SecurityBridge: SAP data to Microsoft Sentinel

Solution: SecurityBridge App

SecurityBridge App Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Attribute	Value
Publisher	SecurityBridge
Support Tier	Partner
Support Link	https://securitybridge.com/contact/
Categories	domains,verticals
Version	3.2.1
Author	SecurityBridge - support@securitybridge.com
First Published	2022-02-17
Solution Folder	SecurityBridge App
Marketplace	Azure Marketplace · Popularity: ⚪ Very Low (9%)

The SecurityBridge App solution provides the capability to ingest SecurityBridge Threat Detection events from all on-premise and cloud based SAP instances into Microsoft Sentinel.

This solution is dependent on the Custom logs via AMA connector to collect the logs. The Custom logs solution will be installed as part of this solution installation.

NOTE: Microsoft recommends installation of Custom logs via AMA Connector. Legacy connector uses the Log Analytics agent which were deprecated on Aug 31, 2024. Using MMA and AMA on same machine can cause log duplication and extra ingestion cost more details.

Data Connectors
Tables Used
Content Items
Additional Documentation

Data Connectors

This solution provides 1 data connector(s) (plus 1 discovered⚠️):

🔍 Discovered: This item was discovered by scanning the solution folder but is not listed in the Solution JSON file.

Tables Used

This solution uses 3 table(s):

Table	Used By Connectors	Used By Content
`ABAPAuditLog`	SecurityBridge Solution for SAP	-
`SecurityBridgeLogs_CL`	SecurityBridge Threat Detection for SAP	-
`SecurityBridge_CL`	SecurityBridge Solution for SAP	-

Content Items

This solution includes 2 content item(s):

Content Type	Count
Analytic Rules	1
Workbooks	1

Analytic Rules

Name	Severity	Tactics	Tables Used
SecurityBridge: A critical event occured	Medium	InitialAccess	-

Workbooks

Name	Tables Used
SecurityBridgeThreatDetectionforSAP	-

Additional Documentation

📄 Source: SecurityBridge App/README.md

Deployment of Sentinel Connector for SecurityBridge Threat Detection for SAP through Content Hub

This ARM template will deploy a connecter for "SecurityBridge Threat Detection for SAP" with the following elements: * Connector * Workbook * Parser Function

Follow the below steps to deploy this solution in your environment: * Log on to Azure Portal * Navigate to Azure Sentinel and select your workspace * Select Content Hub * Search for SecurityBridge Threat Detection for SAP * Click on Install and then click on Create * Follow the steps to install the connector

Deployment of Sentinel Connector for SecurityBridge Threat Detection for SAP through ARM template