Technology Blogs by SAP
Learn how to extend and personalize SAP applications. Follow the SAP technology blog for insights into SAP BTP, ABAP, SAP Analytics Cloud, SAP HANA, and more.
Showing results for 
Search instead for 
Did you mean: 
SAP released the trial version of SAP Enterprise Threat Detection 1.0 SP07 (ETD) as SAP Cloud Appliance Library (CAL) on Amazon Web Services, Microsoft Azure and Google Cloud Platform: SAP Enterprise Threat Detection 1.0 SP07

General information on CAL is available here: SAP Cloud Appliance Library (CAL).


Trail license for 30 days:

  • No SAP CAL subscription fee

  • No SAP license costs

  • Only pay for the hyper-scaler cost (direct to Amazon Web Services, Microsoft Azure and Google Cloud Platform)

After 30 days trail license:


You need an account for at least one of the following hyper-scalers:

  • Amazon Web Services

  • Microsoft Azure

  • Google Cloud Platform

What is included?

Backend image containing SAP Enterprise Threat Detection (SAP ETD) 1.0 SP07, which is based on or complemented by:

  • SUSE Linux Enterprise Server 11

  • SAP HANA 2.0 Platform Edition SPS03 Revision 36

  • SAP HANA 2.0 Streaming Analytics SPS03 Revision 36

  • SAP S/4 HANA 1809 with SAP Kernel 773 PL 10

SAP S/4HANA 1809 is a pre-assembled Rapid Deployment Solution bundle. The system is fully configured and can be used for demonstration or evaluation purposes. SAP S/4HANA is included in this solution and act as a log provider and is being monitored by SAP ETD.

 Frontend image containing:

  • Microsoft Windows Server 2008

  • SAP GUI for Windows 7.40

How to access the solution?

Solution runs on a S/4 HANA system with ABAP and SAP HANA, and a Windows Remote Desktop “Frontend” server with connectivity to the backend.

  • Solution can be accessed via browser

  • Backend systems can be accessed via remote desktop server, via SAP logon directly or via SAP HANA Studio

  • Solution can be accessed on OS level

What demo scenarios are included?

Using this demo edition, you can use SAP Enterprise Threat Detection to analyze and monitor suspicious activity in SAP S/4 HANA or SAP HANA database.

Providing Logs from SAP S/4 HANA

Automated SAP S/4 HANA processes and manual activities in SAP ERP (for example, calling a transaction, changing user authorizations, debugging, logon, HTTP requests) result in logs. These logs are transferred to SAP Enterprise Threat Detection, where they are visible as events. To manually simulate suspicious access or attacks, which you can analyze afterwards using SAP Enterprise Threat Detection, use the pre-configured SAP Logon on the frontend server for connecting to SAP S/4 HANA.

Providing Logs from SAP HANA SAP

Enterprise Threat Detection can consume audit trails from SAP HANA. In this demo environment HANA Audit Trail is configured to protocol all logons and as an example accesses to a database table. These logs are transferred to SAP Enterprise Threat Detection, where they are visible as events and can be further analyzed. You can even extend the logging by extending the HANA Audit Trail configuration. Build your individual scenarios and learn how you can monitor access to critical assets such as critical database tables and by that be alerted and have the time to react in case suspicious activities are being performed on your critical assets.

SAP ETD Test Events Generation

In this demo environment test events are created to generate noise in the system for demo purposes. Browse through the data and build your individual charts and dashboards within SAP ETD.

 Analyze Events and Alerts with SAP Enterprise Threat Detection

This demo edition enables you to explore SAP Enterprise Threat Detection. You can analyze and monitor suspicious activities in the SAP S/4 HANA system or SAP HANA database, create Attack Detection Patterns, process alerts or you can train the system to learn a new log source by making use of the log learning application. Follow the information on the Welcome page to logon to the SAP ETD Launchpad and the exercises, and to run sample scenarios.


The trial version is time restricted. After that time you can get a partner demo license (standard process) and install SAP ETD


SAP ETD solution provided by the SAP Cloud Appliance Library is a quick and easy way to consume the SAP ETD 1.0 SP07 solution in the cloud. You will receive a preconfigured and ready-to-use SAP ETD solution bundle. This solution bundle and the demo scenarios included can be used to quickly explore SAP ETD's capabilities.

Kick-start your SAP ETD projects - within only few hours!