How to monitor file addition, changes, deletion in sharepoint

[Funto Oladipupo]

Hello wazuh team,

I am trying to monitor office 365 sharepoint activities of any user when a file is added, deleted or modified. 

I have gone through the office365 module in wazuh website and cann see the possibility of monitoring sharepoint but need specific answer to whether FIM like features(whodata and realtime) that we can do implement on servers and workstation is applicable to activities of users on sharepoint. 

Thank and best regards

[Santiago David Vendramini]

Hi! Thanks for using Wazuh! 

If what you want to do is use FIM, you need access to the server where Sharepoint is running, then you need to install an agent, to do this you can follow this documentation link: https://documentation.wazuh.com/current/installation-guide/wazuh-agent/index.html

And finally configure FIM according to this documentacion: https://documentation.wazuh.com/current/user-manual/capabilities/file-integrity/fim-configuration.html

On the other hand, if you need to monitor Sharepoint Online, you will be allowed to monitor this information: https://documentation.wazuh.com/current/office365/index.html

You can configure Office 365 integration by following this steps: https://documentation.wazuh.com/current/office365/monitoring-office365-activity.html

I hope this solves your need.
Let me know if you need anything else,
Regards.

[Funto Oladipupo]

Hello Santiago, 

Sorry about my late reply, just wanted to let you know I have been able to set it up.

I can now get alerts from sharepoint online.

Thank you and best regards

[Santiago David Vendramini]

That's great to hear! Regards!