Illumio for Microsoft Sentinel visualizes audit events and workload traffic flow logs. SOC analysts can now streamline data analysis and gain more actionable context into workload operations to enhance efficiency, inform compliance reporting, and facilitate rapid detection and response to potential threats. Key benefits of the solution include:

• Enhanced SecOp efficiency
• Greater visibility into workloads
• Faster response to cybersecurity incidents
• Strengthened compliance

The Illumio for Microsoft Sentinel solution includes a data connector, workbooks, ASIM (Auth, Audit and Network traffic) parsers, and analytic rules that supports the Illumio platform.