NC Protect Data Connector for Microsoft Sentinel is a connector that ingests NC Protect user activity and protection logs into Microsoft Sentinel for security analysis and automated response workflows. NC Protect is a data security product from archTIS that uses attribute-based access control (ABAC) policies, considering both content and user context, to prevent data loss — whether negligent or malicious. It is designed for use across the Microsoft collaboration stack, including SharePoint. The data connector extends NC Protect's capabilities by enabling log ingestion into Microsoft Sentinel, where security teams can analyze user activity, build custom reports, and cross-correlate NC Protect data with other ecosystem data sources. Key capabilities of the connector include: - Installation directly from Microsoft Sentinel with simple configuration - Built-in Sentinel workbooks to accelerate threat investigation - Custom report creation for user activity and behavior analysis - Advanced auditing of user actions (creating, editing, deleting data; access events; policy/settings changes) - Data visualization within Sentinel - Real-time alerting and workflow triggers on suspicious user activity - Reporting on guest activity within SharePoint NC Protect also provides centralized reporting and management of sensitive data access, allowing policy officers to review classification-level issues and take remediation actions such as rescanning, reclassifying, or reapplying permissions.