Entra ID and Microsoft 365 Insights App

The O365 & Entra ID Security (DS) app provides unified security visualization across Microsoft 365 and Microsoft Entra ID environments. It consolidates telemetry from the Office 365 Management Activity API and Azure AD diagnostic logs delivered via Event Hub, covering sign-in security, directory and audit changes, data collaboration events, application and AI usage, and global threat geography. The app processes three source types: o365:management:activity for Microsoft 365 activity data, and azure:monitor:aad and mscs:azure:eventhub for Entra ID diagnostic logs including SignInLogs and AuditLogs. Six dashboards deliver specialized views into identity security, executive-level summaries, collaboration risk, and global threat patterns. The app relies on external add-ons for data collection and supports macro-based index configuration for production performance tuning.