NC Protect Data Connector for Microsoft Sentinel

Solution: NC Protect Data Connector

NC Protect Data Connector Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Attribute	Value
Publisher	archTIS
Support Tier	Partner
Support Link	https://www.archtis.com/nc-protect-support/
Categories	domains
Version	3.0.0
Author	archTIS
First Published	2021-10-20
Solution Folder	NC Protect Data Connector
Marketplace	Azure Marketplace · Popularity: 🔵 Medium (68%)

The NC Protect Data Connector (archtis.com) provides the capability to ingest user activity logs and events into Microsoft Sentinel. The connector provides visibility into NC Protect user activity logs and events in Microsoft Sentinel to improve monitoring and investigation capabilities

Data Connectors
Tables Used
Content Items

Data Connectors

This solution provides 1 data connector(s):

NC Protect 🔶

🔶 CLv1: This connector ingests into a table that uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Tables Used

This solution uses 1 table(s):

Table	Used By Connectors	Used By Content
`NCProtectUAL_CL` 🔶	NC Protect	Workbooks

🔶 CLv1: This table uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Content Items

This solution includes 1 content item(s):

Content Type	Count
Workbooks	1

Workbooks

Name	Tables Used
NucleusCyber_NCProtect_Workbook	`NCProtectUAL_CL`