Microsoft 365 (Posture)

Use Microsoft 365 (Posture) data with Cortex XSIAM.

You can configure collecting Microsoft 365 (Posture) logs using a Cloud Posture and Runtime Security data source or connector:

Collection Method	Description
Cloud Posture and Runtime Security data source overview	Forward Microsoft 365 (Postrure) logs to Cortex XSIAM using the Microsoft 365 data source.
Link to Cloud Posture and Runtime Security data source instructions	How to onboard Microsoft 365
Link to connector details	• Microsoft 365 • Microsoft365 • Microsoft Entra ID