Supported Data

Data Schema Reference

The following is a list of supported data references both Azure and third party.

Microsoft Sentinel data source schema referenceMicrosoftLearn

Security Alert Data Schema

Microsoft Sentinel security alert schema referenceMicrosoftLearn

Windows Security Event Data Reference

Windows security event sets that can be sent to Microsoft SentinelMicrosoftLearn

DNS Over AMA Reference

Microsoft Sentinel DNS over AMA connector reference - available fields and normalization schemaMicrosoftLearn

Purview Reference

Microsoft Purview Information Protection connector reference - audit log record types and activities support in Microsoft SentinelMicrosoftLearn