Microsoft Office 365

Use Microsoft Office 365 data with Cortex Data Security.

You can configure collecting Microsoft Office 365 logs and data using a standard data source or connectors:

Collection Method	Description
Standard data source overview	Forward logs and data to Cortex Data Security from Microsoft Office 365 Management Activity API and Microsoft Graph API using the Office 365 data source.
Link to standard data source instructions	The following types of logs and data can be ingested from Microsoft Office 365 Management Activity API and Microsoft Graph API: Microsoft Office 365 audit events from Management Activity API Microsoft Entra ID (Azure AD) Exchange Online SharePoint Online DLP General Microsoft Entra ID (Azure AD) authentication and audit events from Microsoft Graph API Microsoft 365 alerts from Microsoft Graph Security API are available for different products: Microsoft Graph Security API v1 Microsoft Graph Security API v2 For more information, see Ingest logs from Microsoft Office 365.
Link to connector details	Microsoft 365 (recommended) Microsoft365 (legacy)