↳ GitHub sourceSolution

Forescout (Legacy)

Description

The [Forescout](https://www.forescout.com/) solution provides the capability to ingest [Forescout events](https://docs.forescout.com/bundle/syslog-3-6-1-h/page/syslog-3-6-1-h.How-to-Work-with-the-Syslog-Plugin.html) into Microsoft Sentinel. **NOTE:** This is a legacy solution. Microsoft recommends installing the [Forescout eyeExtend](https://azuremarketplace.microsoft.com/en-US/marketplace/apps/forescout.azure-sentinel-solution-forescout) solution instead to get the latest security monitoring content offered by Forescout.
Version
3.0.0
Declared author / publisher
Microsoft - support@microsoft.com
Support tier
Microsoft

Related content

Links established from declared identifiers and solution manifests.

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
azure-sentinel-solution-forescout
Additional source files 2Solutions/Forescout (Legacy)/Data/Solution_Forescout.jsonsolution-manifest ↗Solutions/Forescout (Legacy)/SolutionMetadata.jsonsolution-metadata ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.