Zimperium Mobile Threat Defense CCF

1. Create ARM Resources and Provide the Required Permissions

This connector enables your Zimperium MTD application to push device threats directly to Microsoft Sentinel via the Azure Monitor Ingestion API.

Deploy Zimperium MTD Push connector resources

2. Configure and connect Zimperium MTD

1. In zConsole, click **Account Management** on the navigation bar. 2. Click the **Data Export** side tab. 3. Click the **Add Data Export Configuration** button. 4. Create the Configuration: - **Name:** Name to describe this configuration. - **Description:** Description to describe this configuration. - **Data Type:** Select datatype as _Threats_ or _Incidents_ depending on the data you want to export. - **Destination Type:** From the available destination types, select Microsoft Sentinel. - **Severity Criteria:** Select a Filter Level for the threat data you wish to push to Microsoft Sentinel.(**Note:** This field is applicable only for _threats_ datatype) - **Team Criteria:** This is an optional criterion to filter data based on teams. - **External Tracking Id 1:** This is an optional criterion to match for exported data. - **External Tracking Id 2:** This is an optional criterion to match for exported data. - **Tenant Id:** Enter from the fields below. - **Entra App Registration Application ID:** Enter from the fields below. - **Entra App Registration Secret:** Enter from the fields below. - **Data Collection Endpoint Uri:** Enter from the fields below. - **Data Collection Rule Immutable ID:** Enter from the fields below. - Click **Save Configuration**. 5. For additional instructions, please refer to the [Zimperium customer support portal](https://support.zimperium.com).

Tenant ID (Directory ID)

Entra App Registration Application ID

Entra App Registration Secret

Data Collection Endpoint Uri

Data Collection Rule Immutable ID