Azure Telemetry SDK

Unlock Security Insights, Accelerate Confidence Instantly

---

---

Built with the tools and technologies:

Comprehensive security and compliance monitoring for Azure and M365 environments

Overview

The Azure Telemetry SDK is a modular framework designed to collect, analyze, and report on security and compliance telemetry across Azure and Microsoft 365 ecosystems. The system provides:

• Multi-interface access (CLI, GUI, PowerShell)
• Comprehensive connector suite for Azure services
• Advanced inspection and analysis capabilities
• Flexible reporting outputs
• Enterprise-grade authentication and logging

Architecture Components

User Interface Layer

• CLI Launcher: Command-line interface for scriptable operations
• GUI Launcher: Graphical interface for interactive use
• PowerShell Bridge: Integration module for PowerShell automation

Core Orchestration

• Main Orchestrator: Central controller for execution flow
• Task Scheduler: Manages inspection timing and sequencing
• Dependency Manager: Handles component dependencies

Authentication Service

• Auth Manager: Unified authentication controller
• Interactive Auth: User credential authentication
• Service Principal Auth: App/service authentication
• Certificate Auth: Certificate-based authentication

Service Connectors

• Azure Connector: Azure Resource Manager API integration
• Graph Connector: Microsoft Graph API integration
• M365 Connector: Office 365 service integration
• Security Connector: Azure Security Center integration
• SharePoint Connector: SharePoint Online integration
• Teams Connector: Microsoft Teams integration

Inspection Modules

Active Directory

• Domain Inspector: AD DS configuration and health checks

Azure Resources

• Compute Inspector: VM and container security inspection

Microsoft 365

• Exchange Inspector: Mailbox and transport rule analysis

Analysis Engines

• Threat Analyzer: Identifies potential security threats
• Compliance Analyzer: Checks regulatory compliance status
• ML Analyzer: Applies machine learning to detect anomalies

Reporting System

• Reporting Engine: Central results processor
• HTML Reporter: Interactive web reports
• CSV Reporter: Machine-readable data exports
• JSON Reporter: Structured data format
• PDF Reporter: Printable document format
• Dashboard Generator: Visual analytics dashboard

Cross-Cutting Concerns

• Configuration Store: Centralized configuration management
• Logging Layer: Unified structured logging system

Usage

Basic CLI Example

python cli_lancher.py --mode quick --format html --config config/defaul_config.yaml 


### demo
https://drive.google.com/file/d/1uc0uQ9hraohvO1ytSrYYH3IK8rPfBnna/view?usp=sharing