Note: Please refer to the following before installing the solution:

• Review the solution Release Notes

The Microsoft Sentinel solution for Microsoft Business Applications allows customers to monitor and detect various suspicious or malicious activities in their Microsoft Power Platform and Microsoft Dynamics 365 environments.

It collects activity logs from different Power Platform components—including Power Apps, Power Automate, Power Platform Connectors, Power Platform DLP, and Dataverse—as well as Dynamics 365 CRM and ERP. It then analyzes these logs to detect threats and suspicious activities such as Power Apps execution from unauthorized geographies; suspicious data destruction by Power Apps; mass deletion of Power Apps; phishing attacks made possible through Power Apps; Power Automate flow activity by departing employees; Microsoft Power Platform connectors added to an environment; and the update or removal of Microsoft Power Platform data loss prevention policies.

• See the documentation to learn more about deployment, configuration and usage.