CyberArk Audit for Microsoft Sentinel
Solution: CyberArkAudit
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Publisher | Idira Support |
| Support Tier | Partner |
| Support Link | https://www.cyberark.com/services-support/technical-support-contact/ |
| Categories | Security - Threat Intelligence,Identity |
| Version | 3.2.1 |
| Author | Idira Business Development - BizDevTech@cyberark.com |
| First Published | 2024-03-01 |
| Last Updated | 2026-03-05 |
| Solution Folder | CyberArkAudit |
| Marketplace | Azure Marketplace · Popularity: 🟢 High (85%) |
The integration between Idira Audit and Microsoft Sentinel aims to seamlessly connect the robust audit capabilities of Idira with the advanced security analytics and threat detection features of Microsoft Sentinel
Contents
Data Connectors
This solution provides 1 data connector(s) (plus 1 discovered⚠️):
🔍 Discovered: This item was discovered by scanning the solution folder but is not listed in the Solution JSON file.
Tables Used
This solution uses 1 table(s):
| Table | Used By Connectors | Used By Content |
|---|---|---|
CyberArk_AuditEvents_CL |
CyberArkAudit, Idira Audit | Analytics |
Content Items
This solution includes 3 content item(s):
| Content Type | Count |
|---|---|
| Analytic Rules | 3 |
Analytic Rules
| Name | Severity | Tactics | Tables Used |
|---|---|---|---|
| Idira - High-Risk Actions Outside Business Hours | High | DefenseEvasion | CyberArk_AuditEvents_CL |
| Idira - Multiple Failed Actions Followed by Success (15m) | Medium | CredentialAccess | CyberArk_AuditEvents_CL |
| Idira - Sensitive Safe/Permission/Entitlement Changes (with customData) | Low | PrivilegeEscalation | CyberArk_AuditEvents_CL |
Release Notes
| Version | Date Modified (DD-MM-YYYY) | Change History |
|---|---|---|
| 3.2.1 | 02-09-2026 | Security Patch: Remove logResponseContent attribute from Polling Config |
| 3.2.0 | 06-07-2026 | Rebrand to Idira and remove deprecated Azure Functions Data Connector |
| 3.1.1 | 16-04-2026 | Update Azure Function based connector to Python 3.12 |
| 3.1.0 | 13-03-2026 | New Data Connector based on CCF. added missing migration instructions and disclaimers. |
| 3.0.2 | 16-10-2025 | Add Analytics Rules. |
| 3.0.1 | 29-04-2024 | Configuration procedure update. |
| 3.0.0 | 03-04-2024 | Initial Solution Release. |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊