The Dynatrace with Microsoft Sentinel solution allows you to ingest detected Attacks, Vulnerabilities, Audit logs and problem events based on metrics, logs, and traces collected from monitored environments. In Microsoft Sentinel, SOC teams can then benefit from all the signals generated by the Dynatrace’s Davis AI without having to perform any of the heavy lifting. The solution also allows customers to combine alerts from best-in-class security solutions by enriching Attacks detected by the Dynatrace platform with these additional insights.

Underlying Dynatrace Technologies used:

• Davis AI engine automatically and continuously delivers precise answers based on the current state of your environment. Davis® uses high-fidelity metrics, traces, logs, and user data mapped to a unified entity model to drive automation and deliver broader, deeper insights for modern cloud environments.
• Audit logs are crucial for tracking changes, compliance, and security-relevant events. Dynatrace can log such events so that you can review important changes: when the change was made, by whom, and what was changed.
• Runtime vulnerability analysis. Reduce the time and cost to find and fix application vulnerabilities. Leverage runtime context to precisely implement countermeasures and remediation.
• Runtime application protection. Reduce exposure to missed and zero-day vulnerabilities. Continuously detect and block common application attacks, such as SQL injection and command injection.