Skip to content

Commit 959bf85

Browse files
cwatson-catkingwil
andauthored
Apply suggestions from code review
Co-authored-by: kingwil <[email protected]>
1 parent 765b3a4 commit 959bf85

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

articles/sentinel/business-applications/deploy-power-platform-solution.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ In Microsoft Sentinel, enable the six data connectors to collect activity logs a
5858

5959
The Power Platform inventory data connector allows you to resolve the GUIDs for Power Platform and PowerApps environments in the incident details to the human readable names that appear in Power Platform admin center and the Power Apps maker portal. We recommend enabling this data connector but it's not required to fully deploy the Microsoft Power Platform solution.
6060

61-
To optimize ingestion, the Power Platform inventory data connector ingests data in full every 14 days and incremental updates daily. The incremental updates only include inventory assets that have changes since the previous day.
61+
To optimize ingestion, the Power Platform inventory data connector ingests data in full every 7 days and incremental updates daily. The incremental updates only include inventory assets that have changes since the previous day.
6262

6363
To collect Power Apps and Power Automate inventory data, deploy the Azure Resource Manager template to create a function app. To complete the deployment, you need the blob service URL for your Azure Data Lake Storage Gen2 storage account. After you create the function app, grant the managed identity for the function app access to the storage account.
6464

articles/sentinel/business-applications/power-platform-solution-security-content.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ This article details the security content available for the Microsoft Sentinel s
1818
1919
## Built-in analytics rules
2020

21-
The following analytic rules are included when you install the solution for Power Platform. The data sources listed include the data connector name and table in Log Analytics. To avoid missing data in the inventory sources, we recommend that you don't change the default lookback of 14 days in the analytic rule templates.
21+
The following analytic rules are included when you install the solution for Power Platform. The data sources listed include the data connector name and table in Log Analytics. To avoid missing data in the inventory sources, we recommend that you don't change the default lookback period defined in the analytic rule templates.
2222

2323
| Rule name | Description | Source action | Tactics |
2424
| --------- | --------- | --------- | --------- |
@@ -39,7 +39,7 @@ The following analytic rules are included when you install the solution for Powe
3939

4040
## Built-in parsers
4141

42-
The solution includes parsers that are used to access data from the raw data tables. Parsers ensure that the correct data is returned with a consistent schema. We recommend that you use the parsers instead of directly querying the inventory tables and watchlists. The Power Platform inventory related parsers return data from the last 14 days.
42+
The solution includes parsers that are used to access data from the raw data tables. Parsers ensure that the correct data is returned with a consistent schema. We recommend that you use the parsers instead of directly querying the inventory tables and watchlists. The Power Platform inventory related parsers return data from the last 7 days.
4343

4444
|Parser |Data returned |Table queried |
4545
|---------|---------|---------|

0 commit comments

Comments
 (0)