A few weeks ago an issue was raised from Cloud Service Providers (CSPs) that they could not access any Solutions in the newly released Content Hub for Microsoft Sentinel. When they attempted to enable a Solution, they were met with:
This offer is not available for subscriptions from Microsoft Azure Cloud Solution Providers
There’s an effort underway to resolve this and allow CSPs access to the Content Hub solutions.
In the Known Issues section of the Microsoft Sentinel GitHub repository, there’s now a growing list of Solutions that are being enabled for CSPs.
The list to monitor: https://cda.ms/3×0
As of this post, the list contains the following:
- Cloudflare
- Log4j Vulnerability Detection
- Training Lab
- RiskIQ Illuminate
- Crowdstrike Falcon Endpoint Protection
- Palo Alto Prisma
- Imperva WAF Cloud
- Cybersecurity Maturity Model Certification CMMC
- Sophos Endpoint Protection
=========================
[Want to discuss this further? Hit me up on Twitter or LinkedIn]
[Subscribe to the RSS feed for this blog]
[Subscribe to the Weekly Microsoft Sentinel Newsletter]
[Subscribe to the Bi-Weekly Defender for Cloud Newsletter]
[Learn KQL with the Must Learn KQL series and book]