You can configure collecting Microsoft 365 (Posture) logs using a Cloud Posture and Runtime Security data source or connector:
| Collection Method | Description |
| ------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Cloud Posture and Runtime Security data source overview | Forward Microsoft 365 (Postrure) logs to Cortex XSIAM using the Microsoft 365 data source. |
| Link to Cloud Posture and Runtime Security data source instructions | [How to onboard Microsoft 365](broken-reference) |
| Link to connector details | <p>• <a href="broken-reference">Microsoft 365</a><br>• <a href="microsoft-office-365/microsoft365-legacy">Microsoft365</a><br>• <a href="microsoft-entra-id">Microsoft Entra ID</a></p> |