About the Microsoft Azure Network Security Integration
Microsoft Azure Network Security connects Synqly to Azure Network Watcher flow logs, giving security teams visibility into network traffic across Azure environments without standing up custom log pipelines. Network Watcher flow logs record accepted and denied traffic at the network security group level, making them a key source for detecting lateral movement, data exfiltration, and misconfigured network paths in cloud infrastructure. Part of Synqly’s Network Security Unified API, the Microsoft Azure Network Security integration lets security platforms query traffic events and traffic log configurations, normalized to OCSF Network Activity, through a single standardized connector instead of building direct Azure API integrations.
Integration Use Cases
Query DNS Events
Returns DNS events from DNS log configurations on the integration. Results are normalized to OCSF DNS Activity (class_uid 4003).
Query DNS Log Configurations
Returns DNS log configurations discovered for the integration.
Query Firewall Rules
Returns the firewall rules that control traffic within the integration's scope. Built-in default rules that the provider's API does not
report are not included. A rule that applies to several networks is returned once per network
Query Traffic Events
Returns traffic events from traffic log configurations on the integration. Results are normalized to OCSF Network Activity (class_uid 4001).
Query Traffic Log Configurations
Returns traffic log configurations discovered for the integration.
