swiftsolves-msft

working folder of various agents developed

This function app will poll O365 Activity Managment API every 5 mins for logs. It is designed to get Audit.General and DLP.All events.

Microsoft Sentinel pre ingestion sizing can be a bit different between data sources, especially if Cribl or ETL streaming like tool or Existing SIEM has not already collected those events and measurements. In this case sometimes we need to examine at source and measure to get to a GB Per Day for that data source or server coming online.

Azure TPot Deployment