You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/data-connectors-reference.md
+16-7Lines changed: 16 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -367,20 +367,21 @@ See [Microsoft Defender for Cloud](#microsoft-defender-for-cloud).
367
367
368
368
## Azure Information Protection (Preview)
369
369
370
+
> [!NOTE]
371
+
> The Azure Information Protection (AIP) data connector uses the AIP audit logs (public preview) feature. As of **March 18, 2022**, we are sunsetting the AIP analytics and audit logs public preview, and moving forward will be using the [Microsoft 365 auditing solution](/microsoft-365/compliance/auditing-solutions-overview). Full retirement is scheduled for **September 30, 2022**.
372
+
>
373
+
> For more information, see [Removed and retired services](/azure/information-protection/removed-sunset-services#azure-information-protection-analytics).
374
+
>
375
+
376
+
See the [Microsoft Purview Information Protection](#microsoft-purview-information-protection-preview) connector, which will replace this connector.
> The Azure Information Protection (AIP) data connector uses the AIP audit logs (public preview) feature. As of **March 18, 2022**, we are sunsetting the AIP analytics and audit logs public preview, and moving forward will be using the [Microsoft 365 auditing solution](/microsoft-365/compliance/auditing-solutions-overview). Full retirement is scheduled for **September 30, 2022**.
380
-
>
381
-
> For more information, see [Removed and retired services](/azure/information-protection/removed-sunset-services#azure-information-protection-analytics).
382
-
>
383
-
384
385
## Azure Key Vault
385
386
386
387
| Connector attribute | Description |
@@ -1230,6 +1231,14 @@ Add http://localhost:8081/ under **Authorized redirect URIs** while creating [We
1230
1231
|**Log Analytics table(s)**| ProjectActivity |
1231
1232
|**Supported by**| Microsoft |
1232
1233
1234
+
## Microsoft Purview Information Protection (Preview)
|**License prerequisites/<br>Cost information**| Your Office 365 deployment must be on the same tenant as your Microsoft Sentinel workspace.<br>Other charges may apply. |
### Microsoft Purview Information Protection connector (Preview)
22
+
23
+
With the new [Microsoft Purview Information Protection connector](connect-microsoft-purview.md), you can stream data from Microsoft Purview Information Protection (formerly Microsoft Information Protection or MIP) to Microsoft Sentinel. You can use the data ingested from the Microsoft Purview labeling clients and scanners to track, analyze, report on the data, and use it for compliance purposes.
24
+
25
+
This connector replaces the Azure Information Protection (AIP) data connector, aligned with the sunsetting of the AIP analytics and audit logs public preview as of **March 18, 2022**. Full retirement is scheduled for **September 30, 2022**.
26
+
27
+
The new connector streams audit logs into the standardized
28
+
`MicrosoftPurviewInformationProtection` table, which has been adjusted to enhance the deprecated schema used by AIP, with more fields and easier access to parameters. Data is gathered through the [Office Management API](/office/office/office-365-management-api/office-365-management-activity-api-schema), which uses a structured schema. Review the list of supported [audit log record types and activities](microsoft-purview-record-types-activities.md).
29
+
19
30
## December 2022
20
31
21
32
-[Create and run playbooks on entities on-demand (Preview)](#create-and-run-playbooks-on-entities-on-demand-preview)
0 commit comments