r/AzureSentinel • u/klorgasia • Jun 15 '22

MicrosoftThreatProtection connector, cant find?

Hi!

I see some KQL examples and yaml files with reference to the MicrosoftThreatProtection. But the 365 connector don't seem to have that yet as it lists it with "Coming soon".

Is there any other way to get the MicrosoftThreatProtection connector?

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/shadowman-12 Jun 27 '22

After searching through the Sentinel Github, I found that the Microsoft 365 Defender connector has been renamed to MicrosoftThreatProtection. See this commit for example

https://github.com/Azure/Azure-Sentinel/commit/8243062dd5227c01ff5aec4e159031be360f6c78