links

Author: EdB-MSFT

articles/security/fundamentals/feature-availability.md

@@ -258,7 +258,7 @@ Office 365 GCC is paired with Microsoft Entra ID in Azure. Office 365 GCC High a
 | - Office 365 GCC | Public Preview | - |
 | - Office 365 GCC High | - | Not Available |
 | - Office 365 DoD | - | Not Available |
-| **[Microsoft Defender for Office 365](../../sentinel/data-connectors-reference.md#microsoft-defender-for-office-365)** |  |  |
+| **[Microsoft Defender for Office 365](../../sentinel/data-connectors-reference.md#microsoft-defender-for-office-365-preview)** |  |  |
 | - Office 365 GCC | Public Preview | - |
 | - Office 365 GCC High | - | Not Available |
 | - Office 365 DoD | - | Not Available |
@@ -270,7 +270,7 @@ Office 365 GCC is paired with Microsoft Entra ID in Azure. Office 365 GCC High a
 | - Office 365 GCC | Public Preview | - |
 | - Office 365 GCC High | - | Not Available |
 | - Office 365 DoD | - | Not Available |
-| **[Office 365](../../sentinel/data-connectors-reference.md#office-365)** |  |  |
+| **[Office 365](../../sentinel/data-connectors-reference.md#microsoft-365-formerly-office-365)** |  |  |
 | - Office 365 GCC | GA | - |
 | - Office 365 GCC High | - | GA |
 | - Office 365 DoD | - | GA |

articles/sentinel/TOC.yml

@@ -325,7 +325,7 @@
     - name: Purview Information Protection data
       href: connect-microsoft-purview.md
     - name: Windows security events
-      href: data-connectors/windows-security-events-via-ama.md
+      href: data-connectors-reference.md#windows-security-events-via-ama
   - name: Configure ingestion-time transformation
     href: configure-data-transformation.md
   - name: Configure RDP login detection

articles/sentinel/cisco-ftd-firewall.md

@@ -15,7 +15,7 @@ Microsoft Sentinel provides two connectors that collect logs from Cisco Firepowe
 
 ## Collect logs from a Cisco FTD ASA firewall device
 
-To collect logs from FTD ASA firewall devices, use the [Cisco ASA/FTD via AMA (Preview) connector](../sentinel/data-connectors-reference.md#cisco-asa-ftd-via-ama). 
+To collect logs from FTD ASA firewall devices, use the [Cisco ASA/FTD via AMA (Preview) connector](../sentinel/data-connectors-reference.md#cisco-asaftd-via-ama-preview). 
 
 ## Collect logs from a Cisco FTD FXOS firewall device
 

articles/sentinel/data-transformation.md

@@ -68,7 +68,7 @@ The following table describes DCR support for Microsoft Sentinel data connector
 
 | Data connector type | DCR support |
 | ------------------- | ----------- |
-| [**Azure Monitor agent (AMA) logs**](connect-services-windows-based.md), such as: <li>[Windows Security Events via AMA](./data-connectors-reference.md#windows-security-events-via-ama)<li>[Windows Forwarded Events](./data-connectors/windows-forwarded-events)<li>[CEF data](connect-cef-ama.md)<li>[Syslog data](connect-cef-syslog.md) | One or more DCRs associated with the agent |
+| [**Azure Monitor agent (AMA) logs**](connect-services-windows-based.md), such as: <li>[Windows Security Events via AMA](./data-connectors-reference.md#windows-security-events-via-ama)<li>[Windows Forwarded Events](./data-connectors-reference.md#windows-forwarded-events)<li>[CEF data](connect-cef-ama.md)<li>[Syslog data](connect-cef-syslog.md) | One or more DCRs associated with the agent |
 | **Direct ingestion via [Logs ingestion API](/azure/azure-monitor/logs/logs-ingestion-api-overview)** | DCR specified in API call |
 | **Built-in, API-based data connector**, such as: <li>[Codeless data connectors](create-codeless-connector.md) | DCR created for connector |
 | [**Diagnostic settings-based connections**](connect-services-diagnostic-setting-based.md) | Workspace transformation DCR with [supported output tables](/azure/azure-monitor/logs/tables-feature-support) |

articles/sentinel/feature-availability.md

@@ -58,12 +58,12 @@ For more information, see [Microsoft Defender XDR for US Government customers](/
 |[Azure Activity](data-connectors-reference.md#azure-activity) |GA |✅| ✅|✅ |
 |[Azure DDoS Protection](connect-services-diagnostic-setting-based.md) |GA |✅| ✅|❌ |
 |[Azure Firewall](data-connectors-reference.md#azure-firewall) |GA |✅| ✅|✅ |
-|[Azure Information Protection (Preview)](data-connectors-reference.md#azure-information-protection) |Deprecated |❌ |❌ |❌ |
+|[Azure Information Protection (Preview)](data-connectors-reference.md#microsoft-purview-information-protection) |Deprecated |❌ |❌ |❌ |
 |[Azure Key Vault](data-connectors-reference.md#azure-key-vault) |Public preview |✅ |✅|✅ |
 |[Azure Kubernetes Service (AKS)](data-connectors-reference.md#azure-kubernetes-service-aks) |Public preview |✅| ✅|✅ |
 |[Azure SQL Databases](https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/azure-sentinel-sql-solution-query-deep-dive/ba-p/2597961) |GA |✅ |✅|✅ |
 |[Azure Web Application Firewall (WAF)](data-connectors-reference.md#azure-web-application-firewall-waf) |GA |✅ |✅|✅ |
-|[Cisco ASA](data-connectors-reference.md#cisco-asa) |GA |✅ |✅|✅ |
+|[Cisco ASA](data-connectors-reference.md#cisco-asaftd-via-ama-preview) |GA |✅ |✅|✅ |
 |[Codeless Connectors Platform](create-codeless-connector.md?tabs=deploy-via-arm-template%2Cconnect-via-the-azure-portal) |Public preview |✅ |❌|❌ |
 |[Common Event Format (CEF)](connect-common-event-format.md) |GA |✅ |✅|✅ |
 |[Common Event Format (CEF) via AMA](connect-cef-syslog-ama.md) |GA |✅|✅  |✅ |

articles/sentinel/sentinel-content-centralize.md

@@ -54,7 +54,7 @@ The key to experiencing the updated behavior is to start in **Content hub**. For
 
 For more information on the new solution content behavior, see [Discover and deploy OOTB content](sentinel-solutions-deploy.md#enable-content-items-in-a-solution).
 
-If there was a particular sample query for a third party data connector you are looking for, we still publish them in our **All connectors** index. For example, here are the sample queries for the [Jamf Protect connector](data-connectors-reference.md#jamf-protect).
+If there was a particular sample query for a third party data connector you are looking for, we still publish them in our **All connectors** index. For example, here are the sample queries for the [Jamf Protect connector](data-connectors-reference.md#jamf-protect-push-connector).
 
 ## Microsoft Sentinel GitHub changes
 

articles/sentinel/use-matching-analytics-to-detect-threats.md

@@ -38,10 +38,10 @@ You must install one or more of the supported data connectors to produce high-fi
 
   |Solution |Data connector  |
   |---------|---------|
-  |[Common Event Format solution for Sentinel](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-commoneventformat?tab=Overview) | [Common Event Format connector for Microsoft Sentinel](data-connectors-reference.md#common-event-format-cef)|
-  |[Windows Server DNS](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-dns?tab=Overview)  |[DNS connector for Microsoft Sentinel](data-connectors-reference.md#dns) |
-  |[Syslog solution for Sentinel](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-syslog?tab=Overview)  |[Syslog connector for Microsoft Sentinel](data-connectors-reference.md#syslog)  |
-  |[Microsoft 365 solution for Sentinel](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-office365?tab=Overview) | [Office 365 connector for Microsoft Sentinel](data-connectors-reference.md#office-365)    |
+  |[Common Event Format solution for Sentinel](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-commoneventformat?tab=Overview) | [Common Event Format connector for Microsoft Sentinel](data-connectors-reference.md#syslog-and-common-event-format-cef-connectors)
+  |[Windows Server DNS](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-dns?tab=Overview)  |[DNS connector for Microsoft Sentinel](connect-dns-ama.md) |
+  |[Syslog solution for Sentinel](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-syslog?tab=Overview)  |[Syslog connector for Microsoft Sentinel](cef-syslog-ama-overview.md)  |
+  |[Microsoft 365 solution for Sentinel](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-office365?tab=Overview) | [Office 365 connector for Microsoft Sentinel](data-connectors-reference.md#microsoft-365-formerly-office-365)    |
   |[Azure Activity solution for Sentinel](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-azureactivity?tab=Overview)    |  [Azure Activity connector for Microsoft Sentinel](data-connectors-reference.md#azure-activity)   |
   |[Windows Firewall](https://azuremarketplace.microsoft.com/marketplace/apps/azuresentinel.azure-sentinel-solution-windowsfirewall?tab=Overview)  | [Windows Firewall Events via AMA connector](data-connectors-reference.md#windows-firewall-events-via-ama)  |
 

articles/sentinel/windows-security-event-id-reference.md

@@ -13,7 +13,7 @@ ms.author: yelevin
 
 # Windows security event sets that can be sent to Microsoft Sentinel
 
-When ingesting security events from Windows devices using the [Windows Security Events data connector](data-connectors-reference.md#windows-security-events-via-ama) (including the [legacy version](data-connectors-reference.md#security-events-via-legacy-agent)), you can choose which events to collect from among the following sets:
+When ingesting security events from Windows devices using the [Windows Security Events data connector](data-connectors-reference.md#windows-security-events-via-ama) (including the legacy version), you can choose which events to collect from among the following sets:
 
 - **All events** - All Windows security and AppLocker events.