The Microsoft Management Activity API integration enables you to subscribe or unsubscribe to different audits, receive their content, and fetch new content as incidents.
Microsoft Management Activity API (O365/Azure Events)
- Details
- Content
- Dependencies
- Version History
An integration for Microsoft's management activity API, which enables you to fetch content records and manage your subscriptions.
Integrations
| Name | Description |
|---|---|
| Microsoft Management Activity API (O365 Azure Events) |
Integrations
| Name | Description |
|---|---|
| Microsoft Management Activity API (O365 Azure Events) | The Microsoft Management Activity API integration enables you to subscribe or unsubscribe to different audits, receive their content, and fetch new content as incidents. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
1.3.26 - 6106826 (August 21, 2023)
1.3.24 - 5950262 (August 3, 2023)
1.3.23 - 5910354 (July 30, 2023)
- 26482
Download
Integrations
Microsoft Management Activity API (O365 Azure Events)
- Added the ms-management-activity-auth-reset command which allows the user to restart the authentication process by resetting the integration context if necessary.
- Maintenance and stability enhancements.
- 26482
Download
1.3.20 - R5692327 (July 5, 2023)
- 27684
Download
Integrations
Microsoft Management Activity API (O365 Azure Events)
- Added the following integration parameters to support credentials fetching object:
- Application ID or Client ID.
- Key or Client Secret.
- Certificate Thumbprint.
- Token or Tenant ID.
- The authentication code.
- 27684
Download
1.3.10 - R4646022 (February 19, 2023)
- 24261
Download
Integrations
Microsoft Management Activity API (O365 Azure Events)
- Fixed an issue where the integration uses the Token (refresh_token) integration parameter only for the first run of the integration and ignores it in subsequent runs.
- Improved implementation of the authorization process with the Oproxy server.
- Updated the Docker image to: demisto/pyjwt3:1.0.0.48124.
- Fixed an issue where linter failed due to pylint errors.
- Added the ms-management-activity-generate-login-url command to easily get the auth code.
- Updated the Docker image to: demisto/pyjwt3:1.0.0.48124.
- 24261
Download
1.2.4 - 2624637 (March 22, 2022)
Integrations
Microsoft Management Activity API (O365 Azure Events)
- Added the following parameters for Certificate Authentication support for self-deployed mode.
- Certificate Thumbprint - Used for certificate authentication. As appears in the "Certificates & secrets" page of the app.
- Private Key - The private key of the registered certicate.
- Updated the Docker image to: demisto/pyjwt3:1.0.0.27257.
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | September 9, 2020 | |
| Last Release | March 28, 2024 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
