Jamf Protect for Microsoft Sentinel
Jamf Software, LLC

Pricing information

Jamf Protect for Microsoft Sentinel

Jamf Software, LLC

Provide complete Apple Endpoint Security insights from Jamf Protect into Microsoft Sentinel.

The Jamf Protect for Microsoft Sentinel solution creates detailed event data from macOS endpoints into a Microsoft Sentinel workspace in a simple and easy workflow. The solution provides you with full visibility into Apple Endpoint Security by leveraging Workbooks and Analytic Rules containing Alert and Unified Logging events captured by Jamf Protect and the macOS built-in security events that occurred across the protected organisational endpoints.

In this solution you will also find

Workbooks containing visualisations in alerts, telemetry and network based events.
Analytic Rules for Automated Incident creation based up on alerts from Jamf Protect.
Hunting Queries to scan for malware retrospectively across Jamf Protect data in Microsoft Sentinel.
Parser to parse and map Jamf Protect fields to ASIM where applicable.
Playbooks for running automated actions while investigating an incident.
Data Connector to monitor the feed of events from Jamf Protect.

Please navigate to the release notes to find out more about updates and enhancements on this solution.