To be able to connect to the Portal, we need to connect the web application to your Microsoft Sentinel environment; for this part, we use Azure Lighthouse.
Why do we need to do this? We need to access the Sentinel incidents so we can display them in the portal; our API is not able to write back into Sentinel. The second part is simply signing up to the portal, navigating to users, additional actions, select Sentinel, then add your Azure subscription ID. It will take around 15 minutes for the data to propagate into the Portal.
Rest assured... You, the customer, remain in control and can delete the connection at any point - at which time the data flow into the Portal will stop.
Step one: Choose the region, and sign up
Once you have access to the portal, follow the simple start-up tasks (you will be prompted each step of the way). Running the Lighthouse script will propagate the portal with data ( this process takes 15 mins after being run). You will require elevated permission in Azure to run the JSON file against Sentinel. The script is provided by Microsoft and is designed for Azure Lighthouse.
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
