--- title: Microsoft Sentinel description: Simplify security posture by integrating Acronis Cyber Platform with Microsoft Sentinel. canonical_url: https://www.acronis.com/en/integrations/microsoft-sentinel/ locale: en last_updated: 2026-10-27 --- # Microsoft Sentinel * * * Company:Microsoft Integration:Microsoft Sentinel Category:SOAR & SIEM [Try now](https://www.microsoft.com/en-gb/security/business/siem-and-xdr/microsoft-sentinel/) [Have a question or need help?](https://www.acronis.com/en/contact-us/integrations/) ## Acronis Cyber Platform integration with Microsoft Sentinel Microsoft Sentinel, one of the leading SIEM platforms, allows MSPs to perform security incident investigation and threat hunting. Integrating Acronis Cyber Platform as additional data source, enables MSPs to collect more telemetry and enrich existing telemetry with detections from Acronis Advanced security, while keeping Acronis as a crucial service monitored for dangerous events. Acronis Cyber Protect for Microsoft Sentinel includes 12 custom hunting queries and 4 detection rules which are uploaded directly into the Microsoft Sentinel Content library This integration is enabled through the **Acronis SIEM Connector**. The SIEM Connector uses the Acronis agent as a log writer, enabling MSPs to store Acronis Alerts, Events, Activities, and Audit Log on any endpoint in the customer network from where they can be ingested by the SIEM, or send those logs to a syslog server. The Connector supports CEF and JSON log formats. The custom Acronis detection rules and hunting queries can be added to the Microsoft Sentinel instance of the MSP by activating the Acronis Cyber Platform subscription in the **Microsoft Azure Marketplace** ### Explore resources * [Acronis SIEM Connector](https://solutions.acronis.com/en-us/integrations/acronis-siem-connector/) * [Integration Overview](https://portal.azure.com/#view/Microsoft_Azure_Marketplace/GalleryItemDetailsBladeNopdl/id/acronisinternationalgmbh.azure-sentinel-solution-acronis-cyber-protect/resourceGroupId//resourceGroupLocation//dontDiscardJourney~/false/_provisioningContext~/%7B%22initialValues%22%3A%7B%22subscriptionIds%22%3A%5B%5D%2C%22resourceGroupNames%22%3A%5B%5D%2C%22locationNames%22%3A%5B%5D%7D%2C%22telemetryId%22%3A%22b94acd48-4c5b-4066-a740-9ae8aff19010%22%2C%22marketplaceItem%22%3A%7B%22categoryIds%22%3A%5B%5D%) * [Documentation](https://www.acronis.com/en/support/documentation/mssentinel/) * [Release notes](https://www.acronis.com/en-us/support/updates/changes.html?p=43882) ## Simplify security posture by integrating Acronis Cyber Platform with Microsoft Sentinel. Now with Microsoft Sentinel integration, MSPs will gain full visibility into customers networks and will be able to search for threats across all managed workloads, and correlate events from both security and data protection applications, and run response actions based on collected telemetry, that is now enriched with Acronis data. The integration includes 12 custom hunting queries and 4 detection rules which are uploaded directly into the Microsoft Sentinel Content library. ![Image 2: Simplify security posture by integrating Acronis Cyber Platform with Microsoft Sentinel.](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/4e4222af-e3a4-8f51-252f-d5454564728b.png) ![Image 3: Simplify security posture by integrating Acronis Cyber Platform with Microsoft Sentinel.](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/8547717d-21b4-46c3-c434-fab42c7f3095.png) ## Features ### Simple integration enablement Acronis SIEM Connector 2.0 is built on the principle that enterprise-grade security integrations shouldn't require development-level configuration — they should be easy to use. Enabled through the Acronis SIEM LogForwarding plan, it eliminates manual syslog configuration and certificate generation by leveraging the Acronis agent capabilities. Once activated on Acronis side, it should be enabled for Microsoft Sentinel through the Azure Marketplace. ### Compliance-first architecture With the Acronis SIEM Connector each customer tenant has an independent, dedicated connection to their preferred SIEM instance, ensuring complete data isolation and eliminating compliance risks associated with shared data destinations across multiple tenants. This architectural decision addresses critical compliance requirements by guaranteeing that security events and logs from one customer remain completely separate from those of other customers, even within the same MSP account. ### Select data you want to see It is possible to select what Acronis data should be sent to Microsodt Sentinel: Alerts, Activities, Events, or Audit Log. This comprehensive data collection provides security teams with the extensive visibility required for effective threat detection and incident response. ### Microsoft * [Company website](https://azure.microsoft.com/en-us/products/microsoft-sentinel/) ### Microsoft SentinelFAQ * [Support website](https://www.microsoft.com/en-gb/security/business/siem-and-xdr/microsoft-sentinel/#faq) ## Other integrations by Microsoft ![Image 4: Microsoft Entra ID](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/7278d619-06f9-ace2-2ce1-4bd6f86ae4d5.svg) * Featured ### [Microsoft Entra ID](https://www.acronis.com/en/integrations/microsoft-entra-id/) Microsoft Entra ID simplifies access control and enhances security by allowing employees to use their universal company credentials to access external resources without the need for separate logins. ![Image 5: Microsoft Intune](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/be15f2d6-0460-dc61-e86a-f4f6366e7dda.png) * Featured ### [Microsoft Intune](https://www.acronis.com/en/integrations/microsoft-intune/) Deliver all-in-one cyber protection to Microsoft Intune managed workstations easily across your customers. ![Image 6: Microsoft Teams](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/756726a0-999d-4eed-f3c9-2db49063103f.svg) ### [Microsoft Teams](https://www.acronis.com/en/integrations/microsoft-teams/) Acronis Cyber Protect Cloud offers a security toolbox that extends to Microsoft Teams and is designed to support the five vectors of cyber protection. ![Image 7: Microsoft 365](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/a7d50d61-8d18-c9b9-d0d2-3e06de237f43.png) ### [Microsoft 365](https://www.acronis.com/en/integrations/microsoft-365/) Protect clients’ Microsoft 365 applications and data with comprehensive cyber protection. ![Image 8: Microsoft 365 for Acronis XDR](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/a_microsoft/d7c2e70c-4e99-4c1a-d07e-05dddcf8e745.svg) ### [Microsoft 365 for Acronis XDR](https://www.acronis.com/en/integrations/microsoft-365-for-acronis-xdr/) Integrate with Microsoft 365 apps, such as Entra ID, SharePoint, OneDrive, Teams and Outlook to gain visibility for your incidents and enable a swift response to suspicious users and files. ![Image 9: Microsoft Azure](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/8bd2f240-eb70-4b1a-dc76-116d075a943e.svg) ### [Microsoft Azure](https://www.acronis.com/en/integrations/microsoft-azure/) Pre-built integration to configure Azure Storage as a destination for Acronis Cyber Platform backups. ## Discover the Acronis Technology Ecosystem Explore how Acronis partners with top technologies to deliver secure, integrated, and automated solutions. Stay informed and unlock new opportunities through our growing ecosystem. ### New Case Study Nord Security business suite accelerates product adoption by 350% through the Acronis Technology Ecosystem [Read now](https://www.acronis.com/en/resource-center/resource/nord-security-business-suite-accelerates-product-adoption-by-350-percent/) ### Build an Integration Learn how to build with Acronis Technology Partner Program [Submit integration](https://developer.acronis.com/en-us/) ### Request an Integration Tell us your suggestion for our next integration [Submit suggestion](https://www.acronis.com/en/contact-us/integrations/) ### Ecosystem Webinar Learn more about the Rewst and Acronis Integration [Watch now](https://acronis.events/event/streamline-and-secure-your-msp-business-the-financial-benefits-of-automated-cybersecurity) ### Ecosystem Events Five takeaways from MSP Global 2025 [Read now](https://www.acronis.com/en/blog/posts/five-takeaways-from-msp-global-2025-for-msps-building-their-stack-with-acronis-integrations/) ### Ecosystem News Acronis Ecosystem Reaches 300 Technology Integrations [Read latest news](https://www.acronis.com/en-us/pr/2025/acronis-ecosystem-reaches-300-technology-integrations-drives-new-opportunities-for-msps-and-isvs/)