Azure Data Sources

Name	Platform	Sourcetype	Source	Supported TA	Date
Azure Active Directory MicrosoftGraphActivityLogs	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory NonInteractiveUserSignInLogs	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add app role assignment to service principal	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add member to role	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add owner to application	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add service principal	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add unverified domain	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Consent to application	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Disable Strong Authentication	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Enable account	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Invite external user	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Reset password (by admin)	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Set domain authentication	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Sign-in activity	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Update application	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Update authorization policy	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Update user	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory User registered security info	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Audit Create or Update an Azure Automation account	Azure	mscs:azure:audit	mscs:azure:audit	Splunk Add-on for Microsoft Cloud Services
Azure Audit Create or Update an Azure Automation Runbook	Azure	mscs:azure:audit	mscs:azure:audit	Splunk Add-on for Microsoft Cloud Services
Azure Audit Create or Update an Azure Automation webhook	Azure	mscs:azure:audit	mscs:azure:audit	Splunk Add-on for Microsoft Cloud Services
Azure Monitor Activity	Azure	azure:monitor:activity	Azure AD	Splunk Add-on for Microsoft Cloud Services
Azure Active Directory	Azure	azure:monitor:aad	Azure AD	Splunk Add-on for Microsoft Cloud Services