With the AlienApp for Office 365, you can monitor all of your Microsoft Office 365 cloud applications, track user activity, and receive alerts in USM Anywhere for suspicious and malicious activity in your environment. This integration gives you the ability to collect additional information about your environment and what your users are doing, which drives investigation and incident response processes.
- The out-of-the-box correlation rules for Office 365 events provided by the AlienApp for Office 365 enable USM Anywhere to automatically create alarmsAlarms provide notification of an event or sequence of events that require attention or investigation., notifying you about suspicious activity in your environment.
- The AlienApp for Office 365 includes predefined dashboards that give an overview of Microsoft OneDrive, Microsoft SharePoint, and Microsoft Azure Active Directory (AD)Active Directory (AD) is a directory service that Microsoft developed for Windows domain networks. activity and provide quick visibility into Office 365 activity and events to streamline your investigation and incident response processes.
- Direct access to the Microsoft Office 365 Management Activity API provided by the AlienApp for Office 365 gives you comprehensive visibility, a richer data set, and greater control over your cloud security, including information about your user, administration, system, and policy actions and events from Office 365 and Azure AD activity logs.
Note: If you're a Windows user and want to include Office 365 logs in your USM Anywhere environment, but don’t yet use Azure, you’ll need to sign up for an Azure subscription. The subscription is required to connect to the APIs that access your Office 365 environment.
It is not required that you deploy the USM AnywhereAzure Sensor to use the AlienApp for Office 365. You can use any deployed sensor for the AlienApp connection.
Warning: If the AlienApp fails and you receive a message informing you that it has not been loaded, please contact AT&T Cybersecurity Technical Support to solve the problem.
Related Video Content
To view other related training videos, click here.