Microsoft 365 Defender Configuration
- Stream events from Microsoft 365 Defender to Event Hubs
- Create a resource group in Azure Portal
- Create a Microsoft Entra App Registration
- Create an Event Hubs namespace within the new resource group
- Create an event hub in the new namespace
- Create a consumer group in the new event hub
- Configure roles to export data to the new event hub
- Configure Microsoft 365 Defender
- Retrieve the connection string for your new event hub