• [Office 365] Azure Active Directory - Sub Parser for DeviceProperties

    In default parser for Office 365, there is no token to parser "DeviceProperties" in Azure Active Directory (AAD) Logs. DeviceProperties contains Id, DisplayName, OS, BrowserType, etc. This info is useful for user to analyze where the request comes…
  • o365 connector categorization for failed authentication

    The o365 connector categorization for Azure AD failed authentication is currentlycategorized with an outcome of Success whereas it should be Failure. Failed logins/Brute Force Logins are appearing as successful logins. My idea would be to categorize…
  • Office365 Connector to be able to pull sign in methods

    Request for Office 365 connector to be able to pull sign in methods and type of MFA used in sign in such as sign in from which devices and what MFA were used during the login process
  • Arcsight Office 365 Events

    Hello, I'm working with an already integrated arcsight system. I need to know if possible, is there a basis or documentation available that outlines the triage/prioritization of Office 365 events in Arcsight? Thank you
  • Office 365 Support

    Which feature/version of Office 365 is missing from the latest ArcSight SmartConnectors? Please provide your favorite use cases.
  • RE: Office 365 scalability

    Hello! I got in touch with internal team in order to get you some information. Here is some feedback, I'd like to share with you: The connector only has enablement for the following Audit Log Record types…. 1,2,3,13 For Exchange 4, 6, 14 For Sharepoint…
  • Prerequisite to register Office 365 connector application in Azure AD

    Hi, I should install Office 365 Smart Connector. I don't work with Azure, Office 365.. .For me it's a new world!!. Reading from the configuration Guide of the Office 365 Smart Connector (and from the Microsoft link included), it seems I need (I'm get…
  • Office 365 Connector: Cannot start subscription

    Hi all, Has anyone encountered this when configuring their Office 365 connector? I have my tenant domain, application ID and client secret parameters, but it doesn't pass the verification check. It says it cannot start or list any subscriptions. Please…
  • Office 365 Connector for HPE ArcSight

    Where can the Office 365 Connector for HPE ArcSight be downloaded from? Where do I find the documentation the connector? Office 365 is listed as a supported product with HPE ArchSight Connector: https://www.hpe.com/h20195/V2/GetPDF.aspx/4AA5-3404ENW.…
  • New O365 SmartConnector Stopped Working

    Hello everyone, I deployed the new Microsoft O365 SmartConnector (version 7.2.3.7789 running on Windows Server 2012 R2) that uses the new Activity API about 3 weeks ago. I was able to configure it successfully and we were receiving Azure Active Directory…