Merge pull request #263748 from batamig/mult-sid-2

v-ccolin · web-flow · commit ec0891384af9 · 2024-01-21T08:42:36.000Z
Sentinel mult-sid-view-2
diff --git a/articles/sentinel/sap/configure-audit-log-rules.md b/articles/sentinel/sap/configure-audit-log-rules.md
@@ -1,8 +1,8 @@
 ---
 title: Configure SAP audit log monitoring rules with Microsoft Sentinel
 description: Monitor the SAP audit logs using Microsoft Sentinel built-in analytics rules, to easily manage your SAP logs, reducing noise with no compromise to security value. 
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.date: 08/19/2022
 #Customer.intent: As a security operator, I want to monitor the SAP audit logs and easily manage the logs, so I can reduce noise without compromising security value.
diff --git a/articles/sentinel/sap/configure-snc.md b/articles/sentinel/sap/configure-snc.md
@@ -1,8 +1,8 @@
 ---
 title: Deploy the Microsoft Sentinel for SAP data connector with Secure Network Communications (SNC)  | Microsoft Docs
 description: This article shows you how to deploy the Microsoft Sentinel for SAP data connector to ingest NetWeaver/ABAP logs over a secure connection using Secure Network Communications.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.custom: mvc, ignite-fall-2021
 ms.date: 05/03/2022
diff --git a/articles/sentinel/sap/cross-workspace.md b/articles/sentinel/sap/cross-workspace.md
@@ -1,8 +1,8 @@
 ---
 title: Working with the Microsoft Sentinel solution for SAP® applications across multiple workspaces
 description: This article discusses working with Microsoft Sentinel solution for SAP® applications across multiple workspaces in different scenarios.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: conceptual
 ms.date: 03/22/2023
 ---
diff --git a/articles/sentinel/sap/deploy-sap-btp-solution.md b/articles/sentinel/sap/deploy-sap-btp-solution.md
@@ -1,8 +1,8 @@
 ---
 title: Deploy Microsoft Sentinel Solution for SAP® BTP
 description: This article introduces you to the process of deploying the Microsoft Sentinel Solution for SAP® BTP.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.date: 03/30/2023
 ---
diff --git a/articles/sentinel/sap/deploy-sap-security-content.md b/articles/sentinel/sap/deploy-sap-security-content.md
@@ -1,8 +1,8 @@
 ---
 title: Deploy the Microsoft Sentinel solution for SAP applications® from the content hub
 description: This article shows you how to deploy the Microsoft Sentinel solution for SAP applications® security content from the content hub into your Microsoft Sentinel workspace. This content makes up the remaining parts of the Microsoft Sentinel Solution for SAP.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.date: 03/23/2023
 ---
diff --git a/articles/sentinel/sap/deployment-overview.md b/articles/sentinel/sap/deployment-overview.md
@@ -1,8 +1,8 @@
 ---
 title: Deploy Microsoft Sentinel solution for SAP® applications in Microsoft Sentinel
 description: This article introduces you to the process of deploying the Microsoft Sentinel solution for SAP® applications.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.date: 06/19/2023
 ---
@@ -30,17 +30,17 @@ Microsoft Sentinel solution for SAP® applications is certified for SAP S/4HANA
 - Playbooks for automating responses to threats.
 
 > [!NOTE]
-> The Microsoft Sentinel for SAP solution is free to install, but there will be an [additional hourly charge](https://azure.microsoft.com/pricing/offers/microsoft-sentinel-sap-promo/) for activating and using the solution on production systems starting May 2023. 
+> The Microsoft Sentinel for SAP solution is free to install, but there is an [additional hourly charge](https://azure.microsoft.com/pricing/offers/microsoft-sentinel-sap-promo/) for activating and using the solution on production systems.
 >
-> - The additional hourly charge applies to connected production systems only. 
-> - Microsoft Sentinel identifies a production system by looking at the configuration on the SAP system. To do this, Microsoft Sentinel searches for a production entry in the T000 table. 
-> - [View the roles of your connected production systems](../monitor-sap-system-health.md).
+> - The additional hourly charge applies to connected production systems only.
+> - Microsoft Sentinel identifies a production system by looking at the configuration on the SAP system. To do this, Microsoft Sentinel searches for a production entry in the T000 table.
+> 
+> For more information, see [View the roles of your connected production systems](../monitor-sap-system-health.md).
+The Microsoft Sentinel for SAP data connector is an agent that's installed on a VM, a physical server, or a Kubernetes cluster. The agent collects application logs from across the entire SAP system landscape, for all of your SAP SIDs, and  sends those logs to your Log Analytics workspace in Microsoft Sentinel. Use the other content in the [Threat Monitoring for SAP solution](sap-solution-security-content.md) – the analytics rules, workbooks, and watchlists – to gain insight into your organization's SAP environment and to detect and respond to security threats.
 
-The Microsoft Sentinel for SAP data connector is an agent, installed on a VM, a physical server, or a Kubernetes cluster that collects application logs from across the entire SAP system landscape for all of your SAP SIDs. It then sends those logs to your Log Analytics workspace in Microsoft Sentinel. You can then use the other content in the Threat Monitoring for SAP solution – the analytics rules, workbooks, and watchlists – to gain insight into your organization's SAP environment and to detect and respond to security threats.
+For example, the following image shows a multi-SID SAP landscape with a split between productive and non-productive systems, including the SAP Business Technology Platform. All of the systems in this image are onboarded to Microsoft Sentinel for the SAP solution.
 
-:::image type="complex" source="./media/deployment-overview/sap-sentinel-multi-sid-overview.png" alt-text="Architecture overview showcasing multi-SID protection from Sentinel for production and non-production systems. Additionally it shows the integration with SAP Business Technology Platform":::
-   This diagram shows a multi-SID SAP landscape with a split between productive and non-productive systems including the SAP Business Technology Platform. All of the systems and services are being onboarded to the Sentinel for SAP solution.
-:::image-end:::
+:::image type="content" source="media/deployment-overview/sap-sentinel-multi-sid-overview.png" alt-text="Diagram of a multi-SID SAP landscape with Microsoft Sentinel." lightbox="media/deployment-overview/sap-sentinel-multi-sid-overview.png" border="false":::
 
 ## Deployment milestones
 
diff --git a/articles/sentinel/sap/deployment-solution-configuration.md b/articles/sentinel/sap/deployment-solution-configuration.md
@@ -1,8 +1,8 @@
 ---
 title: Configure Microsoft Sentinel solution for SAP® applications
 description: This article shows you how to configure the deployed Microsoft Sentinel solution for SAP® applications
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.date: 03/10/2023
 ---
diff --git a/articles/sentinel/sap/media/deployment-overview/sap-sentinel-multi-sid-overview.png b/articles/sentinel/sap/media/deployment-overview/sap-sentinel-multi-sid-overview.png
diff --git a/articles/sentinel/sap/preparing-sap.md b/articles/sentinel/sap/preparing-sap.md
@@ -2,8 +2,8 @@
 title: Deploy SAP Change Requests (CRs) and configure authorization
 titleSuffix: Microsoft Sentinel
 description: This article shows you how to deploy the SAP Change Requests (CRs) necessary to prepare the environment for the installation of the SAP agent, so that it can properly connect to your SAP systems.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.date: 03/10/2023
 ---
diff --git a/articles/sentinel/sap/prerequisites-for-deploying-sap-continuous-threat-monitoring.md b/articles/sentinel/sap/prerequisites-for-deploying-sap-continuous-threat-monitoring.md
@@ -1,8 +1,8 @@
 ---
 title: Prerequisites for deploying Microsoft Sentinel solution for SAP® applications
 description: This article lists the prerequisites required for deployment of the Microsoft Sentinel solution for SAP® applications.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.date: 06/19/2023
 ---
diff --git a/articles/sentinel/sap/reference-systemconfig-json.md b/articles/sentinel/sap/reference-systemconfig-json.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel solution for SAP® applications systemconfig.json container configuration file reference
 description: Description of settings available in systemconfig.json file
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: reference
 ms.custom: devx-track-extended-java
 ms.date: 06/03/2023
diff --git a/articles/sentinel/sap/reference-systemconfig.md b/articles/sentinel/sap/reference-systemconfig.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel solution for SAP® applications systemconfig.ini container configuration file reference
 description: Description of settings available in systemconfig.ini file
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: reference
 ms.date: 06/03/2023
 ms.custom: devx-track-extended-java
diff --git a/articles/sentinel/sap/sap-audit-log-workbook.md b/articles/sentinel/sap/sap-audit-log-workbook.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel solution for SAP® applications - SAP -Security Audit log and Initial Access workbook overview
 description: Learn about the SAP -Security Audit log and Initial Access workbook, used to monitor and track data across your SAP systems.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: reference
 ms.date: 01/23/2023
 ---
diff --git a/articles/sentinel/sap/sap-btp-security-content.md b/articles/sentinel/sap/sap-btp-security-content.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel Solution for SAP® BTP - security content reference
 description: Learn about the built-in security content provided by the  Microsoft Sentinel Solution for SAP® BTP.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: reference
 ms.date: 03/30/2023
 ---
diff --git a/articles/sentinel/sap/sap-btp-solution-overview.md b/articles/sentinel/sap/sap-btp-solution-overview.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel Solution for SAP® BTP overview
 description: This article introduces the Microsoft Sentinel Solution for SAP® BTP.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: conceptual
 ms.date: 03/22/2023
 ---
diff --git a/articles/sentinel/sap/sap-deploy-troubleshoot.md b/articles/sentinel/sap/sap-deploy-troubleshoot.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel solution for SAP® applications deployment troubleshooting
 description: Learn how to troubleshoot specific issues that may occur in your Microsoft Sentinel solution for SAP® applications deployment.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: troubleshooting
 ms.date: 01/09/2023
 ---
diff --git a/articles/sentinel/sap/sap-solution-deploy-alternate.md b/articles/sentinel/sap/sap-solution-deploy-alternate.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel for SAP data connector expert configuration options, on-premises deployment, and SAPControl log sources  | Microsoft Docs
 description: Learn how to deploy Microsoft Sentinel for SAP data connector environments using expert configuration options and an on-premises machine. Also learn more about SAPControl log sources.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: how-to
 ms.custom: devx-track-azurecli
 ms.date: 06/19/2023
diff --git a/articles/sentinel/sap/sap-solution-security-content.md b/articles/sentinel/sap/sap-solution-security-content.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel solution for SAP® applications - security content reference
 description: Learn about the built-in security content provided by the Microsoft Sentinel solution for SAP® applications.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: reference
 ms.date: 03/26/2023
 ---
diff --git a/articles/sentinel/sap/sap-suspicious-configuration-security-parameters.md b/articles/sentinel/sap/sap-suspicious-configuration-security-parameters.md
@@ -1,8 +1,8 @@
 ---
 title: SAP security parameters monitored by the Microsoft Sentinel solution for SAP® to detect suspicious configuration changes
 description: Learn about the security parameters in the SAP system that the Microsoft Sentinel solution for SAP® applications monitors for suspicious configuration changes.
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: reference
 ms.date: 03/26/2023
 ---
diff --git a/articles/sentinel/sap/solution-overview.md b/articles/sentinel/sap/solution-overview.md
@@ -1,8 +1,8 @@
 ---
 title: Microsoft Sentinel solution for SAP® applications overview
 description: This article introduces Microsoft Sentinel solution for SAP® applications
-author: limwainstein
-ms.author: lwainstein
+author: batamig
+ms.author: bagol
 ms.topic: conceptual
 ms.date: 03/22/2023
 ---
@@ -15,21 +15,21 @@ Security operations teams have traditionally had very little visibility into SAP
 
 To help close this gap, Microsoft Sentinel offers the Microsoft Sentinel solution for SAP® applications. This comprehensive solution uses components at every level of Microsoft Sentinel to offer end-to-end detection, analysis, investigation, and response to threats in your SAP environment.
 
-## What Microsoft Sentinel solution for SAP® applications does
+## What the Microsoft Sentinel solution for SAP® applications does
 
-- The Microsoft Sentinel solution for SAP® applications continuously monitors SAP systems for threats at all layers - business logic, application, database, and OS.
+The Microsoft Sentinel solution for SAP® applications continuously monitors SAP systems for threats at all layers - business logic, application, database, and OS. It allows you to:
 
-- It allows you to correlate SAP monitoring with other signals across your organization, and to use detections provided by the solution&mdash;or build your own detections&mdash;to monitor sensitive transactions and other business risks such as privilege escalation, unapproved changes, and unauthorized access.
+- Correlate SAP monitoring with other signals across your organization, and to use detections provided by the solution&mdash;or build your own detections&mdash;to monitor sensitive transactions and other business risks such as privilege escalation, unapproved changes, and unauthorized access.
 
-- It also allows you to build automated response processes to interact with your SAP systems to stop active security threats.
+- Build automated response processes to interact with your SAP systems to stop active security threats.
 
-- In addition to that it offers threat monitoring and detection for SAP Business Technology Platform.
+The Microsoft Sentinel solution for SAP® applications also offers threat monitoring and detection for SAP Business Technology Platform.
 
-## Solution details
+For example, the following image shows a multi-SID SAP landscape with a split between productive and non-productive systems, including the SAP Business Technology Platform. All of the systems in this image are onboarded to Microsoft Sentinel for the SAP solution.
+
+:::image type="content" source="media/deployment-overview/sap-sentinel-multi-sid-overview.png" alt-text="Diagram of a multi-SID SAP landscape with Microsoft Sentinel." lightbox="media/deployment-overview/sap-sentinel-multi-sid-overview.png" border="false":::
 
-:::image type="complex" source="./media/deployment-overview/sap-sentinel-multi-sid-overview.png" alt-text="Architecture overview showcasing multi-SID protection from Sentinel for production and non-production systems. Additionally it shows the integration with SAP Business Technology Platform":::
-   This diagram shows a multi-SID SAP landscape with a split between productive and non-productive systems including the SAP Business Technology Platform. All of the systems and services are being onboarded to the Sentinel for SAP solution.
-:::image-end:::
+## Solution details
 
 ### Log sources
 
