Get in touch
← Sentinel Explorer
↳ GitHub sourceConnector

Pathlock Threat Detection and Response Integration

View on GitHub ↗Original file ↗

An inconsistency was detected in the sources: variants or an invalid file. Check the files and commit shown below.

Description

Pathlock Threat Detection and Response enables seamless forwarding of security alerts and logs detected and collected by the Pathlock Platform into Microsoft Sentinel Solution for SAP.
Declared author / publisher
Pathlock Inc.

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

{{graphQueriesTableName}}

Declared permissions

Read and Write permissions are required.
Workspace
Workspace
Read permissions to shared keys for the workspace are required.
Keys
Workspace
Microsoft Entra
Permission to create an app registration in Microsoft Entra ID. Typically requires Entra ID Application Developer role or higher.
Microsoft Azure
Permission to assign Monitoring Metrics Publisher role on data collection rules. Typically requires Azure RBAC Owner or User Access Administrator role.

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

1. Create ARM Resources and Provide the Required Permissions
We will create data collection rule (DCR) and data collection endpoint (DCE) resources. We will also create a Microsoft Entra app registration and assign the required permissions to it.
Deploy push connector resources
2. Maintain the data collection endpoint details and authentication info in Pathlock Threat Detection and Response
Share the data collection endpoint URL and authentication info with the Pathlock Threat Detection and Response Integration administrator to configure the Integration.
Use this value to configure as Tenant ID in the LogIngestionAPI credential.
Entra Application ID
Entra Application Secret
Use this value to configure the LogsIngestionURL parameter.
DCR Immutable ID

Related content

Links established from declared identifiers and solution manifests.

Analytics rules77
Pathlock TDnR - ABAP Runtime DumpsMediumPathlock TDnR - ABAP Source Code ChangesHighPathlock TDnR - Authorization Check Value Changes (SU24)HighPathlock TDnR - Authorization Profile ChangesHighPathlock TDnR - Authorization Role ChangesHighPathlock TDnR - Bank Master Data ChangesHighPathlock TDnR - Business Partner Bank Data ChangesHighPathlock TDnR - Credit Card Data ChangesHighPathlock TDnR - Critical File Integrity ChangesHighPathlock TDnR - CUA Settings ChangesMediumPathlock TDnR - Database Cockpit Audit EventsMediumPathlock TDnR - DDIC Table Utility Changes (SE14)HighPathlock TDnR - Debitor Change DocumentsMediumPathlock TDnR - Dynamic Access Control EventsHighPathlock TDnR - Emergency User (AdminTrack) ActivityHighPathlock TDnR - Function Module Tested in ProductionHighPathlock TDnR - G/L Account ChangesMediumPathlock TDnR - Generic SAP Change DocumentsMediumPathlock TDnR - Generic Table Content ChangesHighPathlock TDnR - Global System Change Setting EventsHighPathlock TDnR - GRC Access Control Change DocumentsMediumPathlock TDnR - HANA Standalone DB Connection EventsMediumPathlock TDnR - HR User Master Change RequestsMediumPathlock TDnR - IBAN Change DocumentsHighPathlock TDnR - ICF Web Service ChangesHighPathlock TDnR - ICM Security EventsMediumPathlock TDnR - J2EE Security Audit EventsMediumPathlock TDnR - J2EE Security EventsMediumPathlock TDnR - Kerberos Keytab ChangesHighPathlock TDnR - LDAP Synchronization Application Log EventsMediumPathlock TDnR - Logical OS Command ChangesHighPathlock TDnR - Missing SAP Security NotesMediumPathlock TDnR - Multiple Login Sessions DetectedMediumPathlock TDnR - OData Application Log EventsMediumPathlock TDnR - Outbound SAP SMTP EmailMediumPathlock TDnR - Outgoing Spool Print Job EventsMediumPathlock TDnR - Pathlock Security Radar Internal EventsMediumPathlock TDnR - Payment Request ChangesMediumPathlock TDnR - RFC Connection ChangesHighPathlock TDnR - RiskTrack Audit ResultsHighPathlock TDnR - SAP Authorization ChangesHighPathlock TDnR - SAP Batch Job EventsMediumPathlock TDnR - SAP BTP Cloud Foundry EventsMediumPathlock TDnR - SAP Client Configuration ChangesHighPathlock TDnR - SAP Cloud Account Administration EventsMediumPathlock TDnR - SAP Cloud Connector EventsMediumPathlock TDnR - SAP Download Observer EventsMediumPathlock TDnR - SAP HANA Database Audit TrailMediumPathlock TDnR - SAP HANA Parameter ChangesMediumPathlock TDnR - SAP HTTP Webserver EventsMediumPathlock TDnR - SAP Instance Profile ChangesHighPathlock TDnR - SAP Public Cloud Security Audit EventsMediumPathlock TDnR - SAP Read Access Logging AuditMediumPathlock TDnR - SAP Read Access Logging DataMediumPathlock TDnR - SAP RFC Gateway EventsMediumPathlock TDnR - SAP Router Log EventsMediumPathlock TDnR - SAP Security Audit Log EventsHighPathlock TDnR - SAP System Job Monitoring EventsMediumPathlock TDnR - SAP System Log EventsMediumPathlock TDnR - SAP Web Dispatcher HTTP EventsMediumPathlock TDnR - SE16N Direct Table Change DocumentsHighPathlock TDnR - Spool Job ChangesMediumPathlock TDnR - STRUST PSE Certificate ChangesHighPathlock TDnR - SU24 Table USOBT_C ChangesMediumPathlock TDnR - SU24 Table USOBX_C ChangesMediumPathlock TDnR - Switchable Authorization Design ChangesHighPathlock TDnR - Switchable Authorization Runtime ChangesHighPathlock TDnR - System Security Policy ChangesHighPathlock TDnR - Table Parameter Setting ChangesHighPathlock TDnR - TMS Transport and Import EventsHighPathlock TDnR - Transaction and Report StatisticsMediumPathlock TDnR - User Access Management Password ResetsMediumPathlock TDnR - User Authorization Buffer ManipulationHighPathlock TDnR - User Master Data ChangesHighPathlock TDnR - User-Profile Assignment ChangesHighPathlock TDnR - User-Role Assignment ChangesHighPathlock TDnR - Vendor Change DocumentsMedium

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
Pathlock_TDnR
Additional source files 1Solutions/Pathlock_TDnR/Data Connectors/Pathlock_TDnR.jsonsource ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.