Skip to content

Commit 64f4310

Browse files
committed
Adding changes to what's new and find your connector pages
1 parent e39518e commit 64f4310

File tree

2 files changed

+27
-7
lines changed

2 files changed

+27
-7
lines changed

articles/sentinel/data-connectors-reference.md

Lines changed: 16 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -367,20 +367,21 @@ See [Microsoft Defender for Cloud](#microsoft-defender-for-cloud).
367367

368368
## Azure Information Protection (Preview)
369369

370+
> [!NOTE]
371+
> The Azure Information Protection (AIP) data connector uses the AIP audit logs (public preview) feature. As of **March 18, 2022**, we are sunsetting the AIP analytics and audit logs public preview, and moving forward will be using the [Microsoft 365 auditing solution](/microsoft-365/compliance/auditing-solutions-overview). Full retirement is scheduled for **September 30, 2022**.
372+
>
373+
> For more information, see [Removed and retired services](/azure/information-protection/removed-sunset-services#azure-information-protection-analytics).
374+
>
375+
376+
See the [Microsoft Purview Information Protection](#microsoft-purview-information-protection-preview) connector, which will replace this connector.
377+
370378
| Connector attribute | Description |
371379
| --- | --- |
372380
| **Data ingestion method** | [**Azure service-to-service integration**](connect-azure-windows-microsoft-services.md) |
373381
| **Log Analytics table(s)** | InformationProtectionLogs_CL |
374382
| **DCR support** | Not currently supported |
375383
| **Supported by** | Microsoft |
376384

377-
378-
> [!NOTE]
379-
> The Azure Information Protection (AIP) data connector uses the AIP audit logs (public preview) feature. As of **March 18, 2022**, we are sunsetting the AIP analytics and audit logs public preview, and moving forward will be using the [Microsoft 365 auditing solution](/microsoft-365/compliance/auditing-solutions-overview). Full retirement is scheduled for **September 30, 2022**.
380-
>
381-
> For more information, see [Removed and retired services](/azure/information-protection/removed-sunset-services#azure-information-protection-analytics).
382-
>
383-
384385
## Azure Key Vault
385386

386387
| Connector attribute | Description |
@@ -1230,6 +1231,14 @@ Add http://localhost:8081/ under **Authorized redirect URIs** while creating [We
12301231
| **Log Analytics table(s)** | ProjectActivity |
12311232
| **Supported by** | Microsoft |
12321233
1234+
## Microsoft Purview Information Protection (Preview)
1235+
| Connector attribute | Description |
1236+
| --- | --- |
1237+
| **Data ingestion method** | **Azure service-to-service integration: <br>[API-based connections](connect-microsoft-purview.md)** |
1238+
| **License prerequisites/<br>Cost information** | Your Office 365 deployment must be on the same tenant as your Microsoft Sentinel workspace.<br>Other charges may apply. |
1239+
| **Log Analytics table(s)** | TBD |
1240+
| **Supported by** | Microsoft |
1241+
12331242
12341243
## Microsoft Sysmon for Linux (Preview)
12351244

articles/sentinel/whats-new.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,17 @@ The listed features were released in the last three months. For information abou
1616

1717
[!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
1818

19+
## January 2023
20+
21+
### Microsoft Purview Information Protection connector (Preview)
22+
23+
With the new [Microsoft Purview Information Protection connector](connect-microsoft-purview.md), you can stream data from Microsoft Purview Information Protection (formerly Microsoft Information Protection or MIP) to Microsoft Sentinel. You can use the data ingested from the Microsoft Purview labeling clients and scanners to track, analyze, report on the data, and use it for compliance purposes.
24+
25+
This connector replaces the Azure Information Protection (AIP) data connector, aligned with the sunsetting of the AIP analytics and audit logs public preview as of **March 18, 2022**. Full retirement is scheduled for **September 30, 2022**.
26+
27+
The new connector streams audit logs into the standardized
28+
`MicrosoftPurviewInformationProtection` table, which has been adjusted to enhance the deprecated schema used by AIP, with more fields and easier access to parameters. Data is gathered through the [Office Management API](/office/office/office-365-management-api/office-365-management-activity-api-schema), which uses a structured schema. Review the list of supported [audit log record types and activities](microsoft-purview-record-types-activities.md).
29+
1930
## December 2022
2031

2132
- [Create and run playbooks on entities on-demand (Preview)](#create-and-run-playbooks-on-entities-on-demand-preview)

0 commit comments

Comments
 (0)