office-365-dashboard

Description

A collection of custom dashboards to give you a holistic view of your Microsoft 365 environment. These dashboards can help you answer the following questions and more:

  • What files are users sharing internally and externally and with who? Are there users uploading or downloading an unusually large amount of data?
  • Who invited or added a guest user? Were they invited through a shared file or added directly through Active Directory?
  • Where in the world are users logging in from? Are there suspicious user agents attempting to login?
  • Which users receive the most suspicious mail? Where is this mail coming from?
  • What users does Azure AD consider to be risky and why?

The download includes a couple of Elastic Kibana dashboard as well as runtime field code to improve the data that comes from OOTB Elastic modules. To show the data you need to run the Azure and Office 365 module or Elastic Agent integration.

What is Microsoft Office 365?

Microsoft 365 is the productivity cloud. The complete solution includes  office applications, intelligent cloud services and advanced security. Microsoft Office 365 environments usually containing a lot of important company information. Its very important to observe and protect the usage and the information there.

Source

Originally found at https://github.com/ironvine/elastic-m365

Can also downloaded from Github directly.

Tested versions 7.14, 7.15
ECS compliant Yes

You must log in to submit a review.

Related downloads

Sigma Windows inbuilt detection rules

A collection of rules based on the Sigma rules for Windows (inbuilt folder) based on Winlogbeat data .

osquery performance dashboard

Kibana Dashboard example to visualize osquery performance

Ingest Pipeline Monitoring

This Kibana dashboard can be used monitor your ingest pipelines

Ask Me Anything Booth – Canvas Example

This is an example canvas page that shows how to visualize using canvas in general.

Cloudflare Kibana dashboards

Cloudflare dashboards and ingest pipelines to visualize cloudflare logs

OpenSIEM Logstash Parsing

Logstash Parsing Configurations for Elastic SIEM parses many different sources into ECS

These downloads could be also interesting for you

Watcher History Dashboard

This dashboard shows the history of executed watcher jobs.

Sigma Zeek Detection rules

A collection of rules based on the Sigma rules for Zeek based on the Filebeat Zeek module.

Google Cloud monitoring dashboard

Dashboard to monitor GCP resources using different metrics and logs.

Sigma Elastic SIEM rules for web server logs

A collection of rules based on the Sigma detection rules for web server looks, e.g. apache, nginx or IIS.

Sankey visualization example

This is an example of how to build an sankey visualization using the vega visualization in Kibana.

Vega advanced heat map

Vega example to show GitHub commits per author per hour of day.