Open for Voting

Capturing events from Unified Auditing in Office 365, Azure AD and integrated applications

Several SIEMs are paying close attention to the need to collect events from Cloud environments such as AWS and Azure.  How can I use LEM to capture events from these environments and correlate the events with those from my on premises assets?