Install and configure the Microsoft DLP integration

Install and configure the  DLP Incident Response integration with Microsoft DLP from the  ServiceNow® Store on your  ServiceNow AI Platform instance. Start investigating DLP incidents using the  Microsoft DLP event data.

시작하기 전에

Role required: sn_dlir.admin

프로시저

1. Download and install the  Microsoft DLP integration from the  ServiceNow® Store.
2. Navigate to Security Operations > Integrations  > Integration Configurations.
3. Configure the Microsoft DLP integration.
   1. Search for DLP Incident Response Integration with Microsoft tile and select  Configure.

      그림 1. DLP Incident Response Integration with Microsoft

      

   2. On the form, fill in the fields.

      표 1. Microsoft DLP Integration Configuration form

      Field	Description
      Name	Name of the Microsoft DLP integration configuration.
      Client ID	Client ID of the app created on Microsoft Azure portal.
      Client Secret	Client Secret of the app created on Microsoft Azure portal.
      Tenant ID	Tenant ID of the user.

   3. Select Submit.
   After you successfully validate and submit the configuration, the Microsoft DLP Integration is saved on the Security Integrations page as a tile.
4. Update the Azure Storage Configuration.
   1. In the Security Integrations page, search for Azure Storage Configuration tile.
   2. In the Azure Storage Configuration tile, select Update.

      

   3. On the form, fill in the fields.

      표 2. Azure Storage Configuration form

      Field	Description
      Name	Name of the Azure Storage configuration.
      Storage Account Name	Storage account name created on Azure portal
      Container Name	Container name created in storage account on Azure portal.
      Shared Access Key	Shared access key for the Storage account.

   4. Select Submit.
   After you successfully validate and submit the configuration, the Azure Storage Configuration is saved on the Security Integrations page as a tile.
5. Update the AWS Storage Configuration.
   1. In the Security Integrations page, search for AWS Storage Configuration tile.
   2. In the AWS Storage Configuration tile, select Update.

      

   3. On the form, fill in the fields.

      표 3. AWS Storage Configuration form

      Field	Description
      Name	Name of the AWS Storage configuration.
      Region Name	Region name of the AWS Storage account.
      Bucket Name	Bucket name created on the AWS portal.
      Access Key	Access key with read, write, and delete access.
      Secret Key	Shared key with read, write, and delete access

   4. Select Submit.

결과

After you successfully validate and submit the configuration, the AWS S3 Configuration is saved on the Security Integrations page as a tile.