Microsoft 365 (Posture)

You can configure collecting Microsoft 365 (Posture) logs using a Cloud Posture and Runtime Security data source or connector:

Collection Method Description
Cloud Posture and Runtime Security data source overview Forward Microsoft 365 (Postrure) logs to Cortex XSIAM using the Microsoft 365 data source.
Link to Cloud Posture and Runtime Security data source instructions How to onboard Microsoft 365
Link to connector details <p>• Microsoft 365
Microsoft365
Microsoft Entra ID</p>