Hi all,
We use Microsoft Sentinel as our SIEM solution and we are ingesting Jira Audit logs in there. We use some out-of-the-box Analytics to generate alerts, however I'm having trouble to determine where I can get the actual user names, or how I can map them to Azure AD users. (directly of via alert enrichment)
Maybe this is more a question to be asked in an MS Sentinel forum, but any suggestion would be nice.
Kind regards,
Wim