[Announcement] ServiceNow Security Operations and Microsoft Azure Sentinel (in public beta).

[Eric Feron]

Hello Community, 

Some great news for Security users! 

ServiceNow has developed an integration to connect with different Microsoft security technologies via Microsoft Graph to enable you to bring rich insights from Azure Sentinel and other Microsoft products into ServiceNow Security Operations.  

The Microsoft Graph Security API is an intermediary service (or broker) that provides a single programmatic interface to connect multiple security providers.  Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.

Security alerts will be ingested into ServiceNow Security Operations to automatically create security incidents in ServiceNow’s Security Incident Response platform.   

This automation of responses to alerts enables quality and consistency of security investigations and scales security incident teams. 

Using built-in workflows, ServiceNow routes incidents to the correct personnel or response tools to contain, mitigate or remediate threats. 

One more step that Microsoft and ServiceNow are taking together to accelerate digital transformation for enterprise and government customers. 

Would you like to sign up for the ServiceNow Design Partner Program?

Learn more.

[Bijan4]

Hi Eric, 

Thanks for the announcement. I could not find the integration in app store nor in the instance security integrations. I was wondering if it is available now? If not, do you have any estimation of release date? and what do you propose as an alternative solution for now?

Kind regards, 

[Alex Cox]

Hi Bijan, 

While this integration is currently in a beta testing phase, I reached out to the Product Manager at ServiceNow responsible for this and he mentioned that the current plan is to move this out of beta soon. 

We cannot promise any dates or make future commitments here. That said, I suggest checking back on the app store by the end of this week. 🙂

[aheinlein]

Any updates regarding this integration? Still not in the store. Any chance to be part of the beta testing program.

[Vipul7]

Still not able to find this integration on servicenow store. Kindly confirm by when the integration will be available on store.

[Alex Cox]

Hi all!

This is on the ServiceNow store under "Microsoft Graph Security API Alert Ingestion Integration For Security Operations". The Graph Security API makes it possible to grab information from Azure Sentinel, and more.

Here's a link to the current version as of today:

https://store.servicenow.com/sn_appstore_store.do#!/store/application/92712ec3c7000010c20eb5a827c260...

Down the road, this may not be the latest, so you can just search for "Graph Security" at https://store.servicenow.com

[Prashant64]

Can someone share starter stories for Azure Sentinel integration?