Talon Insights connector for Microsoft Sentinel
The Talon Security Logs connector allows you to easily connect your Talon events and audit logs with Microsoft Sentinel, to view dashboards, create custom alerts, and improve investigation.
This is autogenerated content. For changes, contact the solution provider.
| Connector attribute | Description |
|---|---|
| Log Analytics table(s) | Talon_CL |
| Data collection rules support | Not currently supported |
| Supported by | Talon Security |
Blocked user activities
Talon_CL
| where action_s != "blocked"
**Failed login user **
Talon_CL
| where eventType_s == "loginFailed"
**Audit logs changes **
Talon_CL
| where type_s == "audit"
Please note the values below and follow the instructions here to connect your Talon Security events and audit logs with Microsoft Sentinel.
For more information, go to the related solution in the Azure Marketplace.