SourceAgent ExtAPI Plugin¶
The ExtAPI plugin is a software module pluggable into SourceAgent. The plugin performs scheduled downloads of audit logs from following API’s of Microsoft and Google cloud services:
- Google Workspace Admin SDK Reports API - provides Activities audit logs and Reports
- Azure Active Directory Activity Reports API. The API provides two types of activity reports for Office 365 and Azure: audit and sign-in logs. The directory audit report provides you with records of system activities for compliance. The sign-in reports helps you determine who performed the tasks reported by directory audits. There are several reports representing different type of sign-in operations: interactive and non-interactive user, service principal and managed identities sign-ins.
- Office 365 Management Activity API - provides audit information about user, admin, system, and policy actions and events for Office 365 and Azure Active Directory. The events are organized into different logs by content type (AzureActiveDirectory, Exchange, SharePoint, DLP and General).
- Azure Monitor REST API - provides Azure activity logs which contain audit information regarding operations on each Azure resource in the subscription of a tenant, as well as events generated on the tenant level.
The ExtAPI plugin is available for download at https://www.spectx.com/get-spectx. Note that it requires either Enterprise or Business License for SpectX with corresponding Cloud Data API Access enabled.
The plugin requires SourceAgent of version 1.4.70 or above.