The solution will pull all the Identity Security Cloud event data into Azure tables so that security analysts can query the data for potential security related events. Event data comes from the public Identity Security Cloud APIs. The solution also makes it possible for security analyst's in Microsoft Sentinel to query the Identity Security Cloud public APIs to get additional information about an Identity or Account that might be involved in a security related alert. Those analysts can also remediate security events in Microsoft Sentinel by again calling our APIs to disable an account or revoke access.