Test Sysdig Secure event push to Sentinel - Githubissues

bcgov / Cloud-Pathfinder-Azure

Apache License 2.0

0 stars 0 forks source link

Test Sysdig Secure event push to Sentinel #102

Closed NickCorcoran closed 2 months ago

NickCorcoran commented 3 months ago

Background: As part of OpenShift EDR improvement, performing PoV of Sysdig Secure. Has capability to push events to Sentinel that we should test.

DoD:

[x] Create configuration endpoint in Azure
[x] Create configuration setup on Sysdig
[x] Push sample of of events to Azure
[x] Observe events in Azure Sentinel