MDR360 integrations · Cloud & SaaS
DIAMATIX MDR for Microsoft 365
Microsoft 365 audit activity across Exchange Online, SharePoint and Teams is monitored for suspicious behaviour.
Technical details pending DIAMATIX confirmation
Technical overview
Integration specifications
- Category
- Cloud & SaaS
- Availability
- Production Supported
- Ingestion method
- Office 365 Management Activity API
- Capabilities
- Telemetry Ingestion, Detection & Investigation
- Active response
- Notification and guided response
Telemetry collected
- Unified audit log
- Mailbox and mail-flow events
- SharePoint and OneDrive activity
Onboarding prerequisites
- Unified audit logging enabled
- App registration with read permissions
How it works
How DIAMATIX SecOps works with it
- 01
Collect
Microsoft 365 signals are brought into SHIELD SIEM/XDR.
- 02
Investigate
DIAMATIX analysts triage, correlate and filter alerts 24/7.
- 03
Respond
Agreed containment or guided response follows your runbook and MDR360 tier.
Scope, capabilities and response actions are confirmed for your environment during scoping.
Back to all integrationsRunning Microsoft 365?
Tell us about your environment and we will confirm coverage for MDR360.