Merge pull request #263625 from MartinPankraz/update-sap-mde-guidance

Update-sap-mde-guidance

Author: PMEds28

articles/sap/workloads/integration-get-started.md

@@ -241,7 +241,7 @@ The [Defender product family](../../defender-for-cloud/defender-for-cloud-introd
 
 - Defender for Servers (SAP hosts)
     - [Protect your SAP hosts with Defender](../../defender-for-cloud/defender-for-servers-introduction.md) including OS specific Endpoint protection with Microsoft Defender for Endpoint (MDE)
-    - [Microsoft Defender for Endpoint on Linux](/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-linux)
+    - [Microsoft Defender for Endpoint on Linux](/microsoft-365/security/defender-endpoint/mde-linux-deployment-on-sap)
     - [Microsoft Defender for Endpoint on Windows](/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint)
     - [Enable Defender for Servers](../../defender-for-cloud/tutorial-enable-servers-plan.md#enable-the-defender-for-servers-plan)
 - Defender for Storage (SAP SMB file shares on Azure)

articles/sentinel/sap/deployment-overview.md

@@ -36,7 +36,11 @@ Microsoft Sentinel solution for SAP® applications is certified for SAP S/4HANA
 > - Microsoft Sentinel identifies a production system by looking at the configuration on the SAP system. To do this, Microsoft Sentinel searches for a production entry in the T000 table. 
 > - [View the roles of your connected production systems](../monitor-sap-system-health.md).
 
-The Microsoft Sentinel for SAP data connector is an agent, installed on a VM or a physical server that collects application logs from across the entire SAP system landscape. It then sends those logs to your Log Analytics workspace in Microsoft Sentinel. You can then use the other content in the Threat Monitoring for SAP solution – the analytics rules, workbooks, and watchlists – to gain insight into your organization's SAP environment and to detect and respond to security threats.
+The Microsoft Sentinel for SAP data connector is an agent, installed on a VM, a physical server, or a Kubernetes cluster that collects application logs from across the entire SAP system landscape for all of your SAP SIDs. It then sends those logs to your Log Analytics workspace in Microsoft Sentinel. You can then use the other content in the Threat Monitoring for SAP solution – the analytics rules, workbooks, and watchlists – to gain insight into your organization's SAP environment and to detect and respond to security threats.
+
+:::image type="complex" source="./media/deployment-overview/sap-sentinel-multi-sid-overview.png" alt-text="Architecture overview showcasing multi-SID protection from Sentinel for production and non-production systems. Additionally it shows the integration with SAP Business Technology Platform":::
+   This diagram shows a multi-SID SAP landscape with a split between productive and non-productive systems including the SAP Business Technology Platform. All of the systems and services are being onboarded to the Sentinel for SAP solution.
+:::image-end:::
 
 ## Deployment milestones
 

articles/sentinel/sap/media/deployment-overview/sap-sentinel-multi-sid-overview.png

@@ -23,8 +23,14 @@ To help close this gap, Microsoft Sentinel offers the Microsoft Sentinel solutio
 
 - It also allows you to build automated response processes to interact with your SAP systems to stop active security threats.
 
+- In addition to that it offers threat monitoring and detection for SAP Business Technology Platform.
+
 ## Solution details
 
+:::image type="complex" source="./media/deployment-overview/sap-sentinel-multi-sid-overview.png" alt-text="Architecture overview showcasing multi-SID protection from Sentinel for production and non-production systems. Additionally it shows the integration with SAP Business Technology Platform":::
+   This diagram shows a multi-SID SAP landscape with a split between productive and non-productive systems including the SAP Business Technology Platform. All of the systems and services are being onboarded to the Sentinel for SAP solution.
+:::image-end:::
+
 ### Log sources
 
 The solution's data connector retrieves a wide variety of SAP Log Sources:
@@ -107,6 +113,7 @@ Learn more about the Microsoft Sentinel solution for SAP® applications:
 - [Deploy the Microsoft Sentinel for SAP data connector with SNC](configure-snc.md)
 - [Enable and configure SAP auditing](configure-audit.md)
 - [Collect SAP HANA audit logs](collect-sap-hana-audit-logs.md)
+- [Deploy Microsoft Sentinel Solution for SAP® BTP](deploy-sap-btp-solution.md)
 
 Troubleshooting: