In this blog post, I will show you how to connect Microsoft 365 log activity for SharePoint, Exchange Online and Teams to Azure Sentinel.
Connect Microsoft 365
Microsoft 365 connector is available out of the box in Azure Sentinel and doesn’t take much effort or risk to connect to Sentinel.
To connect M365, Open the Sentinel console from the portal and click on Data Connectors and scroll down to Microsoft 365 and click on Open connector page to enable the connector.
From the Configuration section, tick the box for Exchange, SharePoint and Teams and click on Apply changes as shown below.
To disable the connector, repeat the process and un-tick the boxes.