Official Data Connectors for Microsoft Project and PowerBI are now available in public preview in the Microsoft Sentinel console.
Connecting the Microsoft Project connector will create a new ProjectActivity table, while the PowerBI connector creates a new PowerBIActivity table.
Both connectors use the Office Management API to grab the audit logs from each service. There’s only a single KQL query provided for each connector to show data flow so you’ll need to create Analytics Rules and Hunting queries on your own for now.
=========================
[Want to discuss this further? Hit me up on Twitter or LinkedIn]
[Subscribe to the RSS feed for this blog]
[Subscribe to the Weekly Microsoft Sentinel Newsletter]
[Subscribe to the Bi-Weekly Defender for Cloud Newsletter]
[Learn KQL with the Must Learn KQL series and book]