↳ GitHub sourceConnector

Filewall for Microsoft 365

View on GitHub ↗Original file ↗

Description

Ingest events from Filewall into Microsoft Sentinel (Exchange, SharePoint, OneDrive and Teams).

Declared author / publisher: Filewall

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

{{graphQueriesTableName}}FilewallFile_CL

Declared permissions

Read and Write permissions are required.

Workspace

Workspace

Filewall API access

A Filewall API key is required.

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Click **Add connection**, paste your Filewall API key, and click **Connect**. This will create 4 polling connections (Exchange, SharePoint, OneDrive, Teams).

Add connection

API Endpoint URL

Filewall API Key

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/Filewall for Microsoft 365/Data Connectors/FilewallM365Logs_CCP/FilewallM365_ConnectorDefinition.json ↗
Commit: 629d1d3 ↗
Source identifier: FilewallM365

Additional source files 2

Solutions/Filewall for Microsoft 365/Data Connectors/FilewallM365Logs_CCP/FilewallM365_ConnectorDefinition.jsonsource ↗Solutions/Filewall for Microsoft 365/Data/Solution_FilewallM365.jsonsolution-membership ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.