question

dilannanayakkara-8008 avatar image
0 Votes"
dilannanayakkara-8008 asked vipulsparsh-MSFT commented

Monitor Guest User Activities using Sentinel

Hi,

I have a requirement of monitor Guest User Activities through Sentinel.

appreciate if anyone can share a KQL query or propose the way to achieve this through Sentinel.

Thanks,
Dilan

azure-monitorazure-sentinel
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered vipulsparsh-MSFT commented

@dilannanayakkara-8008 Depending on what specifically you want to track, a normal track would be to see where they signed up from like location details of IP and longitude plus latitude.

For that you can query on usertype attribute.

115142-image.png

After you find which attribute you want to track, you can create a workbook so that Sentinel then can show you all the relevant details.
A great start can be done from here : https://techcommunity.microsoft.com/t5/azure-sentinel/how-to-use-azure-sentinel-to-follow-a-users-travel-and-map-their/ba-p/981716





Please "Accept the answer" if the information helped you. This will help us and others in the community as well.



image.png (171.3 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

thanks @vipulsparsh-MSFT

I will check and let you know.

0 Votes 0 ·
vipulsparsh-MSFT avatar image vipulsparsh-MSFT dilannanayakkara-8008 ·

@dilannanayakkara-8008 Do let us know for any help.




Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 Votes 0 ·