SIEM & Detection · Security Programs
Microsoft Sentinel for NIST Cybersecurity Framework 2.0
What Microsoft Sentinel’s data evidences toward NIST Cybersecurity Framework 2.0 today, and how to connect it.
Coming soon
What Microsoft Sentinel evidences here
- Incidents & alerts feeds Detect (DE)
This is where Microsoft Sentinel’s data is documented as relevant on our NIST Cybersecurity Framework 2.0 page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Microsoft Sentinel
Incidents from Microsoft Sentinel, plus analytics-rule coverage showing which ATT&CK techniques you can actually detect.
About NIST Cybersecurity Framework 2.0
The current CSF, including the GOVERN function. Used as the hub other frameworks crosswalk through, so evidence you map once counts in more than one place.