Échangeons
← Sentinel Explorer
↳ Source GitHubConnecteur

Authomize Data Connector

Voir sur GitHub ↗Fichier original ↗

Description

The Authomize Data Connector provides the capability to ingest custom log types from Authomize into Microsoft Sentinel.
Statut déclaré
1
Auteur / éditeur déclaré
Authomize

Sources déclarées

Métadonnées du fichier source. Aucune dépendance déduite du KQL.

Types de données

Authomize_v2_CL

Permissions déclarées

read and write permissions are required.
Workspace
Workspace
read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key).
Keys
Workspace
Include custom pre-requisites if the connectivity requires - else delete customs
Description for any custom pre-requisite

Instructions du connecteur

Contenu publié dans le dépôt. Consultez le fichier original pour l’ensemble des paramètres.

1. Locate your Authomize API key
Follow the setup instructions [located under Data Connectors for Authomize](https://github.com/authomize/Open-ITDR/blob/main/Open-Connectors/Platform/Azure-Sentinel/Data%20Connectors/readme.md).
2. Deploy the Authomize data connector using the setup instructions.
Follow the Instructions on [deploying the data connector to ingest data from Authomize](https://github.com/authomize/Open-ITDR/blob/main/Open-Connectors/Platform/Azure-Sentinel/Data%20Connectors/readme.md).
3. Finalize your setup
Validate that your script is running. Simple instructions are located under the [Authomize Data Connector area](https://github.com/authomize/Open-ITDR/blob/main/Open-Connectors/Platform/Azure-Sentinel/Data%20Connectors/readme.md).

Contenus associés

Liens établis à partir des identifiants déclarés et des manifests des solutions.

Règles analytiques21
Access to AWS without MFAMediumAdmin password not updated in 30 daysMediumAdmin SaaS account detectedLowAWS role with admin privilegesHighAWS role with shadow admin privilegesHighDetect AWS IAM UsersHighEmpty group with entitlementsInformationalIaaS admin detectedMediumIaaS policy not attached to any identityInformationalIaaS shadow admin detectedHighLateral Movement Risk - Role Chain LengthInformationalNew direct access policy was granted against organizational policyLowNew service account gained access to IaaS resourceInformationalPassword Exfiltration over SCIM applicationHighPrivileged Machines Exposed to the InternetHighRefactor AWS policy based on activities in the last 60 daysHighStale AWS policy attachment to identityLowStale IAAS policy attachment to roleInformationalUnused IaaS PolicyHighUser assigned to a default admin roleHighUser without MFAMedium
Solutions1

Traçabilité de la source

GitHub

Les valeurs affichées proviennent des fichiers du dépôt Azure/Azure-Sentinel. Elles décrivent le modèle publié, pas la configuration de votre workspace.

Identifiant source
Authomize
Autres fichiers source 2Solutions/Authomize/Data Connectors/AuthomizeCustomConnector.jsonsource ↗Solutions/Authomize/Data/Solution_Authomize.jsonsolution-membership ↗
GSTEP / SUIVI DU CATALOGUE

Ajouté au catalogue : 16 sept. 2026 · 05:49 UTC
Dernier changement observé : 16 sept. 2026 · 05:49 UTC

Dates de synchronisation GSTEP, distinctes des dates de publication du contenu source.