Views:

Test the Cloud Detections for Azure VNet Flow Log integration in your Azure cloud environment.

The Cloud Detections for Azure VNet Flow Logs integration allows TrendAI Vision One™ to access and monitor your Azure VNet Flow Logs to detect potential threats. The following steps provide a guide on how to test the feature within your environment.

Procedure

  1. Sign in to the Azure account you want to use to test Cloud Detections for Azure VNet Flow Logs.
  2. Review the Cloud Detections for Azure VNet Flow Logs recommendations and requirements.
  3. Add your Azure account to the Cloud Accounts app in TrendAI Vision One™.
    Follow the steps in Connect a single Azure subscription and enable the following features and permissions:
    • Core features
    • Cloud Detections for Azure VNet Flow Logs
    Note
    Note
    If you want to test the integration with an Azure subscription, see Connect and update Azure subscriptions.
  4. After your account successfully connects, use XDR Data Explorer to verify that data is being sent.
  5. Use one of the following demo attacks to trigger a Workbench alert: