[Filebeat] Azure Module - Additional Azure AD Log Sources

[opiedrah (Elasticsearch Certified Professional)]

I would agree, the securityevents is what matters. I reviewed in detail the filebeat o365 module that leverages the microsoft management api. It has some alerts from the securitycompliance scheme but it is missing many other alerts such as the identity protection alerts.

Microsoft Graph Security API integration

Filebeat has an o365 module that connects to the Microsoft Management API. Does anyone if there are working or is there a connector available for the Microsoft Graph Security API Microsoft Graph Security API overview - Microsoft Graph | Microsoft Docs Thank you