Échangeons
← Sentinel Explorer
↳ Source GitHubConnecteur

Pathlock Threat Detection and Response Integration

Voir sur GitHub ↗Fichier original ↗

Une incohérence a été détectée dans les sources : variantes ou fichier invalide. Vérifiez les fichiers et le commit indiqués ci-dessous.

Description

Pathlock Threat Detection and Response enables seamless forwarding of security alerts and logs detected and collected by the Pathlock Platform into Microsoft Sentinel Solution for SAP.
Auteur / éditeur déclaré
Pathlock Inc.

Sources déclarées

Métadonnées du fichier source. Aucune dépendance déduite du KQL.

Types de données

{{graphQueriesTableName}}

Permissions déclarées

Read and Write permissions are required.
Workspace
Workspace
Read permissions to shared keys for the workspace are required.
Keys
Workspace
Microsoft Entra
Permission to create an app registration in Microsoft Entra ID. Typically requires Entra ID Application Developer role or higher.
Microsoft Azure
Permission to assign Monitoring Metrics Publisher role on data collection rules. Typically requires Azure RBAC Owner or User Access Administrator role.

Instructions du connecteur

Contenu publié dans le dépôt. Consultez le fichier original pour l’ensemble des paramètres.

1. Create ARM Resources and Provide the Required Permissions
We will create data collection rule (DCR) and data collection endpoint (DCE) resources. We will also create a Microsoft Entra app registration and assign the required permissions to it.
Deploy push connector resources
2. Maintain the data collection endpoint details and authentication info in Pathlock Threat Detection and Response
Share the data collection endpoint URL and authentication info with the Pathlock Threat Detection and Response Integration administrator to configure the Integration.
Use this value to configure as Tenant ID in the LogIngestionAPI credential.
Entra Application ID
Entra Application Secret
Use this value to configure the LogsIngestionURL parameter.
DCR Immutable ID

Contenus associés

Liens établis à partir des identifiants déclarés et des manifests des solutions.

Règles analytiques77
Pathlock TDnR - ABAP Runtime DumpsMediumPathlock TDnR - ABAP Source Code ChangesHighPathlock TDnR - Authorization Check Value Changes (SU24)HighPathlock TDnR - Authorization Profile ChangesHighPathlock TDnR - Authorization Role ChangesHighPathlock TDnR - Bank Master Data ChangesHighPathlock TDnR - Business Partner Bank Data ChangesHighPathlock TDnR - Credit Card Data ChangesHighPathlock TDnR - Critical File Integrity ChangesHighPathlock TDnR - CUA Settings ChangesMediumPathlock TDnR - Database Cockpit Audit EventsMediumPathlock TDnR - DDIC Table Utility Changes (SE14)HighPathlock TDnR - Debitor Change DocumentsMediumPathlock TDnR - Dynamic Access Control EventsHighPathlock TDnR - Emergency User (AdminTrack) ActivityHighPathlock TDnR - Function Module Tested in ProductionHighPathlock TDnR - G/L Account ChangesMediumPathlock TDnR - Generic SAP Change DocumentsMediumPathlock TDnR - Generic Table Content ChangesHighPathlock TDnR - Global System Change Setting EventsHighPathlock TDnR - GRC Access Control Change DocumentsMediumPathlock TDnR - HANA Standalone DB Connection EventsMediumPathlock TDnR - HR User Master Change RequestsMediumPathlock TDnR - IBAN Change DocumentsHighPathlock TDnR - ICF Web Service ChangesHighPathlock TDnR - ICM Security EventsMediumPathlock TDnR - J2EE Security Audit EventsMediumPathlock TDnR - J2EE Security EventsMediumPathlock TDnR - Kerberos Keytab ChangesHighPathlock TDnR - LDAP Synchronization Application Log EventsMediumPathlock TDnR - Logical OS Command ChangesHighPathlock TDnR - Missing SAP Security NotesMediumPathlock TDnR - Multiple Login Sessions DetectedMediumPathlock TDnR - OData Application Log EventsMediumPathlock TDnR - Outbound SAP SMTP EmailMediumPathlock TDnR - Outgoing Spool Print Job EventsMediumPathlock TDnR - Pathlock Security Radar Internal EventsMediumPathlock TDnR - Payment Request ChangesMediumPathlock TDnR - RFC Connection ChangesHighPathlock TDnR - RiskTrack Audit ResultsHighPathlock TDnR - SAP Authorization ChangesHighPathlock TDnR - SAP Batch Job EventsMediumPathlock TDnR - SAP BTP Cloud Foundry EventsMediumPathlock TDnR - SAP Client Configuration ChangesHighPathlock TDnR - SAP Cloud Account Administration EventsMediumPathlock TDnR - SAP Cloud Connector EventsMediumPathlock TDnR - SAP Download Observer EventsMediumPathlock TDnR - SAP HANA Database Audit TrailMediumPathlock TDnR - SAP HANA Parameter ChangesMediumPathlock TDnR - SAP HTTP Webserver EventsMediumPathlock TDnR - SAP Instance Profile ChangesHighPathlock TDnR - SAP Public Cloud Security Audit EventsMediumPathlock TDnR - SAP Read Access Logging AuditMediumPathlock TDnR - SAP Read Access Logging DataMediumPathlock TDnR - SAP RFC Gateway EventsMediumPathlock TDnR - SAP Router Log EventsMediumPathlock TDnR - SAP Security Audit Log EventsHighPathlock TDnR - SAP System Job Monitoring EventsMediumPathlock TDnR - SAP System Log EventsMediumPathlock TDnR - SAP Web Dispatcher HTTP EventsMediumPathlock TDnR - SE16N Direct Table Change DocumentsHighPathlock TDnR - Spool Job ChangesMediumPathlock TDnR - STRUST PSE Certificate ChangesHighPathlock TDnR - SU24 Table USOBT_C ChangesMediumPathlock TDnR - SU24 Table USOBX_C ChangesMediumPathlock TDnR - Switchable Authorization Design ChangesHighPathlock TDnR - Switchable Authorization Runtime ChangesHighPathlock TDnR - System Security Policy ChangesHighPathlock TDnR - Table Parameter Setting ChangesHighPathlock TDnR - TMS Transport and Import EventsHighPathlock TDnR - Transaction and Report StatisticsMediumPathlock TDnR - User Access Management Password ResetsMediumPathlock TDnR - User Authorization Buffer ManipulationHighPathlock TDnR - User Master Data ChangesHighPathlock TDnR - User-Profile Assignment ChangesHighPathlock TDnR - User-Role Assignment ChangesHighPathlock TDnR - Vendor Change DocumentsMedium

Traçabilité de la source

GitHub

Les valeurs affichées proviennent des fichiers du dépôt Azure/Azure-Sentinel. Elles décrivent le modèle publié, pas la configuration de votre workspace.

Identifiant source
Pathlock_TDnR
Autres fichiers source 1Solutions/Pathlock_TDnR/Data Connectors/Pathlock_TDnR.jsonsource ↗
GSTEP / SUIVI DU CATALOGUE

Ajouté au catalogue : 16 sept. 2026 · 05:49 UTC
Dernier changement observé : 16 sept. 2026 · 05:49 UTC

Dates de synchronisation GSTEP, distinctes des dates de publication du contenu source.