We are currently working on Deploying Microsoft Sentinel, and I’d like to get the data connector for Box working, Microsoft’s documentation is sparse and vague (feigning surprise!). In combining both their docs and Box.com, I think the issue is what is needed for the JSON input parameters, nothing I’ve seen so far has given me specifics.
Has anyone been able to implement this successfully?
Hi @mikekaro , welcome to the forum!
I am unfamiliar with Microsoft Sentinel, but perhaps I can help on the Box side.
I’m going to need a bit more context on this, can you eleaborate?
Here is what I am working off of. I’m sticking to what’s related in your docs as far as JWT auth.
Box (using Azure Functions) connector for Microsoft Sentinel | Microsoft Learn
Let’s start with the basics. Do you have a Box application configured to authenticate via JWT and the corresponding JWT config.json file, as stated here?
Here is an example of a JWT configured app (you’ll need to access your developer console at https://app.box.com/developers/console:
Let us know
Yes, I do have the json file with the keypair included in the file.
Very good, it seems from the Box side you’re all set.
What do you mean by this?