SOX IT Compliance Solution

[Alekhya0824]

Required items, please complete

Change(s):

Adding New Solution - SOX IT Compliance
Reason for Change(s):

Adding New Solution - SOX IT Compliance
Version Updated:

3.0.0
Testing Completed:

Yes
Checked that the validations are passing and have addressed any issues that are present:

Yes

[Copilot]

Pull request overview

This pull request adds metadata for a new "SOX IT Compliance" workbook to the Microsoft Sentinel workbooks collection. The workbook aims to help organizations monitor, validate, and report on Sarbanes-Oxley (SOX) IT General Controls (ITGC) by consolidating data from multiple Azure and Microsoft 365 security and audit sources.

Key Changes

• Added a new workbook metadata entry for "SOX IT Compliance" solution
• Configured data dependencies for 10 data types including SigninLogs, AuditLogs, SecurityEvent, BehaviorAnalytics, and SQL audit logs
• Specified 6 data connector dependencies including Azure Active Directory, Defender for Identity, and Azure SQL

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The indentation in this new entry uses spaces instead of tabs, which is inconsistent with the rest of the file. All other entries in this file use tabs for indentation. This indentation should be changed to use tabs to maintain consistency with the existing codebase.

Suggested change

	"BehaviorAnalytics",
	"AzureActivity",
	"OfficeActivity",
	"SecurityAlert",
	"SecurityIncident",
	"SqlAuditLogs",
	"SqlSecurityAuditEvents"
	],
	"dataConnectorsDependencies": [
	"AzureActiveDirectory",
	"MicrosoftDefenderForIdentity",
	"AzureActivityLog",
	"Office365",
	"WindowsSecurityEvents",
	"AzureSql"
	],
	"previewImagesFileNames": [
	"SOXITComplianceWhite.png",
	"SOXITComplianceBlack.png"
	],
	"version": "1.0.0",
	"title": "SOX IT Compliance",
	"templateRelativePath": "SOXITCompliance.json",
	"subtitle": "",
	"provider": "Microsoft"
	}
	"BehaviorAnalytics",
	"AzureActivity",
	"OfficeActivity",
	"SecurityAlert",
	"SecurityIncident",
	"SqlAuditLogs",
	"SqlSecurityAuditEvents"
	],
	"dataConnectorsDependencies": [
	"AzureActiveDirectory",
	"MicrosoftDefenderForIdentity",
	"AzureActivityLog",
	"Office365",
	"WindowsSecurityEvents",
	"AzureSql"
	],
	"previewImagesFileNames": [
	"SOXITComplianceWhite.png",
	"SOXITComplianceBlack.png"
	],
	"version": "1.0.0",
	"title": "SOX IT Compliance",
	"templateRelativePath": "SOXITCompliance.json",
	"subtitle": "",
	"provider": "Microsoft"
	}