrated with CloudDefense.AI. 

How to Get Workspace Credentials

To integrate Microsoft Sentinel, you'll need to follow these steps:

1. Azure Subscription: To create a Microsoft Sentinel workspace, ensure you have an active Azure subscription. You can use the same subscription that is being used during the onboarding process of Azure on CloudDefense.AI.

2. Create Azure App Registration: You'll need to create an Azure app registration. Follow the instructions in this guide.
   
   

3. Assign Microsoft Sentinel Contributor Role: After creating the Azure app, you need to add the Microsoft Sentinel Contributor role to it.
   
   

4. Create Workspace: Finally, create a workspace for Microsoft Sentinel.

For more detailed instructions, refer to the Microsoft Sentinel Quickstart Guide.