Appearance
Catch threats across all your Microsoft 365 tenants
Monitor all your client tenants from a single deployment
Timer-triggered polling from Graph API and Management Activity API
JSON-based rule definitions for audit logs, sign-ins, and security alerts