Azureadhunting - #6
Merged
Merged
Conversation
1- anomalous azure AD apps whose authentications have very high relative location count. 2- new authentication locations vs historical baseline. 3- accounts with multiple signins from different locations within short time period.
timbMSFT
requested review from
aprakash13,
juliango2100,
robeving and
Shain (shainw)
December 5, 2018 16:24
Shain (shainw)
pushed a commit
that referenced
this pull request
Mar 26, 2021
Afad connector merge with master
v-ntripathi (NikTripathi)
pushed a commit
that referenced
this pull request
Mar 4, 2022
v-ntripathi (NikTripathi)
pushed a commit
that referenced
this pull request
Jun 20, 2022
Change vulns table name in queries and description (from Tenable_IO_Vulns_CL to Tenable_IO_Vuln_CL)
v-ntripathi (NikTripathi)
pushed a commit
that referenced
this pull request
Jul 22, 2022
removed the data folder, rebuilt solution including playbook for addC…
v-ntripathi (NikTripathi)
pushed a commit
that referenced
this pull request
Aug 3, 2022
Add Darktrace Workbook Preview Images and Update logos
Anki Narravula (anki-narravula)
pushed a commit
that referenced
this pull request
Aug 26, 2022
add SystemAssigned to workflows
Anthony Ledesma (arledesma)
pushed a commit
to mindstream-it/Azure-Sentinel
that referenced
this pull request
Sep 9, 2022
XDR-1172: Add schedule to sync pipeline
Ofer Shezaf (oshezaf)
pushed a commit
that referenced
this pull request
Dec 13, 2022
…-microsoftwindows-events Asim/kustoking/add-registryevent-microsoftwindows-events
Meena Kumari Chatla (v-mchatla)
pushed a commit
that referenced
this pull request
Dec 30, 2022
Azurekid/azure dev ops auditing
v-dvedak
pushed a commit
that referenced
this pull request
Mar 29, 2023
…playbook first. (#6) Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
v-dvedak
pushed a commit
that referenced
this pull request
Mar 29, 2023
commit 137d60b0108b297faa722982fc587bb241b1012c
Merge: c8c8b6d82 7e13ac1fc
Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com>
Date: Tue Mar 14 07:47:14 2023 -0700
Merge branch 'Azure:master' into master
commit 7e13ac1fcb778f2c3c3b2fdc3753a7e3aa11151d
Merge: ce8280925 7cea6315b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 18:31:01 2023 +0530
Merge pull request #7549 from Azure/v-rbajaj/ciscouscciscomeraki
Updating CiscoUCS and Cisco Meraki
commit ce8280925c2b9ab93c0e675c17a46778bdc97498
Merge: efe120329 46bbf1324
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 17:24:47 2023 +0530
Merge pull request #7546 from Azure/v-rbajaj/azureactivedirectorysolution
Repackaging Azure Active Directory
commit efe12032972be7a40463e8a2d4e3d87c14946d65
Merge: ee655784a fb0ebb098
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 16:56:13 2023 +0530
Merge pull request #7441 from Azure/v-rbajaj/ISCBind
Update in data connector and parser
commit 46bbf1324b1a0c6c71357548afea99478e214156
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 16:44:48 2023 +0530
repackaged with changes in data connector
commit 7cea6315be9f72785888bcecbb98709ab55e2531
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 16:19:11 2023 +0530
Fixing UI changes
commit ee655784a87594ae3fc688d37ff7ee6126a5a3b3
Merge: 78ef61068 60011ccf9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 16:05:06 2023 +0530
Merge pull request #7552 from Azure/v-vdixit/parsers-update-solutions
Updating UI for Blackberry CylancePROTECT Solution
commit 78ef61068a07390604612c8d38202a5b09a7d613
Merge: 7955d224b 9bfc71d94
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 15:48:37 2023 +0530
Merge pull request #7285 from Azure/v-vdixit/KQLvalidationsMultipleSolutions
Hunting Queries KQL validations for Multiple Solutions
commit 7955d224b1722197786493f4399b22976871410d
Merge: 066e04543 36990e71f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 15:47:32 2023 +0530
Merge pull request #7536 from BenjiSec/AutomationHealthv2
Automation Health workbook update
commit 60011ccf917cb1f23f98a16df0cdb82a6b369f4b
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 14 15:09:34 2023 +0530
Updating UI for BlackberryCyclaneProtect
commit 066e04543942bee44141f0915ec5d18b7a17ad52
Merge: fa775f897 05859e0d1
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 14:51:08 2023 +0530
Merge pull request #7517 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.2
Adding eventGroupingSettings to Analytic Rules
commit fa775f8975ff22f838cdf92432c4973a38eafdf6
Merge: 5e67ce911 0096bcf65
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Tue Mar 14 14:40:36 2023 +0530
Merge pull request #7481 from Azure/v-sabiraj-TemplatespecsolutionforGCPBigquery
Solution creation for GCP big query
commit 9bfc71d94933e7e26cbb081dcdb7a313eac2bb64
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 14:35:52 2023 +0530
updating skipvalidations
commit 39e68c9759a48e594d00a8301cb566a2b7788d5a
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 14:17:59 2023 +0530
Fixing Cisco Meraki createui
commit cd9dde7a137a42d4ee1c2ab5a4c879122a134907
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 14:17:23 2023 +0530
Updating SkipValidationsTemplates.json
commit c94056df6b38e12e70c1b16fced5522ebae7d48a
Merge: e2ce52b9f 5e67ce911
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 13:58:40 2023 +0530
Merge branch 'master' into v-vdixit/KQLvalidationsMultipleSolutions
commit 5e67ce9115f3ffd959fdcc87e44a1f7f18d00c66
Merge: 6221850ff 5d54f6a3d
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 12:39:16 2023 +0530
Merge pull request #6409 from samikroy/patch-32
Created a new tool for creating Incidents with email
commit 0376a9db312494eb9cd019859ea4bbf8f75d83ac
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 11:52:44 2023 +0530
Updating CiscoUCS and Cisco Meraki
commit 5d54f6a3d217cf084f47f2b1d2cec3de203fce3e
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Tue Mar 14 11:45:49 2023 +0530
Update azuredeploy.json
commit e2ce52b9f4cd038ef16af2341f3519f3362c892a
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 11:36:23 2023 +0530
Update UseragentExploitPentest.yaml
commit 28d41367f87e6082fc468fb0308fd6e122878759
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 11:27:41 2023 +0530
Update GCPDNSRareErrors.yaml
commit 7690d7814e1d7e7d3d102a350ad5f3bb2e11d220
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 11:27:02 2023 +0530
Update GCPDNSRareDomains.yaml
commit 6221850ffa51ac38ec68b4c7cfd0ce6034b4280e
Merge: ce0557ac6 dcfba6b67
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 11:01:45 2023 +0530
Merge pull request #7288 from Azure/v-vdixit/kql-validation-tests-for-hunting-queries
Fixed failing KQL validations for Hunting Queries
commit 5ee092c3ca1506e5f81a23e176d15f8d67368d44
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 14 10:51:36 2023 +0530
updating hunting queries
commit dcf74d8e1c23ad55db1c4afc39b075eeb3144c75
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Mon Mar 13 16:05:28 2023 +0530
Repackaging Azure Active Directory
commit ce0557ac60726ac30e189bc0146640723984f3b1
Merge: 5c9360596 4059a2c34
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 13 15:34:47 2023 +0530
Merge pull request #7523 from Azure/v-vdixit/parsers-update-solutions
Repackaging Solutions with Parser instructions Update
commit 5c93605969b1dd18337f00806563d2ed0b69c171
Merge: e968e5f22 bada46d1a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 13 15:31:22 2023 +0530
Merge pull request #7521 from Azure/v-rbajaj/RepackagingSolutions
Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki
commit bada46d1a3f187e985d38c13ca456d963eba6f36
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Mon Mar 13 14:46:55 2023 +0530
Rolled back changes in main template
commit e968e5f22301f00bbd9c6abcd85e130b65f5ea10
Merge: 35058f509 6cca7e5eb
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 13 12:26:24 2023 +0530
Merge pull request #7354 from Azure/v-vdixit/Data-connector-Updates
Data Connector and Parser Update
commit 6cca7e5ebcb2b3feef74c182a1f192f5253145c1
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 13 10:58:58 2023 +0530
updating createUI
commit 35058f5091c83da4fecf65354c70ff35a8783909
Author: danielohfeld <98688758+danielohfeld@users.noreply.github.com>
Date: Sun Mar 12 17:42:11 2023 +0200
Feature/danielohfeld/add readme to gcp terraform (#7541)
* add support for cloudwatch
* add readme for GCP connector scripts
* minor fixes
commit 14a610b53d79bdc9d682b83c3b19f719a3561b54
Merge: db2e74dbe 1e52eb46a
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Sun Mar 12 10:54:07 2023 +0200
Merge pull request #7540 from Azure/asim/update-pa-web-parser
asim/update-pa-web-parser
commit 1e52eb46ad8cc2ca884c203b5935cb90947a4981
Author: github-actions[bot] <>
Date: Sun Mar 12 08:38:48 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit aec60f35687f112559737bc8dc7004a12abecf0b
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Sun Mar 12 10:35:35 2023 +0200
asim/update-pa-web-parser
commit c8c8b6d826999051728f3a2efde3c3b528f990a0
Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com>
Date: Sat Mar 11 00:04:13 2023 +0530
Rubrik sentinel playbook update (#8)
* Updated readme file by adding prerequisite about to deploy dependent playbook first.
* Fixed the inline comments suggested by Reviewer.
* Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1
---------
Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
commit 655ee3cf22b59fd5bfa0f9d47e719edc7ab372d7
Merge: 4faee01b9 d2161119e
Author: Ben Meadowcroft <ben@benmeadowcroft.com>
Date: Fri Mar 10 10:31:17 2023 -0800
Merge branch 'master' of https://github.com/rubrikinc/Azure-Sentinel
commit 4faee01b9aa034e953fc59afaf510fd50ad2bd3e
Author: Ben Meadowcroft <ben@benmeadowcroft.com>
Date: Fri Mar 10 10:27:52 2023 -0800
Squashed commit of the following:
commit 2d1031699e5718207b83fcd80e8ec654a758fdbb
Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
Date: Fri Mar 10 13:39:24 2023 +0530
Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1
commit 4183453f81478807876d7363254517c1ddb0e1fc
Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
Date: Fri Mar 3 21:55:44 2023 +0530
Fixed the inline comments suggested by Reviewer.
commit fe95a41a4843e89659691e5a6970648467a25f5f
Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
Date: Tue Feb 28 12:24:11 2023 +0530
Updated readme file by adding prerequisite about to deploy dependent playbook first.
commit d2161119e3d333f1885053b5712d536ede41d025
Merge: ad957cce6 db2e74dbe
Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com>
Date: Fri Mar 10 10:04:56 2023 -0800
Merge remote-tracking branch 'upstream/master'
commit db2e74dbe16108af7e366b6afcd5a42f5cc468c2
Merge: 562c13712 c8b59da62
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Fri Mar 10 19:16:09 2023 +0530
Merge pull request #7530 from Azure/v-sabiraj-fixingWorkbooksbugs
Fixing Bugs for Workbooks
commit 36990e71f65c488335f39fe937e6c03b51b57c15
Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com>
Date: Fri Mar 10 12:15:57 2023 +0000
update to automationheatlth.json
removing link localization
commit f03026b51f95480f0d8fa65dba80c31daa78e886
Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com>
Date: Fri Mar 10 11:54:37 2023 +0000
Automation Health workbook update
commit 562c137120dabe36243fd15e08db200bd2c06d84
Merge: 4fe9115e1 fa6c5025e
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 10 17:20:27 2023 +0530
Merge pull request #7516 from Azure/v-rbajaj/virustotalsolution
Repackaging VirusTotal
commit c8b59da628ef3816369d9bf511ac9636e6907b46
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 10 16:42:40 2023 +0530
Updating maintempate and UI for workbook
commit 61964eb1494ae39797814f87e2a7f79517195ec4
Merge: be0b737d9 4fe9115e1
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 10 16:29:38 2023 +0530
Merge branch 'master' into v-sabiraj-fixingWorkbooksbugs
commit fa6c5025e21bbecaecbdaefeb5b759483389c3e0
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Fri Mar 10 13:43:02 2023 +0530
updated zip
commit 4fe9115e1e913ef3388b3fc86a418a767f71fd88
Merge: a90f55966 147d26cd5
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Fri Mar 10 12:06:18 2023 +0530
Merge pull request #7341 from tduarte14/patch-1
Show the actual Role and Fix InitiatingUser
commit a90f559669869d4d958af14f97cc07252aad068b
Merge: 1fda18445 78dba38e9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 10 11:27:56 2023 +0530
Merge pull request #7430 from danymello/vectra_detect_analytics_fix
fix typo and remove URL mapping
commit 4059a2c3476388cebc9a5902b9cadedd384c822d
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Fri Mar 10 10:45:44 2023 +0530
updating connector desciption
commit d14f7604518fd503a148b379bff90b7b4cb67cf8
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Fri Mar 10 10:32:30 2023 +0530
Updated data connector description
commit 1fda184457f19e9269d028390c0d37628c24dcc1
Merge: 1817a14a8 8bbe8fd03
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 12:49:54 2023 -0800
Merge pull request #7531 from Azure/pebryan/3_9_2023_AiTMDetection
Added new AiTM detection
commit 8bbe8fd0335ffd3b739588740f6c6325ca526ffb
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 12:30:03 2023 -0800
Added extra data connector
commit 40ff5715ecca2c0b98ad00a70449d541ac2763ac
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:37:34 2023 -0800
Added exclusion for unknown ASIM parameter
commit 73aa25e03620d2f626bebf66f570d956880aeedb
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:15:11 2023 -0800
Updated alert desc format
commit 72f1018cbdf89c7487665424a4f39ec2da7ee0f2
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:02:00 2023 -0800
Added new AiTM detection
commit 1817a14a86c15cb0b3a2177c528dcab872524a59
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:00:43 2023 -0800
Remove file accidently pushed to master
commit ca7b27fa1ac55a2e2c0342e40323e1da7acc65ac
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 10:53:55 2023 -0800
Added new AiTM detection
commit be0b737d9bcc9ef9a90c29501818e8a4ed3d44c3
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Thu Mar 9 23:38:25 2023 +0530
Fixing Bugs for Workbooks
commit a02ce85c96f162de6f8cc06f07a53b6525f0ff7f
Merge: 156b3e8bb 7587e5653
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Thu Mar 9 18:25:22 2023 +0200
Merge pull request #7526 from Azure/asim/add-registry-generation
Update convertKqlFunctionYamlToArmTemplate.yaml
commit 7587e5653d71c287acd784443c68498e5896736d
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Thu Mar 9 17:15:23 2023 +0200
Update convertKqlFunctionYamlToArmTemplate.yaml
commit fb0ebb098e6929bb4eeca308d461032de4b623b5
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 17:22:19 2023 +0530
Updated CreateUI and repackaged
commit 8a1ca5661878578ef6309ced0870eb2734ab7a58
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 9 15:33:29 2023 +0530
Repackaging Solutions with Parser instructions update
commit 0dfa042269ebb7389bcddb6257f9178dc644c9e3
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 15:18:37 2023 +0530
validation fixes and necessary changes
commit 5714200c8ce499f47d9cabfce271712c44f06a78
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 14:08:59 2023 +0530
fixing validations and discarding createui changes
commit f3113391c3eb033119d9ad5e79652b4542006a06
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 12:55:59 2023 +0530
Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki
commit 156b3e8bb2abdcc554f0cf7df205c93aa3e8fb8f
Merge: b49fa6474 8d7e5d6ec
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 9 12:35:52 2023 +0530
Merge pull request #7519 from Azure/Fixingworkspacedetection
Fixingworkspacedetection
commit 2bc53fda6699c7b3405af9619ceb274b29609b45
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 9 12:16:42 2023 +0530
Updating workbooks text
commit 78f7d5392a8fcb8a35ded57ba1b701a460ccf618
Merge: 4fd02df11 79308d0fe
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 9 12:02:48 2023 +0530
Merge branch 'master' into v-vdixit/Data-connector-Updates
commit b49fa6474962a5968ecc62f17058846e98e991d6
Author: treyperrone <trey.perrone@gmail.com>
Date: Thu Mar 9 01:20:42 2023 -0500
Update MaliciousOAuthApp_O365AttackToolkit.yaml (#7397)
* Update MaliciousOAuthApp_O365AttackToolkit.yaml
Current rule uses an older defaults for `Consent.Full` that was deprecated from the file: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/2231565f576e2d655cb9444ffed7309374c454a5/static/index.html#L29
The NEW defaults generated in Nov 2020 are here: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/master/template.conf
old values to match on: `"offline_access","contacts.read","user.read","mail.read","notes.read.all","mailboxsettings.readwrite","Files.ReadWrite.All"`
NEW values to match on: `"offline_access contacts.read user.read mail.read mail.send files.readWrite.all files.read files.read.all openid profile"`
The current detection relies on finding `mailboxsettings` in LN32 https://github.com/Azure/Azure-Sentinel/blob/c6dce9c3aa4d4b4d02423ac4eb5a6b677a39e432/Solutions/Azure%20Active%20Directory/Analytic%20Rules/MaliciousOAuthApp_O365AttackToolkit.yaml#L32 which means anyone that downloads the current O365 attack toolkit and runs it with the defaults settings will NOT trigger the alert (this drove us crazy for a few hours testing).
* move dynamic array to single array and match on has_any. remove search for single value
* update description verbiage
* updates from github conversation with join and new entity with appdisplayname for investigation graph
* remove orphaned csv of app list, since its embedded in the KQL now. this is better for versioning as well; changes to CSV currently dont prompt a new version on customer side
* put feeds knownapps.csv back, add in analrule, mv-aply consentFull
* bump version 1.0.1 --> 1.1.0 per @devikamehra
---------
Co-authored-by: Meena Kumari Chatla <v-mchatla@microsoft.com>
commit 79308d0fef99fb3f054b0f7b521bc600ee709189
Author: v-amolpatil <107389644+v-amolpatil@users.noreply.github.com>
Date: Thu Mar 9 11:02:51 2023 +0530
Get-GeoFromIpAndTagIncident Playbook Issue fix (#7513)
* updated code
* updated code as per review comment
commit 87e64dda6408ba6329b1f9bb9df7eb7684a2df6f
Author: v-rbajaj <120547590+v-rbajaj@users.noreply.github.com>
Date: Wed Mar 8 17:30:20 2023 +0530
Repackaging Microsoft 365 (#7515)
* Repackaging Microsoft 365
* Updated zip file
* updated data connector description
* Updated zip
commit 05859e0d14b2defc50dc4c4015d3ce352fe4cba9
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 8 11:55:47 2023 +0100
Adding eventGroupingSettings to Analytic Rules
commit 0096bcf653a17a64e2da284a2fb1c0b248ebf7b5
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 8 15:55:42 2023 +0530
Updated UI description
commit f525e87aa8bfda8c44520b4b81a111642a2673db
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 8 15:38:21 2023 +0530
Repacking VirusTotal
commit 13a9298f0425bc7e71d3ffa6fdae49320a49a212
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 8 14:59:08 2023 +0530
Updating package by adding variables for connector
commit 1eb52deee6fb3e22b95bb9abeabd2486210ea6c9
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Wed Mar 8 14:47:18 2023 +0530
Fixing bugs for Recorded future workbook (#7511)
commit 6125f4ece5d0604bda40725b03dfc7df0271bc03
Merge: 50804e482 7498bb905
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 8 09:56:58 2023 +0200
Merge pull request #7514 from TristankMS/patch-3
Update vimAuthenticationEmpty.yaml
commit 62e232e7ced3df4265d7b6b9a0ce8152aa532cae
Merge: b21194605 330f50fc2
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 8 12:21:53 2023 +0530
Merge branch 'master' into v-sabiraj-TemplatespecsolutionforGCPBigquery
commit 50804e482c0ebc426966cca1821ab66951914f4f
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Tue Mar 7 22:29:10 2023 -0800
Update SharePoint_Downloads_byNewUserAgent.yaml (#7509)
* Update SharePoint_Downloads_byNewUserAgent.yaml
Adjusted to 8d due to perf considerations and doing 8d as query should be comparing the last day to the previous 7 days to the last day, otherwise it will miss like actions for the same day one week ago, Change order of operation for checking time, do not need to summarize the min/max time in the RecentActivity portion of the query as it is timebound to the last day, do not need to check the time frame of the results as again it is already time bound to last day after the join back to get full details of identified events, removing old entity mapping rows, bringing through proper account entity fields
* Update SharePoint_Downloads_byNewUserAgent.yaml
change to make_set
commit 330f50fc2d6f70704573695830408e2a8ccfbbb0
Author: René Ammerlaan <78021472+rene-ammerlaan@users.noreply.github.com>
Date: Wed Mar 8 06:53:27 2023 +0100
Rename Auth0 custom table to match documentation (#7319)
* Rename Auth0 custom table to match documentation
* Update Auth0Connector zip file
* Add union to Auth0 KQL parser file
commit 7498bb90581ab1ff9d88adee33456f7bf3a71ade
Author: Tristan Kington <TristankMS@users.noreply.github.com>
Date: Wed Mar 8 16:47:41 2023 +1100
Update vimAuthenticationEmpty.yaml
And convert to more standard datatable syntax
commit ef907ed8296d6281c2eb19a2020c2a4723bb5caa
Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com>
Date: Wed Mar 8 04:52:52 2023 +0000
Fixed deprecated command columnifexists (#7402)
Replaced deprecated columnifexists with column_ifexists
Replaced make_set(<<FIELD>>) with make_set(<<FIELD>>,200), so the max items is defined as it's recommended.
commit 01b5cd6e77860d3aeba51472002b33b09eaf5006
Author: v-prasadboke <117061676+v-prasadboke@users.noreply.github.com>
Date: Tue Mar 7 18:34:10 2023 +0530
Microsoft 365 Defender Repackaging (#7487)
commit 6219ee4b02aed5a94cdfd90ae41ab7ae6cac071c
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Tue Mar 7 18:30:50 2023 +0530
Repackage Checkpoint (#7510)
commit 9e510072288231b5c456be7db18478c7e2973665
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Tue Mar 7 17:53:10 2023 +0530
Update azuredeploy.json
commit 8ac6c8ea08b314fa6ae70007ac78bef6530f67e1
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 7 17:23:50 2023 +0530
Updating solarwindsInventory
commit e790f566351ec95cb2c8f6a1492ecec08f534f28
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 7 16:53:37 2023 +0530
Updated Dataconnector description
commit 3865112a4c604b59b74dccc6397403dac8b4048e
Merge: 7e250a338 9a6ae5c88
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Tue Mar 7 15:59:42 2023 +0530
Merge pull request #7446 from Azure/v-vdixit/Palo-alto-logo-update
Palo Alto Solutions Logo update
commit 9a6ae5c88286b6a34536068454c8eeb6b5f103ae
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Mar 7 15:43:04 2023 +0530
Revert "Update PaloAltoNetworks.json"
This reverts commit 41ef2bf2448a63efdea35c671f750c797443e56a.
commit 41ef2bf2448a63efdea35c671f750c797443e56a
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Mar 7 15:42:14 2023 +0530
Update PaloAltoNetworks.json
commit 2e11f3da21087243f4e57d7c0b8bda7f3194646c
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 13:52:17 2023 +0530
updating logo
commit 4fd02df11117cada5f2345cdb4351b4696efffc0
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 13:03:20 2023 +0530
updating whitespace
commit 7e250a338b2c9a67914547b4991de4d731bb1f3f
Author: Meena Kumari Chatla <108806639+v-mchatla@users.noreply.github.com>
Date: Tue Mar 7 12:12:43 2023 +0530
Rapid7InsightVM IcM(370102413) Fix (#7508)
* Last Scan Details Fix
Last Scan Details Fix
* Fixed keyError for last_scan_date attribute
* Added log to print recieved event
* Removed the logging
Removed the logging
---------
Co-authored-by: v-rucdu <v-rucdu@microsoft.com>
commit c2f74b070315b32f8745195984df6a625d754a23
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 11:04:41 2023 +0530
updating alignment
commit 84be7b8805a856c45415573e20b219eb306c30c2
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 10:42:28 2023 +0530
updating note
commit 44196df0f6ee93c7ab3c43524bd585a00b0d9d79
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 7 10:31:33 2023 +0530
Updating OCIdestinations
commit df6b93c3927babc6225b6239c05615d73491c0ea
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 10:27:47 2023 +0530
update2.0.2 zip
commit b07ee23f81b1d2d7f51cfb77b730c1396a0a3072
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 10:27:07 2023 +0530
updating connector description
commit 8c6e1afb5ac713a33509ad30cd80e60e6aea3f5c
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 7 10:25:01 2023 +0530
Updating OracleDBAudit
commit 415b148a1495d240e1cecbfc44f5637b0ac85e3d
Merge: 4fa7945e3 0c6e3462e
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Mon Mar 6 18:08:31 2023 -0800
Merge pull request #7494 from Azure/shainw-FixMessageParse
Update ssh_potentialBruteForce.yaml
commit 0c6e3462e3984aa10d16b455883e03e1fd640bdf
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Mon Mar 6 17:39:54 2023 -0800
Update ssh_potentialBruteForce.yaml
Updating description to explain how we are attempting to bring through single valued arrays for use in entity mappings.
commit 33fb191f9638f9fe948a7d690476e4f34d31b1c2
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 6 23:28:57 2023 +0530
updating description of connector
commit 0d025d55539c660d04cdac19de7150b61e3af028
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 6 17:28:52 2023 +0530
updating version
commit 2d80a8c821bb2085897144daae50460b724ee997
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 6 17:02:28 2023 +0530
updating connector
commit 4fa7945e3a48d1eba3d293ca6811b07e5b7b85da
Merge: b6824cad6 3d674c9fa
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 15:17:12 2023 +0530
Merge pull request #7363 from Azure/v-vdixit/file-path-update
Detections files path update
commit 8d7e5d6ecd89ae8db70a12fdfbc30bc591942718
Merge: 180f25a8a c5387e48f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 15:03:32 2023 +0530
Merge pull request #7432 from treyperrone/patch-3
Update to add `where` IP find/search
commit b6824cad6fefa2c99ae55c1bb0472e71fd77498a
Merge: 880c2e932 2cb1f93a1
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 14:32:10 2023 +0530
Merge pull request #7343 from daspiker/IslandSentinelSolution
Island sentinel solution
commit 880c2e9321d86b66955c9e86a450d9d854583904
Merge: 96e7babc5 3b16a888a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 14:10:53 2023 +0530
Merge pull request #7498 from Azure/v-sabiraj-updatingflaresolution
Updating package for Flare
commit 3b16a888ab45b5da8dcb1a1968739d1edd358e58
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Mon Mar 6 11:27:23 2023 +0530
Updating version
commit 139c54cf65df9a31496f3a47330f3dd49a86892b
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Mon Mar 6 11:16:25 2023 +0530
Updating package for Flare
commit 96e7babc572e0d9225fb8efd35f6781fcb599a30
Merge: b4e21be1d e4b232cd2
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 11:11:54 2023 +0530
Merge pull request #7497 from Azure/origins/rahul/EntityPlaybooks
Entity Playbooks
commit 73ea96dd186906dd4408d0b745456fc5b594d013
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Mon Mar 6 10:54:26 2023 +0530
Update azuredeploy.json
commit b4e21be1d7fb0b83cb76556f5fbcfade4a4fdf0d
Merge: 0d1b98bf7 04546475b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 10:48:21 2023 +0530
Merge pull request #7476 from nickt444/tvm
hide table only available to private preview
commit 0d1b98bf7b250ba44261e1f1f416dad7caa28be3
Merge: bc84294cd fdd23459a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 10:47:29 2023 +0530
Merge pull request #7436 from syed-loginsoft/cybersixgill-aa-offerid-update
Cybersixgill Actionable Alerts offerid update
commit 04546475be17994bdb22fc8795ac079b3325b235
Author: Nick Torkington <nicktork@microsoft.com>
Date: Mon Mar 6 15:07:01 2023 +1100
reverting version to 1.0.0
commit bc84294cded4ff5c20ea3588c9ed2a378615dd16
Merge: 1086aa87b 2d4e0266b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 09:04:28 2023 +0530
Merge pull request #7420 from Flared/v-sabiraj-AddingAnalyticRuleforFlare
V sabiraj adding analytic rulefor flare
commit 1086aa87b2305d91ab07bcdb0910ee01bf00e326
Merge: 6bfcebb28 53f5f98a5
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Sun Mar 5 23:35:46 2023 +0200
Merge pull request #7495 from Azure/asim/fix-auth-deploy
asim/fix-auth-deploy
commit 53f5f98a5a677f87f87337e63112c114070f4b27
Author: github-actions[bot] <>
Date: Sun Mar 5 21:12:58 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit 79c3388ed0cad6fc918ff9d55592f2135c88dd69
Author: Ofer Shezaf <github@shezaf.com>
Date: Sun Mar 5 23:09:48 2023 +0200
Update getModifiedASimSchemas.ps1
commit 004ebb6dfed43834715bf5ea2828a01d5b97cbf4
Author: Ofer Shezaf <github@shezaf.com>
Date: Sun Mar 5 22:26:21 2023 +0200
asim/fix-auth-deploy
commit 526c66810149b9d8f7c875958535ad56ed76edb5
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Sat Mar 4 14:29:49 2023 -0800
Update ssh_potentialBruteForce.yaml
adding resourceid
commit 36374313d6eebaa3ca86c29e906bf5911607f578
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Sat Mar 4 14:14:18 2023 -0800
Update ssh_potentialBruteForce.yaml
high alert counts in some situations and fixing the regex to properly grab the fields when SyslogMessage ends with characters right after ssh2
commit c5387e48f233e5c5ddc19ac3647610199672681e
Author: treyperrone <trey.perrone@gmail.com>
Date: Fri Mar 3 22:58:39 2023 -0500
add new entity of deleted resource for analyst view
commit d2cbca01fd651e210be81eeea59e57063d2934a9
Author: treyperrone <trey.perrone@gmail.com>
Date: Fri Mar 3 22:49:21 2023 -0500
swap slicker dynamic expansion from @v-atulyadav, bump version from 1.0.5 --> 1.0.6
commit ad957cce63699d6f3d6b7080bb4dbd249db0105a
Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com>
Date: Fri Mar 3 22:37:48 2023 +0530
Rubrik sentinel playbook update (#7)
* Updated readme file by adding prerequisite about to deploy dependent playbook first.
* Fixed the inline comments suggested by Reviewer.
---------
Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
commit 3d674c9fac6a914596a04d708593a0aa63f4beb4
Merge: 7f7f9a0e4 6bfcebb28
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Fri Mar 3 20:06:07 2023 +0530
Merge branch 'master' into v-vdixit/file-path-update
commit 7f7f9a0e43e63318cee55824442a36d538afecb3
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Fri Mar 3 20:01:00 2023 +0530
Updating AWS_CredentialHijack.yaml
commit 6bfcebb289dd7400ff910f60662d6bad9e23e255
Merge: 0ea15f6a4 cf9031e24
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 16:37:07 2023 +0530
Merge pull request #7468 from Azure/v-rbajaj/AzureActiveeDirectory
Repackaging Azure Active Directory
commit 0ea15f6a4ceb70ceb2ebcabfc6f2f0b04607c3f1
Merge: cc977d5ab cd867f54b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 16:28:29 2023 +0530
Merge pull request #7464 from Azure/v-prasadboke-mongodb
MongoDB Repackaging
commit cf9031e24e9950b0f099d0af2306d089291595be
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 3 16:20:44 2023 +0530
Update 2.0.8.zip
commit cd867f54bb93420ffb7f81d2924f98bd37351a1e
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 3 16:13:04 2023 +0530
Update 2.0.2.zip
commit cc977d5abb9ecb6be59945778ed676b8802943fe
Merge: 2b74991d0 695900736
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 15:59:53 2023 +0530
Merge pull request #7450 from Azure/v-rbajaj/VirusTotal
Repackaging VirusTotal
commit d4c9545c3e84f2ce4331f2047318446106a3910c
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Fri Mar 3 15:37:45 2023 +0530
Update azuredeploy.json
commit 67261aac41bd24a03102071733bd4495b35c3dd7
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Fri Mar 3 15:31:56 2023 +0530
Update Readme.md
commit 2b74991d0dbbb9e765a6baea9359b2eef7ceef92
Merge: 0ef04dce3 2f87b2293
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 14:37:20 2023 +0530
Merge pull request #7463 from Azure/v-prasadboke-marklogic
Marklogic Repackaging
commit 147d26cd5021f711908d586b092a961c677e1f5b
Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com>
Date: Fri Mar 3 08:44:44 2023 +0000
Removed "| where TimeGenerated >= ago(2h)"
Reverted the change of using 2h for supposed loopback issue as requested by reviewer.
commit 0ef04dce3c14b142022e3775325fef3bb5db120f
Merge: 2f0ce42e2 388d35226
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 13:51:14 2023 +0530
Merge pull request #7489 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.1
Updates to 2.1.1 solution package
commit 388d352268f869a623c214ae5ff1c17454405ec6
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Fri Mar 3 08:59:36 2023 +0100
Updates to 2.1.1 solution package
In the 2.1.1. package, older archives were included. Removed those.
commit 2f0ce42e2bfe669f700b1ee5955a466e29e7bd91
Merge: 86a9c70dc 2ace3d8f4
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 12:47:51 2023 +0530
Merge pull request #7406 from Azure/v-vdixit/file-path-update2
File path update for detections
commit 86a9c70dcd66d63a7f171f654a8021abfd7308cb
Merge: 998b567c0 b5c8ed537
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 12:25:49 2023 +0530
Merge pull request #7398 from yangsa666/patch-1
Adding hint.strategy=native to support more partitions
commit 998b567c0df55a2c4300cc1eec7e054a1deeba48
Merge: 076f67032 180f25a8a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 12:24:22 2023 +0530
Merge pull request #7360 from Azure/Fixingworkspacedetection
Update to Workspace deletion attempt from an infected device
commit 076f67032e67f6eb6cf64f28efcff971da693ff7
Merge: 0d2bb23a6 437d79f0c
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 11:27:19 2023 +0530
Merge pull request #7479 from pensivepaddle/patch-4
Update AcscEssential8.json
commit 4e64cfa9fce05564a574b35bf9b59a961560247c
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 15:25:07 2023 +1100
added conditional display of parameters
commit bca15f16d9e28bae2e87dc0217594314b2d6f2f0
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 10:11:39 2023 +1100
update version number
commit ba6b41ef940fcb3bee4c78fe06e09af360256248
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 08:27:54 2023 +1100
including fix from PR #7479
commit 08bc20f2e1ef884e3ae9cbbc0a6a0d8d0ea7fab0
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 08:22:10 2023 +1100
reverting fromTemplateId
commit 0d2bb23a6e0dc2d8c237845fe9ed14df43ebd9bf
Merge: 401a4603e 3dc17e1c8
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 17:47:59 2023 +0530
Merge pull request #7458 from Azure/v-sabiraj-MicrosoftDefenderforEndpoint
Adding playbooks to MDE Solution
commit 3dc17e1c85962647767e47f46620addb4573d28b
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Thu Mar 2 17:28:14 2023 +0530
Updated data connector description
commit b21194605446cdc67dfc5002d5ba2b1bb5119ab7
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Thu Mar 2 16:02:02 2023 +0530
SOlution cfreation for GCP big query
commit 219c86db6b3976cf202083a26f20b3dcc8f43ee4
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 21:23:33 2023 +1100
updated version number (again)
commit 401a4603e70040e1d37bfe864bf2c822af88442b
Merge: e6e492dce 481f8462f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 15:38:44 2023 +0530
Merge pull request #7405 from Azure/v-vdixit/file-path-update1
File Path update for detections Files
commit e6e492dce2aa075f14f9005f21b206f5ab843c68
Merge: cffb8bd70 97f4f1194
Author: tamirkopitz <91939884+tamirkopitz@users.noreply.github.com>
Date: Thu Mar 2 12:08:11 2023 +0200
Merge pull request #7478 from Azure/dvir-ms-patch-1
add SENTINEL_AGENT_GUID
commit 437d79f0c362fc9702dd27e4b7871b006d891eca
Author: pensivepaddle <104833713+pensivepaddle@users.noreply.github.com>
Date: Thu Mar 2 11:00:42 2023 +0100
Update AcscEssential8.json
Mix up between two queries/titles, "Restrict Admin Privileges" vs "Multi-factor Authentication"
commit 97f4f11941bc95110c3a698eff1c7fdd38cac656
Author: Dvir Naim <106969883+dvir-ms@users.noreply.github.com>
Date: Thu Mar 2 11:52:44 2023 +0200
add SENTINEL_AGENT_GUID
commit 11ce471fe6cc30e06b680c46e49994a9e014a594
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 20:13:01 2023 +1100
updated workbook version number
commit cffb8bd70ba73966b5ff90d32bcf08c6027e58ea
Merge: 140ae0546 aa6f3500b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 14:21:24 2023 +0530
Merge pull request #7376 from Azure/v-sabiraj-SolutionUpdateforShodan
Template Spec Solution for Shodan
commit 140ae05464972ceba27485b0cfa92a6e94401a55
Merge: b8887b568 20b10d524
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 14:20:51 2023 +0530
Merge pull request #7364 from Azure/v-prasadboke-AtlassianJiraAudit-DataConnector
Atalassian jira audit repackaging
commit b8887b568612d12f32e2fc5ae93a56bf21676556
Merge: 6b61a8de1 695b59d91
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Thu Mar 2 13:11:09 2023 +0530
Merge pull request #7477 from Azure/v-atulyadav/dynamic365
Repackage Dynamic 365
commit 20b10d52435b88c2f9af7077b38f97bf9245c74e
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Thu Mar 2 12:52:35 2023 +0530
Update 2.0.3.zip
commit 079ac1880d0d5a8aea67016dde696d919e046feb
Merge: 979bd03d8 6b61a8de1
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 2 12:46:17 2023 +0530
Merge branch 'master' into v-vdixit/Palo-alto-logo-update
commit 695b59d91d608a76413daafcbb5557f0f7ed437c
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Thu Mar 2 12:45:50 2023 +0530
Repackage Dynamic 365
commit 8c6835d9ba2abf8b49f7bbbea066cb8931b7bcef
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 17:58:16 2023 +1100
updated version number
commit 94bc711c3f91f977eb14ff334b2c7128f63fb0cc
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 17:34:05 2023 +1100
updated fromTemplateId
commit 6b61a8de18aec450e2e40d09f0fd09ca559612bc
Merge: 57c8e8a80 bd66e5508
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 11:36:38 2023 +0530
Merge pull request #7448 from Azure/entrustidentity
[SOAR] New Solution Entrust
commit e60da2809733972966ac56d3532118720d0ea8b9
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 16:59:00 2023 +1100
hide table only available to private preview
commit 979bd03d887b0cbfaaace74826cc183f0e01b881
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 2 10:29:38 2023 +0530
update 2.0.4 zip
commit 57c8e8a80ccc76d33a01f771b10e2c29723e40a5
Merge: 7e4a93b42 83d09eadb
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Thu Mar 2 10:16:42 2023 +0530
Merge pull request #7473 from Azure/v-vdixit/logo-update
Package Update for Google Solution
commit 7e4a93b425391bc34957fa9cfb40b2d90dd390f7
Merge: a75b98838 0f2c9966b
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Thu Mar 2 09:35:11 2023 +0530
Merge pull request #7457 from cwatson-cat/patch-20
Update Dynamics 365 md desc to add Docs link
commit 83d09eadb85d36c1682466a5d36f2781954142d6
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 2 00:24:47 2023 +0530
Package Update for Google Solution
commit a75b98838ac3dfc719939a13fe4343c32d9a837a
Merge: cb984b00c 63fe5ba59
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Wed Mar 1 08:34:24 2023 -0800
Merge pull request #7461 from Azure/shainw-ReduceResults
Update gte_6_FailedLogons_10m.yaml
commit cb984b00cd513e0f944a11f1c3a5e5b9c60c24d6
Merge: cf19c76a6 0410a5375
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 17:57:32 2023 +0200
Merge pull request #7472 from Azure/asim/periodical-fixes-Mar-1-23
Periodical parser updates, Mar 1st 2023
commit 0410a537583eff0b20c2e423b6d4e44641e4d567
Author: github-actions[bot] <>
Date: Wed Mar 1 15:41:25 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit 28698d2c7b5bc58f4fb95668f4e104f7dbbeccfa
Merge: fa1e9c60d cf19c76a6
Author: github-actions[bot] <>
Date: Wed Mar 1 15:41:19 2023 +0000
Merge remote-tracking branch 'origin/master' into asim/periodical-fixes-Mar-1-23
commit cf19c76a601bc00168433f93083c328062d840f2
Merge: dcfc519c9 0159db782
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 17:35:05 2023 +0200
Merge pull request #7471 from Azure/ASimDnsActivityLogs-CustomTable-Adding-Fields
adding fields that were recently added to ASimDnsActivityLogs table schema
commit 0159db7821c4c4b046617dcc6e69c3c10621559d
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 20:32:31 2023 +0530
adding fields that were recently added to ASimDnsActivityLogs table schema
commit dcfc519c9f07f1a646736673e4948ca2631cab53
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 16:48:58 2023 +0200
Update ASimDnsNative.yaml
commit 01d0abfd0891c5d3749e402c0b39a32d063123b8
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 16:48:39 2023 +0200
Update vimDnsNative.yaml
commit fa1e9c60dea9497588fd72e3f92d5a522faa0b41
Author: Ofer Shezaf <github@shezaf.com>
Date: Wed Mar 1 16:46:45 2023 +0200
NetworkSessionMicrosoftWindowsEventFirewall
commit 25c15c6a55a108f81aea4d6cb3e9d0718033f858
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Wed Mar 1 18:52:50 2023 +0530
Update stats.md (#7451)
commit 886c5469c01638e83221e4e1fadff410d9762f81
Merge: d38456d91 fb51c392c
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 18:39:53 2023 +0530
Merge pull request #7419 from txhaflaire/master
Jamf Protect for Microsoft Sentinel - v2.1.1
commit cf2be34436a6bfe71325b11f5667a62836f9e8cc
Merge: 48b2623b6 d38456d91
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 18:25:48 2023 +0530
Merge branch 'master' into v-rbajaj/AzureActiveeDirectory
commit fb51c392c8e18851576a7c94af3a8fc8735be243
Merge: 5d09db59a d38456d91
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 13:53:35 2023 +0100
Merge branch 'Azure:master' into master
commit d38456d91683b98392e125cd5ca923bc50388230
Merge: 0d1754cf1 775998089
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 18:16:43 2023 +0530
Merge pull request #7445 from Azure/PhishingwithCSLandNetworkSession
Detecting potential phishing in correlation with CSL & Network Session logs
commit aa6f3500b3b7a07137f777796d7e0838236e6a0b
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 18:15:23 2023 +0530
Updating description and entities
commit 0d1754cf154cd728b1ae47b825bb5cf04ff02e64
Merge: 830230a5a 412e0667e
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 18:07:59 2023 +0530
Merge pull request #7469 from Azure/arm-ttk-failing-when-solutionname-has-space
Fixed Arm-ttk issue when solution name has space
commit 5d09db59a3561eebda22ccea3ccc5474c006ea0e
Merge: c1043379b 830230a5a
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 13:17:24 2023 +0100
Merge branch 'Azure:master' into master
commit 2ace3d8f45d06a29587eb609335a12672094244b
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 17:36:16 2023 +0530
version update
commit 412e0667ec85ea2280eac4d5886023d995cf2e34
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Wed Mar 1 17:16:39 2023 +0530
fixed issue on space in solution name
commit 830230a5a5faf976be72d703366ff0c4b7949325
Merge: ec2492fbf ce5d3c9fd
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 13:05:50 2023 +0200
Merge pull request #7462 from Azure/ASimDnsActivityLogs-parser-bug-fix
Duplicate column error fixed - DvcScopeId
commit 124aa72e59f7f4b429df341d23d80e1118673111
Merge: 9a009669b 8347232f9
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 16:33:27 2023 +0530
Merge branch 'master' into v-sabiraj-SolutionUpdateforShodan
commit 48b2623b6060ecde9ae4a330086bd3f62a6c72d7
Merge: f960cf697 ec2492fbf
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 16:21:37 2023 +0530
Merge branch 'master' into v-rbajaj/AzureActiveeDirectory
commit f960cf697dd4ddbdffeb9b93e700a45199c9d564
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 16:17:48 2023 +0530
Repackaging Azure Active Directory
commit ec2492fbf8917cdda1e96386a88f405a893b580d
Merge: 7e5fcbdd4 270f7dcf9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 16:16:20 2023 +0530
Merge pull request #7425 from Azure/v-vdixit/logo-update
Google Cloud Solutions Logo Update
commit 7e5fcbdd4df667131778ac5be580803166d4804e
Merge: 76813497b a827835a1
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 16:13:32 2023 +0530
Merge pull request #7453 from Azure/v-sabiraj-fixingsocplaybook
Updating Soc Process package to fix bug
commit c1043379b72765da69124e5a24c99ad357e4a289
Merge: ccd10f67f 49aeb72a7
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 11:28:34 2023 +0100
Merge branch 'master' of https://github.com/txhaflaire/Azure-Sentinel
commit ccd10f67f2c11314948c1f4601044b2c0b48fbc2
Merge: 30d3368dd 76813497b
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 11:28:22 2023 +0100
Merge remote-tracking branch 'upstream/master'
commit 49aeb72a742ff998db913fc539408b760a8959c8
Merge: 0d57ec6e2 76813497b
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 11:05:31 2023 +0100
Merge branch 'Azure:master' into master
commit 76813497ba5fab84d2ad4be0f9733a09268f5c8c
Merge: 8347232f9 25c804a39
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 15:32:17 2023 +0530
Merge pull request #7465 from Azure/v-sabiraj-UpdatingMetadataforbugs
Updating Workbook Metadata to fix gallery bugs
commit 0d57ec6e258c7dbf78f26af2f1c120f6813c1067
Merge: 9c633f503 8347232f9
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 10:50:48 2023 +0100
Merge branch 'Azure:master' into master
commit 25c804a39c842be4e74aba5fca7acf90a8c4d4c6
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 15:17:50 2023 +0530
Updating Workbook Metadata to fix gallery bugs
commit 8347232f97f00439e3ab67d392548a9bea53c0c4
Merge: da1cf1041 377fc2478
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 15:02:51 2023 +0530
Merge pull request #7413 from Azure/v-vdixit/file-path-update3
File path update for hunting queries
commit 481f8462f0d73c9a59717fe8684b9921e5d4dbe5
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 14:59:54 2023 +0530
Version updates
commit f3a462bef7ae545de0bc987d8adce3e4300073af
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 14:59:38 2023 +0530
MongoDB Repackaging
commit 695900736431b3a799ef5565746716aa4562bc19
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 14:43:11 2023 +0530
Updated the 2.0.3 zip
commit d613fb75da68e31787962aa88b292466854f39f4
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 14:42:57 2023 +0530
updating Version
commit 377fc2478efc1ab4fddb2f22eee9c5fb65e1ffc3
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 13:55:05 2023 +0530
updating path1
commit aa8d29521c578568b4408ac98e95cd696d1502f9
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 13:50:52 2023 +0530
updating AzureVirtualNetworkSubnets
commit f65038e41184f5bb13c679842dcf5fadf2654d78
Merge: 7052b594f da1cf1041
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 13:39:11 2023 +0530
Merge branch 'master' into v-prasadboke-AtlassianJiraAudit-DataConnector
commit a827835a10539e698e9aa79d9338e538c706d555
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 13:24:24 2023 +0530
Update azuredeploy.json
commit 50f8752d3fa6e3be7030635a25e21f2468662440
Merge: bd419b31f da1cf1041
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 13:24:16 2023 +0530
Merge branch 'master' into v-sabiraj-fixingsocplaybook
commit ce5d3c9fde86ad1164452558829843280922d9ce
Merge: cdb47b58e ac2f6b0b5
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 13:22:56 2023 +0530
Merge branch 'ASimDnsActivityLogs-parser-bug-fix' of https://github.com/Azure/Azure-Sentinel into ASimDnsActivityLogs-parser-bug-fix
commit cdb47b58e46b4c5db2a97e4fdd520624b319d1d4
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 13:22:49 2023 +0530
added DvcScopeId to the table schema
commit 9c633f503f6085d5e597be7667705ec092541503
Merge: 30d3368dd da1cf1041
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Wed Mar 1 13:21:53 2023 +0530
Merge branch 'master' into pr/7419
commit 2f87b2293ff173dae30dac4c7364efa0a28f48db
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 13:13:23 2023 +0530
Marklogic Repackaging
commit 7052b594f65b43b138c1898f881c8ee4a35ebe86
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 12:32:40 2023 +0530
Update SkipValidationsTemplates.json
commit da1cf1041bdb21a5aaa1c417f52ffe869f241377
Merge: 990ced0af 0b848f0d6
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 12:32:20 2023 +0530
Merge pull request #7282 from Azure/v-vdixit/KQL-validation-fix-for-Multiple-solutions
KQL validations for Hunting Queries for multiple solutions
commit 4bae5b91ad091217a2fe458d32fd2835c676d8ec
Merge: fbb7d0292 990ced0af
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 12:31:02 2023 +0530
Merge branch 'master' into v-rbajaj/VirusTotal
commit ac2f6b0b574fc6467f328bbc6e39a6baff9bafcf
Author: github-actions[bot] <>
Date: Wed Mar 1 06:54:15 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit c216ee722f88074679a8057ee8c1f80692a8bccd
Merge: 0199a1662 990ced0af
Author: github-actions[bot] <>
Date: Wed Mar 1 06:54:03 2023 +0000
Merge remote-tracking branch 'origin/master' into ASimDnsActivityLogs-parser-bug-fix
commit 0199a16622d35eb1a74e3c72f303f5a86068c246
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 12:20:50 2023 +0530
Updated Parser Version and Date
commit e7da9fef44a2c45356a8fd934db3908612db7f6d
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 12:15:14 2023 +0530
Duplicate column error fixed - DvcScopeId
commit a1d177f6022d0a30b74f72b4157a7e004f74aaf9
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 12:15:00 2023 +0530
Update SkipValidationsTemplates.json
commit 990ced0af085cde6851121ce0b87f2cf82daefca
Merge: 3286c9d6b 94e2d842e
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 12:13:56 2023 +0530
Merge pull request #7427 from Azure/origin/users/rahul/gcp-bigquery
GCP BigQuery Solution - Initial commit of solution
commit 3286c9d6b1adc0f6b898dfc8db9d304cd1e23170
Merge: be6b439e8 755249e24
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 12:12:32 2023 +0530
Merge pull request #7294 from Azure/v-ntripathi/MaturityModelWorkbookFixIcM361952128
Fixing workbook query regarding IcM and repackaging
commit fbb7d0292348703f1432812fd6ddc9b573bcea91
Merge: 21c4bed62 be6b439e8
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 11:23:56 2023 +0530
Merge branch 'master' into v-rbajaj/VirusTotal
commit be6b439e8e818d30b4cfb1fdd30ed06b2623304a
Merge: c74e7d817 0407141d9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:43:37 2023 +0530
Merge pull request #6925 from referefref/patch-1
Update AWSBucketAPILogs-SuspiciousDataAccessToS3BucketsfromUnknownIP.…
commit c74e7d8174da6482f81e22d73ea20c8dfce4be5d
Merge: 5d7077c80 3391ffcaf
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:38:08 2023 +0530
Merge pull request #7035 from ep3p/patch-6
Fix fields in Solution/Analytic Rule AzureADRoleManagementPermissionGrant.yaml
commit 755249e24ac7dec840264a1b527c70e90464402e
Merge: 4460ad5b2 ce1b0e7e2
Author: Meena Kumari Chatla <v-mchatla@microsoft.com>
Date: Wed Mar 1 10:31:27 2023 +0530
Merge branch 'master' into v-ntripathi/MaturityModelWorkbookFixIcM361952128
commit 5d7077c805af8ccd6b1b364e4dad95eba89390ea
Merge: ce1b0e7e2 1757d5974
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:30:45 2023 +0530
Merge pull request #7456 from Azure/arm-ttk-issue-fix
Arm ttk issue fix
commit 427a8a26d9c17a24a5d097d17ad1419223f20731
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 10:28:56 2023 +0530
Update IPEntity_DuoSecurity.yaml
commit 89bc51c158b9996b8225c184d2e0dd4f20904de6
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 10:28:01 2023 +0530
Updating AdFind_Usage.yaml
commit 63fe5ba5903964d432fc97940bf77add1e24b67a
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Tue Feb 28 20:34:53 2023 -0800
Update gte_6_FailedLogons_10m.yaml
commit ce1b0e7e2889918b66533a1333f1a47b1aaf14d1
Merge: 3af5f111d 3101d404a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:03:43 2023 +0530
Merge pull request #7431 from briandelmsft/ii_wb_patch
Investigation Insights - ASIM Support
commit bd66e550853991f9681d826e8ac528abcd33b827
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Wed Mar 1 09:04:33 2023 +0530
Update azuredeploy.json
commit 6f3d5a72da513412e73a218d98d45359aee64666
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Wed Mar 1 09:01:46 2023 +0530
Update readme.md
commit 775998089da2b6925873939014e57a34abf8496e
Author: gitj121 <jekurien@microsoft.com>
Date: Tue Feb 28 13:16:07 2023 -0800
Description changes
commit 37428ea2fffae391739b7910cc04c3c8ab010d50
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 00:14:23 2023 +0530
version update
commit 04ad400e02cc6a3b158b67f417885671d68b2101
Author: gitj121 <jekurien@microsoft.com>
Date: Tue Feb 28 10:41:11 2023 -0800
Adding with changes
commit a074d314c8b6bfab71c17afd61d68ab79da0dfa1
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 00:06:08 2023 +0530
version update
commit 3c519a323bae6df8ad7ae41ee83f09393f518dd4
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Feb 28 23:39:59 2023 +0530
Adding playbooks to MDE Solution
commit 0f2c9966b5db3e22e2edc7455fc20b74dedf75df
Author: Catherine Watson <cwatson@microsoft.com>
Date: Tue Feb 28 08:38:50 2023 -0800
Update Dynamics 365 md desc to add Docs link
@prtanej
commit 187ec26e2b36bcc1cae47ff4c684bcf4ac326b55
Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com>
Date: Tue Feb 28 22:00:59 2023 +0530
Updated readme file by adding prerequisite about to deploy dependent playbook first. (#6)
Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
commit 1757d5974db4a74761e73a0672b74d9a802bc132
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Tue Feb 28 21:55:35 2023 +0530
Update arm-ttk-validations.yaml
commit f34c5e317318410318bbf548945bc4bece3a4f2c
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Tue Feb 28 21:45:23 2023 +0530
updated code
commit 3af5f111d58b65d8bb8293f4aacc97776b617bc8
Merge: 68516975f 95df0ea8f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Feb 28 20:02:16 2023 +0530
Merge pull request #7240 from Azure/v-atulyadav/Windows-Security-Events
Repackage Windows Security Events
commit bd9ad173269557a88012a581d698d39b829c9deb
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Tue Feb 28 19:50:49 2023 +0530
updated code to fix
commit 0277f7811b1193e424d656315b07bcc75db350a7
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Feb 28 19:31:27 2023 +0530
updating whitespaces
commit bd419b31f0ebd30e32bc11bc96053b162b396c73
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Feb 28 19:14:27 2023 +0530
Update azuredeploy.json
commit c1061631e5fb01469ff8ab3e771573f1baa7bb9f
Merge: debfbfb03 68516975f
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:54:19 2023 +0530
Merge branch 'master' into v-vdixit/file-path-update3
commit debfbfb03103d7006097b1f4eb8f8278e7de7357
Merge: cf4145086 adf2433a8
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Feb 28 18:46:12 2023 +0530
Updating description
commit cf414508699f640f8ba5dbe174538e1fe100715f
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Feb 28 18:37:37 2023 +0530
updating quotes
commit fdd23459a6420076e93c300c1683b9e1ae401cbb
Author: syed-loginsoft <sdawood@loginsoft.com>
Date: Tue Feb 28 18:19:56 2023 +0530
Updated version from 2.0.0 to 2.0.1
commit adf2433a8d963bdd1765c714c8f64e11c97a250c
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:03:56 2023 +0530
Updating ProofpointPODHighScoreAdultValue.yaml
commit d9c8af19ebadb591c6cabc46acceba17fdd6cfe9
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:02:53 2023 +0530
Updating UseragentExploitPentest
commit 76dac88a9155c3e2287ea44b4dcb4d283e71750b
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:01:57 2023 +0530
Updating quotes
commit 491992bb8f26ec824b69297d7225cc0ab633ea1f
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:01:32 2023 +0530
updating quotes
commit 99a4f75d27c6ba71193083d1bc3cfb40a634e3bf
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 17:59:55 2023 +0530
update RiskyCommandB64EncodedInUrl.yaml
commit 724e15e08602762f13faed85490aaee34029a7e2
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 17:59:19 2023 +0530
Updating quotes
commit 42a2b2d4e823346f6cd7a219edbe1641fb35da2c
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 17:58:45 2023 +0530
updating quotes
commit 21c4bed62c6d7f3da32d804bb039da905cba8577
Merge: 862ad6676 68516975f
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Tue Feb 28 17:58:44 2023 +0530
Merge branch 'master' into v-rbajaj/VirusTotal
commit 68516975f376ac2afed9015a388a28ea80d262af
Merge: 43be861c9 f7bdab119
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Feb 28 17:49:20 2023 +0530
Merge pull request #7404 from Azure/v-atulyadav/ciscoasa
Repackage Cisco ASA
commit b4f680a796a09c2399f3230dcfc917df2fc16903
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Feb 28 17:33:45 2023 +0530
Updating Soc Process package to fix bug
commit 43be861c9bcd458b435ee7d039c7c8ceedad9f58
Merge: acff515d5 cfb24961d
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Feb 28 16:56:14 2023 +0530
Merge pull request #7414 from Azure/v-vdixit/file-path-update4
Hunting Queries files' path update
commit acff515d5c8b5b3f01444d7a3c9ae2f929516cb3
Merge: f40bc8d07 6c1bce777
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Feb 28 16:54:38 2023 +0530
Merge pull request #7283 from Azure/v-mchatla/GCPAuditLogs
GCP Audit Log Packaging Changes with Data Connector
commit f40bc8d07f603ba59ae60c6ae7f103a197bb48fe
Merge: cdac19704 162b7f9f4
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Feb 28 16:37:22 2023 +0530
Merge pull request #7417 from aviatam/talon_solution
Talon solution
commit cfb24961d37a95d1af598c5e1636364b5ec6ab69
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 16:37:12 2023 +0530
updating commas
commit 862ad6676f90a3a57d1f353fc682e3ddd5e377c7
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Feb 28 15:49:21 2023 +0530
Repackaging VirusTotal
updated changes as per master
commit a8d6ee9d8098fb9154049e22f02448db52865897
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Feb 28 15:42:05 2023 +0530
updating domain Pan-OS
commit 30d3368ddd6142fb02af94329135ed2df7e601a7
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Tue Feb 28 10:08:49 2023 +0100
Updated Data Connector version to 2.1.1
commit a1fe1dd12101993c7f77e11e156702affd870e7c
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:36:54 2023 +0530
Update azuredeploy.json
commit 07bd3f6e98fcb9fb5833364bb53bf017b71c5aef
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:36:03 2023 +0530
Update readme.md
commit 22a41b4bbe6e76eccb564a5df5f136592bf1eef4
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:35:41 2023 +0530
Update readme.md
commit e9be7a9f542b02e8a9352691aa4caa23eeae946e
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:34:04 2023 +0530
Update readme.md
commit 944b62556967aff5bb6710e2a6e0fba7c5322413
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:32:37 2023 +0530
Update readme.md
commit 9f8d2f04bb5831ee1d33617e464b246f6ef2f0e2
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:31:24 2023 +0530
Update readme.md
commit b45226929fbb45f5165c459f8416c2f8064068b0
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:29:22 2023 +0530
Update readme.md
commit c2d6f056ea0108d5593f898d88a0771c14a0c844
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:24:04 2023 +0530
Update readme.md
commit cd76700745b961d1460e9611424c51819aab455e
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:22:54 2023 +0530
Update readme.md
commit c0a38c4f8430ccdd90be1ec956dd3440656b9f0f
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:20:37 2023 +0530
Update readme.md
commit 89ac311dfceee54a5c0e096c9c2ef40c8f6abef6
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:20:15 2023 +0530
Update readme.md
commit fbf8f05bfb5f5cbb5525ccc5c0f44ea3fbe68a76
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:19:53 2023 +0530
Update readme.md
commit cb0d1e7533fffc878e9bf9d0f7001b13a25120b3
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:19:22 2023 +0530
Update readme.md
commit e260f3b8937f26d09b3c080c0beb1a9f7faa572a
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Tue Feb 28 14:18:54 2023 +0530
Update readme.md
commit 6d1e5a340e1c9f4a3d6efb3b660343fbf5269a4a
Author: Manish Kumar <man…
v-dvedak
pushed a commit
that referenced
this pull request
Mar 29, 2023
commit 27f02d17c5516dab768afda28edd82e6ab25d215
Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com>
Date: Tue Mar 14 20:15:52 2023 -0700
Squashed commit of the following:
commit 137d60b0108b297faa722982fc587bb241b1012c
Merge: c8c8b6d82 7e13ac1fc
Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com>
Date: Tue Mar 14 07:47:14 2023 -0700
Merge branch 'Azure:master' into master
commit 7e13ac1fcb778f2c3c3b2fdc3753a7e3aa11151d
Merge: ce8280925 7cea6315b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 18:31:01 2023 +0530
Merge pull request #7549 from Azure/v-rbajaj/ciscouscciscomeraki
Updating CiscoUCS and Cisco Meraki
commit ce8280925c2b9ab93c0e675c17a46778bdc97498
Merge: efe120329 46bbf1324
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 17:24:47 2023 +0530
Merge pull request #7546 from Azure/v-rbajaj/azureactivedirectorysolution
Repackaging Azure Active Directory
commit efe12032972be7a40463e8a2d4e3d87c14946d65
Merge: ee655784a fb0ebb098
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 16:56:13 2023 +0530
Merge pull request #7441 from Azure/v-rbajaj/ISCBind
Update in data connector and parser
commit 46bbf1324b1a0c6c71357548afea99478e214156
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 16:44:48 2023 +0530
repackaged with changes in data connector
commit 7cea6315be9f72785888bcecbb98709ab55e2531
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 16:19:11 2023 +0530
Fixing UI changes
commit ee655784a87594ae3fc688d37ff7ee6126a5a3b3
Merge: 78ef61068 60011ccf9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 16:05:06 2023 +0530
Merge pull request #7552 from Azure/v-vdixit/parsers-update-solutions
Updating UI for Blackberry CylancePROTECT Solution
commit 78ef61068a07390604612c8d38202a5b09a7d613
Merge: 7955d224b 9bfc71d94
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 15:48:37 2023 +0530
Merge pull request #7285 from Azure/v-vdixit/KQLvalidationsMultipleSolutions
Hunting Queries KQL validations for Multiple Solutions
commit 7955d224b1722197786493f4399b22976871410d
Merge: 066e04543 36990e71f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 15:47:32 2023 +0530
Merge pull request #7536 from BenjiSec/AutomationHealthv2
Automation Health workbook update
commit 60011ccf917cb1f23f98a16df0cdb82a6b369f4b
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 14 15:09:34 2023 +0530
Updating UI for BlackberryCyclaneProtect
commit 066e04543942bee44141f0915ec5d18b7a17ad52
Merge: fa775f897 05859e0d1
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 14:51:08 2023 +0530
Merge pull request #7517 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.2
Adding eventGroupingSettings to Analytic Rules
commit fa775f8975ff22f838cdf92432c4973a38eafdf6
Merge: 5e67ce911 0096bcf65
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Tue Mar 14 14:40:36 2023 +0530
Merge pull request #7481 from Azure/v-sabiraj-TemplatespecsolutionforGCPBigquery
Solution creation for GCP big query
commit 9bfc71d94933e7e26cbb081dcdb7a313eac2bb64
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 14:35:52 2023 +0530
updating skipvalidations
commit 39e68c9759a48e594d00a8301cb566a2b7788d5a
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 14:17:59 2023 +0530
Fixing Cisco Meraki createui
commit cd9dde7a137a42d4ee1c2ab5a4c879122a134907
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 14:17:23 2023 +0530
Updating SkipValidationsTemplates.json
commit c94056df6b38e12e70c1b16fced5522ebae7d48a
Merge: e2ce52b9f 5e67ce911
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 13:58:40 2023 +0530
Merge branch 'master' into v-vdixit/KQLvalidationsMultipleSolutions
commit 5e67ce9115f3ffd959fdcc87e44a1f7f18d00c66
Merge: 6221850ff 5d54f6a3d
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 12:39:16 2023 +0530
Merge pull request #6409 from samikroy/patch-32
Created a new tool for creating Incidents with email
commit 0376a9db312494eb9cd019859ea4bbf8f75d83ac
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 14 11:52:44 2023 +0530
Updating CiscoUCS and Cisco Meraki
commit 5d54f6a3d217cf084f47f2b1d2cec3de203fce3e
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Tue Mar 14 11:45:49 2023 +0530
Update azuredeploy.json
commit e2ce52b9f4cd038ef16af2341f3519f3362c892a
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 11:36:23 2023 +0530
Update UseragentExploitPentest.yaml
commit 28d41367f87e6082fc468fb0308fd6e122878759
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 11:27:41 2023 +0530
Update GCPDNSRareErrors.yaml
commit 7690d7814e1d7e7d3d102a350ad5f3bb2e11d220
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 14 11:27:02 2023 +0530
Update GCPDNSRareDomains.yaml
commit 6221850ffa51ac38ec68b4c7cfd0ce6034b4280e
Merge: ce0557ac6 dcfba6b67
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Mar 14 11:01:45 2023 +0530
Merge pull request #7288 from Azure/v-vdixit/kql-validation-tests-for-hunting-queries
Fixed failing KQL validations for Hunting Queries
commit 5ee092c3ca1506e5f81a23e176d15f8d67368d44
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 14 10:51:36 2023 +0530
updating hunting queries
commit dcf74d8e1c23ad55db1c4afc39b075eeb3144c75
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Mon Mar 13 16:05:28 2023 +0530
Repackaging Azure Active Directory
commit ce0557ac60726ac30e189bc0146640723984f3b1
Merge: 5c9360596 4059a2c34
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 13 15:34:47 2023 +0530
Merge pull request #7523 from Azure/v-vdixit/parsers-update-solutions
Repackaging Solutions with Parser instructions Update
commit 5c93605969b1dd18337f00806563d2ed0b69c171
Merge: e968e5f22 bada46d1a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 13 15:31:22 2023 +0530
Merge pull request #7521 from Azure/v-rbajaj/RepackagingSolutions
Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki
commit bada46d1a3f187e985d38c13ca456d963eba6f36
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Mon Mar 13 14:46:55 2023 +0530
Rolled back changes in main template
commit e968e5f22301f00bbd9c6abcd85e130b65f5ea10
Merge: 35058f509 6cca7e5eb
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 13 12:26:24 2023 +0530
Merge pull request #7354 from Azure/v-vdixit/Data-connector-Updates
Data Connector and Parser Update
commit 6cca7e5ebcb2b3feef74c182a1f192f5253145c1
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 13 10:58:58 2023 +0530
updating createUI
commit 35058f5091c83da4fecf65354c70ff35a8783909
Author: danielohfeld <98688758+danielohfeld@users.noreply.github.com>
Date: Sun Mar 12 17:42:11 2023 +0200
Feature/danielohfeld/add readme to gcp terraform (#7541)
* add support for cloudwatch
* add readme for GCP connector scripts
* minor fixes
commit 14a610b53d79bdc9d682b83c3b19f719a3561b54
Merge: db2e74dbe 1e52eb46a
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Sun Mar 12 10:54:07 2023 +0200
Merge pull request #7540 from Azure/asim/update-pa-web-parser
asim/update-pa-web-parser
commit 1e52eb46ad8cc2ca884c203b5935cb90947a4981
Author: github-actions[bot] <>
Date: Sun Mar 12 08:38:48 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit aec60f35687f112559737bc8dc7004a12abecf0b
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Sun Mar 12 10:35:35 2023 +0200
asim/update-pa-web-parser
commit c8c8b6d826999051728f3a2efde3c3b528f990a0
Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com>
Date: Sat Mar 11 00:04:13 2023 +0530
Rubrik sentinel playbook update (#8)
* Updated readme file by adding prerequisite about to deploy dependent playbook first.
* Fixed the inline comments suggested by Reviewer.
* Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1
---------
Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
commit 655ee3cf22b59fd5bfa0f9d47e719edc7ab372d7
Merge: 4faee01b9 d2161119e
Author: Ben Meadowcroft <ben@benmeadowcroft.com>
Date: Fri Mar 10 10:31:17 2023 -0800
Merge branch 'master' of https://github.com/rubrikinc/Azure-Sentinel
commit 4faee01b9aa034e953fc59afaf510fd50ad2bd3e
Author: Ben Meadowcroft <ben@benmeadowcroft.com>
Date: Fri Mar 10 10:27:52 2023 -0800
Squashed commit of the following:
commit 2d1031699e5718207b83fcd80e8ec654a758fdbb
Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
Date: Fri Mar 10 13:39:24 2023 +0530
Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1
commit 4183453f81478807876d7363254517c1ddb0e1fc
Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
Date: Fri Mar 3 21:55:44 2023 +0530
Fixed the inline comments suggested by Reviewer.
commit fe95a41a4843e89659691e5a6970648467a25f5f
Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
Date: Tue Feb 28 12:24:11 2023 +0530
Updated readme file by adding prerequisite about to deploy dependent playbook first.
commit d2161119e3d333f1885053b5712d536ede41d025
Merge: ad957cce6 db2e74dbe
Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com>
Date: Fri Mar 10 10:04:56 2023 -0800
Merge remote-tracking branch 'upstream/master'
commit db2e74dbe16108af7e366b6afcd5a42f5cc468c2
Merge: 562c13712 c8b59da62
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Fri Mar 10 19:16:09 2023 +0530
Merge pull request #7530 from Azure/v-sabiraj-fixingWorkbooksbugs
Fixing Bugs for Workbooks
commit 36990e71f65c488335f39fe937e6c03b51b57c15
Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com>
Date: Fri Mar 10 12:15:57 2023 +0000
update to automationheatlth.json
removing link localization
commit f03026b51f95480f0d8fa65dba80c31daa78e886
Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com>
Date: Fri Mar 10 11:54:37 2023 +0000
Automation Health workbook update
commit 562c137120dabe36243fd15e08db200bd2c06d84
Merge: 4fe9115e1 fa6c5025e
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 10 17:20:27 2023 +0530
Merge pull request #7516 from Azure/v-rbajaj/virustotalsolution
Repackaging VirusTotal
commit c8b59da628ef3816369d9bf511ac9636e6907b46
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 10 16:42:40 2023 +0530
Updating maintempate and UI for workbook
commit 61964eb1494ae39797814f87e2a7f79517195ec4
Merge: be0b737d9 4fe9115e1
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 10 16:29:38 2023 +0530
Merge branch 'master' into v-sabiraj-fixingWorkbooksbugs
commit fa6c5025e21bbecaecbdaefeb5b759483389c3e0
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Fri Mar 10 13:43:02 2023 +0530
updated zip
commit 4fe9115e1e913ef3388b3fc86a418a767f71fd88
Merge: a90f55966 147d26cd5
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Fri Mar 10 12:06:18 2023 +0530
Merge pull request #7341 from tduarte14/patch-1
Show the actual Role and Fix InitiatingUser
commit a90f559669869d4d958af14f97cc07252aad068b
Merge: 1fda18445 78dba38e9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 10 11:27:56 2023 +0530
Merge pull request #7430 from danymello/vectra_detect_analytics_fix
fix typo and remove URL mapping
commit 4059a2c3476388cebc9a5902b9cadedd384c822d
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Fri Mar 10 10:45:44 2023 +0530
updating connector desciption
commit d14f7604518fd503a148b379bff90b7b4cb67cf8
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Fri Mar 10 10:32:30 2023 +0530
Updated data connector description
commit 1fda184457f19e9269d028390c0d37628c24dcc1
Merge: 1817a14a8 8bbe8fd03
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 12:49:54 2023 -0800
Merge pull request #7531 from Azure/pebryan/3_9_2023_AiTMDetection
Added new AiTM detection
commit 8bbe8fd0335ffd3b739588740f6c6325ca526ffb
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 12:30:03 2023 -0800
Added extra data connector
commit 40ff5715ecca2c0b98ad00a70449d541ac2763ac
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:37:34 2023 -0800
Added exclusion for unknown ASIM parameter
commit 73aa25e03620d2f626bebf66f570d956880aeedb
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:15:11 2023 -0800
Updated alert desc format
commit 72f1018cbdf89c7487665424a4f39ec2da7ee0f2
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:02:00 2023 -0800
Added new AiTM detection
commit 1817a14a86c15cb0b3a2177c528dcab872524a59
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 11:00:43 2023 -0800
Remove file accidently pushed to master
commit ca7b27fa1ac55a2e2c0342e40323e1da7acc65ac
Author: Pete Bryan <peter.bryan@microsoft.com>
Date: Thu Mar 9 10:53:55 2023 -0800
Added new AiTM detection
commit be0b737d9bcc9ef9a90c29501818e8a4ed3d44c3
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Thu Mar 9 23:38:25 2023 +0530
Fixing Bugs for Workbooks
commit a02ce85c96f162de6f8cc06f07a53b6525f0ff7f
Merge: 156b3e8bb 7587e5653
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Thu Mar 9 18:25:22 2023 +0200
Merge pull request #7526 from Azure/asim/add-registry-generation
Update convertKqlFunctionYamlToArmTemplate.yaml
commit 7587e5653d71c287acd784443c68498e5896736d
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Thu Mar 9 17:15:23 2023 +0200
Update convertKqlFunctionYamlToArmTemplate.yaml
commit fb0ebb098e6929bb4eeca308d461032de4b623b5
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 17:22:19 2023 +0530
Updated CreateUI and repackaged
commit 8a1ca5661878578ef6309ced0870eb2734ab7a58
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 9 15:33:29 2023 +0530
Repackaging Solutions with Parser instructions update
commit 0dfa042269ebb7389bcddb6257f9178dc644c9e3
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 15:18:37 2023 +0530
validation fixes and necessary changes
commit 5714200c8ce499f47d9cabfce271712c44f06a78
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 14:08:59 2023 +0530
fixing validations and discarding createui changes
commit f3113391c3eb033119d9ad5e79652b4542006a06
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Thu Mar 9 12:55:59 2023 +0530
Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki
commit 156b3e8bb2abdcc554f0cf7df205c93aa3e8fb8f
Merge: b49fa6474 8d7e5d6ec
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 9 12:35:52 2023 +0530
Merge pull request #7519 from Azure/Fixingworkspacedetection
Fixingworkspacedetection
commit 2bc53fda6699c7b3405af9619ceb274b29609b45
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 9 12:16:42 2023 +0530
Updating workbooks text
commit 78f7d5392a8fcb8a35ded57ba1b701a460ccf618
Merge: 4fd02df11 79308d0fe
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 9 12:02:48 2023 +0530
Merge branch 'master' into v-vdixit/Data-connector-Updates
commit b49fa6474962a5968ecc62f17058846e98e991d6
Author: treyperrone <trey.perrone@gmail.com>
Date: Thu Mar 9 01:20:42 2023 -0500
Update MaliciousOAuthApp_O365AttackToolkit.yaml (#7397)
* Update MaliciousOAuthApp_O365AttackToolkit.yaml
Current rule uses an older defaults for `Consent.Full` that was deprecated from the file: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/2231565f576e2d655cb9444ffed7309374c454a5/static/index.html#L29
The NEW defaults generated in Nov 2020 are here: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/master/template.conf
old values to match on: `"offline_access","contacts.read","user.read","mail.read","notes.read.all","mailboxsettings.readwrite","Files.ReadWrite.All"`
NEW values to match on: `"offline_access contacts.read user.read mail.read mail.send files.readWrite.all files.read files.read.all openid profile"`
The current detection relies on finding `mailboxsettings` in LN32 https://github.com/Azure/Azure-Sentinel/blob/c6dce9c3aa4d4b4d02423ac4eb5a6b677a39e432/Solutions/Azure%20Active%20Directory/Analytic%20Rules/MaliciousOAuthApp_O365AttackToolkit.yaml#L32 which means anyone that downloads the current O365 attack toolkit and runs it with the defaults settings will NOT trigger the alert (this drove us crazy for a few hours testing).
* move dynamic array to single array and match on has_any. remove search for single value
* update description verbiage
* updates from github conversation with join and new entity with appdisplayname for investigation graph
* remove orphaned csv of app list, since its embedded in the KQL now. this is better for versioning as well; changes to CSV currently dont prompt a new version on customer side
* put feeds knownapps.csv back, add in analrule, mv-aply consentFull
* bump version 1.0.1 --> 1.1.0 per @devikamehra
---------
Co-authored-by: Meena Kumari Chatla <v-mchatla@microsoft.com>
commit 79308d0fef99fb3f054b0f7b521bc600ee709189
Author: v-amolpatil <107389644+v-amolpatil@users.noreply.github.com>
Date: Thu Mar 9 11:02:51 2023 +0530
Get-GeoFromIpAndTagIncident Playbook Issue fix (#7513)
* updated code
* updated code as per review comment
commit 87e64dda6408ba6329b1f9bb9df7eb7684a2df6f
Author: v-rbajaj <120547590+v-rbajaj@users.noreply.github.com>
Date: Wed Mar 8 17:30:20 2023 +0530
Repackaging Microsoft 365 (#7515)
* Repackaging Microsoft 365
* Updated zip file
* updated data connector description
* Updated zip
commit 05859e0d14b2defc50dc4c4015d3ce352fe4cba9
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 8 11:55:47 2023 +0100
Adding eventGroupingSettings to Analytic Rules
commit 0096bcf653a17a64e2da284a2fb1c0b248ebf7b5
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 8 15:55:42 2023 +0530
Updated UI description
commit f525e87aa8bfda8c44520b4b81a111642a2673db
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 8 15:38:21 2023 +0530
Repacking VirusTotal
commit 13a9298f0425bc7e71d3ffa6fdae49320a49a212
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 8 14:59:08 2023 +0530
Updating package by adding variables for connector
commit 1eb52deee6fb3e22b95bb9abeabd2486210ea6c9
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Wed Mar 8 14:47:18 2023 +0530
Fixing bugs for Recorded future workbook (#7511)
commit 6125f4ece5d0604bda40725b03dfc7df0271bc03
Merge: 50804e482 7498bb905
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 8 09:56:58 2023 +0200
Merge pull request #7514 from TristankMS/patch-3
Update vimAuthenticationEmpty.yaml
commit 62e232e7ced3df4265d7b6b9a0ce8152aa532cae
Merge: b21194605 330f50fc2
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 8 12:21:53 2023 +0530
Merge branch 'master' into v-sabiraj-TemplatespecsolutionforGCPBigquery
commit 50804e482c0ebc426966cca1821ab66951914f4f
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Tue Mar 7 22:29:10 2023 -0800
Update SharePoint_Downloads_byNewUserAgent.yaml (#7509)
* Update SharePoint_Downloads_byNewUserAgent.yaml
Adjusted to 8d due to perf considerations and doing 8d as query should be comparing the last day to the previous 7 days to the last day, otherwise it will miss like actions for the same day one week ago, Change order of operation for checking time, do not need to summarize the min/max time in the RecentActivity portion of the query as it is timebound to the last day, do not need to check the time frame of the results as again it is already time bound to last day after the join back to get full details of identified events, removing old entity mapping rows, bringing through proper account entity fields
* Update SharePoint_Downloads_byNewUserAgent.yaml
change to make_set
commit 330f50fc2d6f70704573695830408e2a8ccfbbb0
Author: René Ammerlaan <78021472+rene-ammerlaan@users.noreply.github.com>
Date: Wed Mar 8 06:53:27 2023 +0100
Rename Auth0 custom table to match documentation (#7319)
* Rename Auth0 custom table to match documentation
* Update Auth0Connector zip file
* Add union to Auth0 KQL parser file
commit 7498bb90581ab1ff9d88adee33456f7bf3a71ade
Author: Tristan Kington <TristankMS@users.noreply.github.com>
Date: Wed Mar 8 16:47:41 2023 +1100
Update vimAuthenticationEmpty.yaml
And convert to more standard datatable syntax
commit ef907ed8296d6281c2eb19a2020c2a4723bb5caa
Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com>
Date: Wed Mar 8 04:52:52 2023 +0000
Fixed deprecated command columnifexists (#7402)
Replaced deprecated columnifexists with column_ifexists
Replaced make_set(<<FIELD>>) with make_set(<<FIELD>>,200), so the max items is defined as it's recommended.
commit 01b5cd6e77860d3aeba51472002b33b09eaf5006
Author: v-prasadboke <117061676+v-prasadboke@users.noreply.github.com>
Date: Tue Mar 7 18:34:10 2023 +0530
Microsoft 365 Defender Repackaging (#7487)
commit 6219ee4b02aed5a94cdfd90ae41ab7ae6cac071c
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Tue Mar 7 18:30:50 2023 +0530
Repackage Checkpoint (#7510)
commit 9e510072288231b5c456be7db18478c7e2973665
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Tue Mar 7 17:53:10 2023 +0530
Update azuredeploy.json
commit 8ac6c8ea08b314fa6ae70007ac78bef6530f67e1
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 7 17:23:50 2023 +0530
Updating solarwindsInventory
commit e790f566351ec95cb2c8f6a1492ecec08f534f28
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Tue Mar 7 16:53:37 2023 +0530
Updated Dataconnector description
commit 3865112a4c604b59b74dccc6397403dac8b4048e
Merge: 7e250a338 9a6ae5c88
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Tue Mar 7 15:59:42 2023 +0530
Merge pull request #7446 from Azure/v-vdixit/Palo-alto-logo-update
Palo Alto Solutions Logo update
commit 9a6ae5c88286b6a34536068454c8eeb6b5f103ae
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Mar 7 15:43:04 2023 +0530
Revert "Update PaloAltoNetworks.json"
This reverts commit 41ef2bf2448a63efdea35c671f750c797443e56a.
commit 41ef2bf2448a63efdea35c671f750c797443e56a
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Mar 7 15:42:14 2023 +0530
Update PaloAltoNetworks.json
commit 2e11f3da21087243f4e57d7c0b8bda7f3194646c
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 13:52:17 2023 +0530
updating logo
commit 4fd02df11117cada5f2345cdb4351b4696efffc0
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 13:03:20 2023 +0530
updating whitespace
commit 7e250a338b2c9a67914547b4991de4d731bb1f3f
Author: Meena Kumari Chatla <108806639+v-mchatla@users.noreply.github.com>
Date: Tue Mar 7 12:12:43 2023 +0530
Rapid7InsightVM IcM(370102413) Fix (#7508)
* Last Scan Details Fix
Last Scan Details Fix
* Fixed keyError for last_scan_date attribute
* Added log to print recieved event
* Removed the logging
Removed the logging
---------
Co-authored-by: v-rucdu <v-rucdu@microsoft.com>
commit c2f74b070315b32f8745195984df6a625d754a23
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 11:04:41 2023 +0530
updating alignment
commit 84be7b8805a856c45415573e20b219eb306c30c2
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 10:42:28 2023 +0530
updating note
commit 44196df0f6ee93c7ab3c43524bd585a00b0d9d79
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 7 10:31:33 2023 +0530
Updating OCIdestinations
commit df6b93c3927babc6225b6239c05615d73491c0ea
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 10:27:47 2023 +0530
update2.0.2 zip
commit b07ee23f81b1d2d7f51cfb77b730c1396a0a3072
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Mar 7 10:27:07 2023 +0530
updating connector description
commit 8c6e1afb5ac713a33509ad30cd80e60e6aea3f5c
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Mar 7 10:25:01 2023 +0530
Updating OracleDBAudit
commit 415b148a1495d240e1cecbfc44f5637b0ac85e3d
Merge: 4fa7945e3 0c6e3462e
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Mon Mar 6 18:08:31 2023 -0800
Merge pull request #7494 from Azure/shainw-FixMessageParse
Update ssh_potentialBruteForce.yaml
commit 0c6e3462e3984aa10d16b455883e03e1fd640bdf
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Mon Mar 6 17:39:54 2023 -0800
Update ssh_potentialBruteForce.yaml
Updating description to explain how we are attempting to bring through single valued arrays for use in entity mappings.
commit 33fb191f9638f9fe948a7d690476e4f34d31b1c2
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 6 23:28:57 2023 +0530
updating description of connector
commit 0d025d55539c660d04cdac19de7150b61e3af028
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 6 17:28:52 2023 +0530
updating version
commit 2d80a8c821bb2085897144daae50460b724ee997
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Mon Mar 6 17:02:28 2023 +0530
updating connector
commit 4fa7945e3a48d1eba3d293ca6811b07e5b7b85da
Merge: b6824cad6 3d674c9fa
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 15:17:12 2023 +0530
Merge pull request #7363 from Azure/v-vdixit/file-path-update
Detections files path update
commit 8d7e5d6ecd89ae8db70a12fdfbc30bc591942718
Merge: 180f25a8a c5387e48f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 15:03:32 2023 +0530
Merge pull request #7432 from treyperrone/patch-3
Update to add `where` IP find/search
commit b6824cad6fefa2c99ae55c1bb0472e71fd77498a
Merge: 880c2e932 2cb1f93a1
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 14:32:10 2023 +0530
Merge pull request #7343 from daspiker/IslandSentinelSolution
Island sentinel solution
commit 880c2e9321d86b66955c9e86a450d9d854583904
Merge: 96e7babc5 3b16a888a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 14:10:53 2023 +0530
Merge pull request #7498 from Azure/v-sabiraj-updatingflaresolution
Updating package for Flare
commit 3b16a888ab45b5da8dcb1a1968739d1edd358e58
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Mon Mar 6 11:27:23 2023 +0530
Updating version
commit 139c54cf65df9a31496f3a47330f3dd49a86892b
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Mon Mar 6 11:16:25 2023 +0530
Updating package for Flare
commit 96e7babc572e0d9225fb8efd35f6781fcb599a30
Merge: b4e21be1d e4b232cd2
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 11:11:54 2023 +0530
Merge pull request #7497 from Azure/origins/rahul/EntityPlaybooks
Entity Playbooks
commit 73ea96dd186906dd4408d0b745456fc5b594d013
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Mon Mar 6 10:54:26 2023 +0530
Update azuredeploy.json
commit b4e21be1d7fb0b83cb76556f5fbcfade4a4fdf0d
Merge: 0d1b98bf7 04546475b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 10:48:21 2023 +0530
Merge pull request #7476 from nickt444/tvm
hide table only available to private preview
commit 0d1b98bf7b250ba44261e1f1f416dad7caa28be3
Merge: bc84294cd fdd23459a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 10:47:29 2023 +0530
Merge pull request #7436 from syed-loginsoft/cybersixgill-aa-offerid-update
Cybersixgill Actionable Alerts offerid update
commit 04546475be17994bdb22fc8795ac079b3325b235
Author: Nick Torkington <nicktork@microsoft.com>
Date: Mon Mar 6 15:07:01 2023 +1100
reverting version to 1.0.0
commit bc84294cded4ff5c20ea3588c9ed2a378615dd16
Merge: 1086aa87b 2d4e0266b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Mon Mar 6 09:04:28 2023 +0530
Merge pull request #7420 from Flared/v-sabiraj-AddingAnalyticRuleforFlare
V sabiraj adding analytic rulefor flare
commit 1086aa87b2305d91ab07bcdb0910ee01bf00e326
Merge: 6bfcebb28 53f5f98a5
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Sun Mar 5 23:35:46 2023 +0200
Merge pull request #7495 from Azure/asim/fix-auth-deploy
asim/fix-auth-deploy
commit 53f5f98a5a677f87f87337e63112c114070f4b27
Author: github-actions[bot] <>
Date: Sun Mar 5 21:12:58 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit 79c3388ed0cad6fc918ff9d55592f2135c88dd69
Author: Ofer Shezaf <github@shezaf.com>
Date: Sun Mar 5 23:09:48 2023 +0200
Update getModifiedASimSchemas.ps1
commit 004ebb6dfed43834715bf5ea2828a01d5b97cbf4
Author: Ofer Shezaf <github@shezaf.com>
Date: Sun Mar 5 22:26:21 2023 +0200
asim/fix-auth-deploy
commit 526c66810149b9d8f7c875958535ad56ed76edb5
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Sat Mar 4 14:29:49 2023 -0800
Update ssh_potentialBruteForce.yaml
adding resourceid
commit 36374313d6eebaa3ca86c29e906bf5911607f578
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Sat Mar 4 14:14:18 2023 -0800
Update ssh_potentialBruteForce.yaml
high alert counts in some situations and fixing the regex to properly grab the fields when SyslogMessage ends with characters right after ssh2
commit c5387e48f233e5c5ddc19ac3647610199672681e
Author: treyperrone <trey.perrone@gmail.com>
Date: Fri Mar 3 22:58:39 2023 -0500
add new entity of deleted resource for analyst view
commit d2cbca01fd651e210be81eeea59e57063d2934a9
Author: treyperrone <trey.perrone@gmail.com>
Date: Fri Mar 3 22:49:21 2023 -0500
swap slicker dynamic expansion from @v-atulyadav, bump version from 1.0.5 --> 1.0.6
commit ad957cce63699d6f3d6b7080bb4dbd249db0105a
Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com>
Date: Fri Mar 3 22:37:48 2023 +0530
Rubrik sentinel playbook update (#7)
* Updated readme file by adding prerequisite about to deploy dependent playbook first.
* Fixed the inline comments suggested by Reviewer.
---------
Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
commit 3d674c9fac6a914596a04d708593a0aa63f4beb4
Merge: 7f7f9a0e4 6bfcebb28
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Fri Mar 3 20:06:07 2023 +0530
Merge branch 'master' into v-vdixit/file-path-update
commit 7f7f9a0e43e63318cee55824442a36d538afecb3
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Fri Mar 3 20:01:00 2023 +0530
Updating AWS_CredentialHijack.yaml
commit 6bfcebb289dd7400ff910f60662d6bad9e23e255
Merge: 0ea15f6a4 cf9031e24
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 16:37:07 2023 +0530
Merge pull request #7468 from Azure/v-rbajaj/AzureActiveeDirectory
Repackaging Azure Active Directory
commit 0ea15f6a4ceb70ceb2ebcabfc6f2f0b04607c3f1
Merge: cc977d5ab cd867f54b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 16:28:29 2023 +0530
Merge pull request #7464 from Azure/v-prasadboke-mongodb
MongoDB Repackaging
commit cf9031e24e9950b0f099d0af2306d089291595be
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 3 16:20:44 2023 +0530
Update 2.0.8.zip
commit cd867f54bb93420ffb7f81d2924f98bd37351a1e
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Fri Mar 3 16:13:04 2023 +0530
Update 2.0.2.zip
commit cc977d5abb9ecb6be59945778ed676b8802943fe
Merge: 2b74991d0 695900736
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 15:59:53 2023 +0530
Merge pull request #7450 from Azure/v-rbajaj/VirusTotal
Repackaging VirusTotal
commit d4c9545c3e84f2ce4331f2047318446106a3910c
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Fri Mar 3 15:37:45 2023 +0530
Update azuredeploy.json
commit 67261aac41bd24a03102071733bd4495b35c3dd7
Author: Samik Roy <samik.n.roy@gmail.com>
Date: Fri Mar 3 15:31:56 2023 +0530
Update Readme.md
commit 2b74991d0dbbb9e765a6baea9359b2eef7ceef92
Merge: 0ef04dce3 2f87b2293
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 14:37:20 2023 +0530
Merge pull request #7463 from Azure/v-prasadboke-marklogic
Marklogic Repackaging
commit 147d26cd5021f711908d586b092a961c677e1f5b
Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com>
Date: Fri Mar 3 08:44:44 2023 +0000
Removed "| where TimeGenerated >= ago(2h)"
Reverted the change of using 2h for supposed loopback issue as requested by reviewer.
commit 0ef04dce3c14b142022e3775325fef3bb5db120f
Merge: 2f0ce42e2 388d35226
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 13:51:14 2023 +0530
Merge pull request #7489 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.1
Updates to 2.1.1 solution package
commit 388d352268f869a623c214ae5ff1c17454405ec6
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Fri Mar 3 08:59:36 2023 +0100
Updates to 2.1.1 solution package
In the 2.1.1. package, older archives were included. Removed those.
commit 2f0ce42e2bfe669f700b1ee5955a466e29e7bd91
Merge: 86a9c70dc 2ace3d8f4
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 12:47:51 2023 +0530
Merge pull request #7406 from Azure/v-vdixit/file-path-update2
File path update for detections
commit 86a9c70dcd66d63a7f171f654a8021abfd7308cb
Merge: 998b567c0 b5c8ed537
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 12:25:49 2023 +0530
Merge pull request #7398 from yangsa666/patch-1
Adding hint.strategy=native to support more partitions
commit 998b567c0df55a2c4300cc1eec7e054a1deeba48
Merge: 076f67032 180f25a8a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 12:24:22 2023 +0530
Merge pull request #7360 from Azure/Fixingworkspacedetection
Update to Workspace deletion attempt from an infected device
commit 076f67032e67f6eb6cf64f28efcff971da693ff7
Merge: 0d2bb23a6 437d79f0c
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Fri Mar 3 11:27:19 2023 +0530
Merge pull request #7479 from pensivepaddle/patch-4
Update AcscEssential8.json
commit 4e64cfa9fce05564a574b35bf9b59a961560247c
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 15:25:07 2023 +1100
added conditional display of parameters
commit bca15f16d9e28bae2e87dc0217594314b2d6f2f0
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 10:11:39 2023 +1100
update version number
commit ba6b41ef940fcb3bee4c78fe06e09af360256248
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 08:27:54 2023 +1100
including fix from PR #7479
commit 08bc20f2e1ef884e3ae9cbbc0a6a0d8d0ea7fab0
Author: Nick Torkington <nicktork@microsoft.com>
Date: Fri Mar 3 08:22:10 2023 +1100
reverting fromTemplateId
commit 0d2bb23a6e0dc2d8c237845fe9ed14df43ebd9bf
Merge: 401a4603e 3dc17e1c8
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 17:47:59 2023 +0530
Merge pull request #7458 from Azure/v-sabiraj-MicrosoftDefenderforEndpoint
Adding playbooks to MDE Solution
commit 3dc17e1c85962647767e47f46620addb4573d28b
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Thu Mar 2 17:28:14 2023 +0530
Updated data connector description
commit b21194605446cdc67dfc5002d5ba2b1bb5119ab7
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Thu Mar 2 16:02:02 2023 +0530
SOlution cfreation for GCP big query
commit 219c86db6b3976cf202083a26f20b3dcc8f43ee4
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 21:23:33 2023 +1100
updated version number (again)
commit 401a4603e70040e1d37bfe864bf2c822af88442b
Merge: e6e492dce 481f8462f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 15:38:44 2023 +0530
Merge pull request #7405 from Azure/v-vdixit/file-path-update1
File Path update for detections Files
commit e6e492dce2aa075f14f9005f21b206f5ab843c68
Merge: cffb8bd70 97f4f1194
Author: tamirkopitz <91939884+tamirkopitz@users.noreply.github.com>
Date: Thu Mar 2 12:08:11 2023 +0200
Merge pull request #7478 from Azure/dvir-ms-patch-1
add SENTINEL_AGENT_GUID
commit 437d79f0c362fc9702dd27e4b7871b006d891eca
Author: pensivepaddle <104833713+pensivepaddle@users.noreply.github.com>
Date: Thu Mar 2 11:00:42 2023 +0100
Update AcscEssential8.json
Mix up between two queries/titles, "Restrict Admin Privileges" vs "Multi-factor Authentication"
commit 97f4f11941bc95110c3a698eff1c7fdd38cac656
Author: Dvir Naim <106969883+dvir-ms@users.noreply.github.com>
Date: Thu Mar 2 11:52:44 2023 +0200
add SENTINEL_AGENT_GUID
commit 11ce471fe6cc30e06b680c46e49994a9e014a594
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 20:13:01 2023 +1100
updated workbook version number
commit cffb8bd70ba73966b5ff90d32bcf08c6027e58ea
Merge: 140ae0546 aa6f3500b
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 14:21:24 2023 +0530
Merge pull request #7376 from Azure/v-sabiraj-SolutionUpdateforShodan
Template Spec Solution for Shodan
commit 140ae05464972ceba27485b0cfa92a6e94401a55
Merge: b8887b568 20b10d524
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 14:20:51 2023 +0530
Merge pull request #7364 from Azure/v-prasadboke-AtlassianJiraAudit-DataConnector
Atalassian jira audit repackaging
commit b8887b568612d12f32e2fc5ae93a56bf21676556
Merge: 6b61a8de1 695b59d91
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Thu Mar 2 13:11:09 2023 +0530
Merge pull request #7477 from Azure/v-atulyadav/dynamic365
Repackage Dynamic 365
commit 20b10d52435b88c2f9af7077b38f97bf9245c74e
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Thu Mar 2 12:52:35 2023 +0530
Update 2.0.3.zip
commit 079ac1880d0d5a8aea67016dde696d919e046feb
Merge: 979bd03d8 6b61a8de1
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 2 12:46:17 2023 +0530
Merge branch 'master' into v-vdixit/Palo-alto-logo-update
commit 695b59d91d608a76413daafcbb5557f0f7ed437c
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Thu Mar 2 12:45:50 2023 +0530
Repackage Dynamic 365
commit 8c6835d9ba2abf8b49f7bbbea066cb8931b7bcef
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 17:58:16 2023 +1100
updated version number
commit 94bc711c3f91f977eb14ff334b2c7128f63fb0cc
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 17:34:05 2023 +1100
updated fromTemplateId
commit 6b61a8de18aec450e2e40d09f0fd09ca559612bc
Merge: 57c8e8a80 bd66e5508
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Thu Mar 2 11:36:38 2023 +0530
Merge pull request #7448 from Azure/entrustidentity
[SOAR] New Solution Entrust
commit e60da2809733972966ac56d3532118720d0ea8b9
Author: Nick Torkington <nicktork@microsoft.com>
Date: Thu Mar 2 16:59:00 2023 +1100
hide table only available to private preview
commit 979bd03d887b0cbfaaace74826cc183f0e01b881
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 2 10:29:38 2023 +0530
update 2.0.4 zip
commit 57c8e8a80ccc76d33a01f771b10e2c29723e40a5
Merge: 7e4a93b42 83d09eadb
Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com>
Date: Thu Mar 2 10:16:42 2023 +0530
Merge pull request #7473 from Azure/v-vdixit/logo-update
Package Update for Google Solution
commit 7e4a93b425391bc34957fa9cfb40b2d90dd390f7
Merge: a75b98838 0f2c9966b
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Thu Mar 2 09:35:11 2023 +0530
Merge pull request #7457 from cwatson-cat/patch-20
Update Dynamics 365 md desc to add Docs link
commit 83d09eadb85d36c1682466a5d36f2781954142d6
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Thu Mar 2 00:24:47 2023 +0530
Package Update for Google Solution
commit a75b98838ac3dfc719939a13fe4343c32d9a837a
Merge: cb984b00c 63fe5ba59
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Wed Mar 1 08:34:24 2023 -0800
Merge pull request #7461 from Azure/shainw-ReduceResults
Update gte_6_FailedLogons_10m.yaml
commit cb984b00cd513e0f944a11f1c3a5e5b9c60c24d6
Merge: cf19c76a6 0410a5375
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 17:57:32 2023 +0200
Merge pull request #7472 from Azure/asim/periodical-fixes-Mar-1-23
Periodical parser updates, Mar 1st 2023
commit 0410a537583eff0b20c2e423b6d4e44641e4d567
Author: github-actions[bot] <>
Date: Wed Mar 1 15:41:25 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit 28698d2c7b5bc58f4fb95668f4e104f7dbbeccfa
Merge: fa1e9c60d cf19c76a6
Author: github-actions[bot] <>
Date: Wed Mar 1 15:41:19 2023 +0000
Merge remote-tracking branch 'origin/master' into asim/periodical-fixes-Mar-1-23
commit cf19c76a601bc00168433f93083c328062d840f2
Merge: dcfc519c9 0159db782
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 17:35:05 2023 +0200
Merge pull request #7471 from Azure/ASimDnsActivityLogs-CustomTable-Adding-Fields
adding fields that were recently added to ASimDnsActivityLogs table schema
commit 0159db7821c4c4b046617dcc6e69c3c10621559d
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 20:32:31 2023 +0530
adding fields that were recently added to ASimDnsActivityLogs table schema
commit dcfc519c9f07f1a646736673e4948ca2631cab53
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 16:48:58 2023 +0200
Update ASimDnsNative.yaml
commit 01d0abfd0891c5d3749e402c0b39a32d063123b8
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 16:48:39 2023 +0200
Update vimDnsNative.yaml
commit fa1e9c60dea9497588fd72e3f92d5a522faa0b41
Author: Ofer Shezaf <github@shezaf.com>
Date: Wed Mar 1 16:46:45 2023 +0200
NetworkSessionMicrosoftWindowsEventFirewall
commit 25c15c6a55a108f81aea4d6cb3e9d0718033f858
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Wed Mar 1 18:52:50 2023 +0530
Update stats.md (#7451)
commit 886c5469c01638e83221e4e1fadff410d9762f81
Merge: d38456d91 fb51c392c
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 18:39:53 2023 +0530
Merge pull request #7419 from txhaflaire/master
Jamf Protect for Microsoft Sentinel - v2.1.1
commit cf2be34436a6bfe71325b11f5667a62836f9e8cc
Merge: 48b2623b6 d38456d91
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 18:25:48 2023 +0530
Merge branch 'master' into v-rbajaj/AzureActiveeDirectory
commit fb51c392c8e18851576a7c94af3a8fc8735be243
Merge: 5d09db59a d38456d91
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 13:53:35 2023 +0100
Merge branch 'Azure:master' into master
commit d38456d91683b98392e125cd5ca923bc50388230
Merge: 0d1754cf1 775998089
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 18:16:43 2023 +0530
Merge pull request #7445 from Azure/PhishingwithCSLandNetworkSession
Detecting potential phishing in correlation with CSL & Network Session logs
commit aa6f3500b3b7a07137f777796d7e0838236e6a0b
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 18:15:23 2023 +0530
Updating description and entities
commit 0d1754cf154cd728b1ae47b825bb5cf04ff02e64
Merge: 830230a5a 412e0667e
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 18:07:59 2023 +0530
Merge pull request #7469 from Azure/arm-ttk-failing-when-solutionname-has-space
Fixed Arm-ttk issue when solution name has space
commit 5d09db59a3561eebda22ccea3ccc5474c006ea0e
Merge: c1043379b 830230a5a
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 13:17:24 2023 +0100
Merge branch 'Azure:master' into master
commit 2ace3d8f45d06a29587eb609335a12672094244b
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 17:36:16 2023 +0530
version update
commit 412e0667ec85ea2280eac4d5886023d995cf2e34
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Wed Mar 1 17:16:39 2023 +0530
fixed issue on space in solution name
commit 830230a5a5faf976be72d703366ff0c4b7949325
Merge: ec2492fbf ce5d3c9fd
Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com>
Date: Wed Mar 1 13:05:50 2023 +0200
Merge pull request #7462 from Azure/ASimDnsActivityLogs-parser-bug-fix
Duplicate column error fixed - DvcScopeId
commit 124aa72e59f7f4b429df341d23d80e1118673111
Merge: 9a009669b 8347232f9
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 16:33:27 2023 +0530
Merge branch 'master' into v-sabiraj-SolutionUpdateforShodan
commit 48b2623b6060ecde9ae4a330086bd3f62a6c72d7
Merge: f960cf697 ec2492fbf
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 16:21:37 2023 +0530
Merge branch 'master' into v-rbajaj/AzureActiveeDirectory
commit f960cf697dd4ddbdffeb9b93e700a45199c9d564
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 16:17:48 2023 +0530
Repackaging Azure Active Directory
commit ec2492fbf8917cdda1e96386a88f405a893b580d
Merge: 7e5fcbdd4 270f7dcf9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 16:16:20 2023 +0530
Merge pull request #7425 from Azure/v-vdixit/logo-update
Google Cloud Solutions Logo Update
commit 7e5fcbdd4df667131778ac5be580803166d4804e
Merge: 76813497b a827835a1
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 16:13:32 2023 +0530
Merge pull request #7453 from Azure/v-sabiraj-fixingsocplaybook
Updating Soc Process package to fix bug
commit c1043379b72765da69124e5a24c99ad357e4a289
Merge: ccd10f67f 49aeb72a7
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 11:28:34 2023 +0100
Merge branch 'master' of https://github.com/txhaflaire/Azure-Sentinel
commit ccd10f67f2c11314948c1f4601044b2c0b48fbc2
Merge: 30d3368dd 76813497b
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 11:28:22 2023 +0100
Merge remote-tracking branch 'upstream/master'
commit 49aeb72a742ff998db913fc539408b760a8959c8
Merge: 0d57ec6e2 76813497b
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 11:05:31 2023 +0100
Merge branch 'Azure:master' into master
commit 76813497ba5fab84d2ad4be0f9733a09268f5c8c
Merge: 8347232f9 25c804a39
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 15:32:17 2023 +0530
Merge pull request #7465 from Azure/v-sabiraj-UpdatingMetadataforbugs
Updating Workbook Metadata to fix gallery bugs
commit 0d57ec6e258c7dbf78f26af2f1c120f6813c1067
Merge: 9c633f503 8347232f9
Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com>
Date: Wed Mar 1 10:50:48 2023 +0100
Merge branch 'Azure:master' into master
commit 25c804a39c842be4e74aba5fca7acf90a8c4d4c6
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 15:17:50 2023 +0530
Updating Workbook Metadata to fix gallery bugs
commit 8347232f97f00439e3ab67d392548a9bea53c0c4
Merge: da1cf1041 377fc2478
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 15:02:51 2023 +0530
Merge pull request #7413 from Azure/v-vdixit/file-path-update3
File path update for hunting queries
commit 481f8462f0d73c9a59717fe8684b9921e5d4dbe5
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 14:59:54 2023 +0530
Version updates
commit f3a462bef7ae545de0bc987d8adce3e4300073af
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 14:59:38 2023 +0530
MongoDB Repackaging
commit 695900736431b3a799ef5565746716aa4562bc19
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 14:43:11 2023 +0530
Updated the 2.0.3 zip
commit d613fb75da68e31787962aa88b292466854f39f4
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 14:42:57 2023 +0530
updating Version
commit 377fc2478efc1ab4fddb2f22eee9c5fb65e1ffc3
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 13:55:05 2023 +0530
updating path1
commit aa8d29521c578568b4408ac98e95cd696d1502f9
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 13:50:52 2023 +0530
updating AzureVirtualNetworkSubnets
commit f65038e41184f5bb13c679842dcf5fadf2654d78
Merge: 7052b594f da1cf1041
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 13:39:11 2023 +0530
Merge branch 'master' into v-prasadboke-AtlassianJiraAudit-DataConnector
commit a827835a10539e698e9aa79d9338e538c706d555
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 13:24:24 2023 +0530
Update azuredeploy.json
commit 50f8752d3fa6e3be7030635a25e21f2468662440
Merge: bd419b31f da1cf1041
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 13:24:16 2023 +0530
Merge branch 'master' into v-sabiraj-fixingsocplaybook
commit ce5d3c9fde86ad1164452558829843280922d9ce
Merge: cdb47b58e ac2f6b0b5
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 13:22:56 2023 +0530
Merge branch 'ASimDnsActivityLogs-parser-bug-fix' of https://github.com/Azure/Azure-Sentinel into ASimDnsActivityLogs-parser-bug-fix
commit cdb47b58e46b4c5db2a97e4fdd520624b319d1d4
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 13:22:49 2023 +0530
added DvcScopeId to the table schema
commit 9c633f503f6085d5e597be7667705ec092541503
Merge: 30d3368dd da1cf1041
Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com>
Date: Wed Mar 1 13:21:53 2023 +0530
Merge branch 'master' into pr/7419
commit 2f87b2293ff173dae30dac4c7364efa0a28f48db
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 13:13:23 2023 +0530
Marklogic Repackaging
commit 7052b594f65b43b138c1898f881c8ee4a35ebe86
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 12:32:40 2023 +0530
Update SkipValidationsTemplates.json
commit da1cf1041bdb21a5aaa1c417f52ffe869f241377
Merge: 990ced0af 0b848f0d6
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 12:32:20 2023 +0530
Merge pull request #7282 from Azure/v-vdixit/KQL-validation-fix-for-Multiple-solutions
KQL validations for Hunting Queries for multiple solutions
commit 4bae5b91ad091217a2fe458d32fd2835c676d8ec
Merge: fbb7d0292 990ced0af
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Wed Mar 1 12:31:02 2023 +0530
Merge branch 'master' into v-rbajaj/VirusTotal
commit ac2f6b0b574fc6467f328bbc6e39a6baff9bafcf
Author: github-actions[bot] <>
Date: Wed Mar 1 06:54:15 2023 +0000
[ASIM Parsers] Generate deployable ARM templates from KQL function YAML files.
commit c216ee722f88074679a8057ee8c1f80692a8bccd
Merge: 0199a1662 990ced0af
Author: github-actions[bot] <>
Date: Wed Mar 1 06:54:03 2023 +0000
Merge remote-tracking branch 'origin/master' into ASimDnsActivityLogs-parser-bug-fix
commit 0199a16622d35eb1a74e3c72f303f5a86068c246
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 12:20:50 2023 +0530
Updated Parser Version and Date
commit e7da9fef44a2c45356a8fd934db3908612db7f6d
Author: vakohl <97222872+vakohl@users.noreply.github.com>
Date: Wed Mar 1 12:15:14 2023 +0530
Duplicate column error fixed - DvcScopeId
commit a1d177f6022d0a30b74f72b4157a7e004f74aaf9
Author: PrasadBoke <v-prasadboke@microsoft.com>
Date: Wed Mar 1 12:15:00 2023 +0530
Update SkipValidationsTemplates.json
commit 990ced0af085cde6851121ce0b87f2cf82daefca
Merge: 3286c9d6b 94e2d842e
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 12:13:56 2023 +0530
Merge pull request #7427 from Azure/origin/users/rahul/gcp-bigquery
GCP BigQuery Solution - Initial commit of solution
commit 3286c9d6b1adc0f6b898dfc8db9d304cd1e23170
Merge: be6b439e8 755249e24
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 12:12:32 2023 +0530
Merge pull request #7294 from Azure/v-ntripathi/MaturityModelWorkbookFixIcM361952128
Fixing workbook query regarding IcM and repackaging
commit fbb7d0292348703f1432812fd6ddc9b573bcea91
Merge: 21c4bed62 be6b439e8
Author: v-rbajaj <v-rbajaj@microsoft.com>
Date: Wed Mar 1 11:23:56 2023 +0530
Merge branch 'master' into v-rbajaj/VirusTotal
commit be6b439e8e818d30b4cfb1fdd30ed06b2623304a
Merge: c74e7d817 0407141d9
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:43:37 2023 +0530
Merge pull request #6925 from referefref/patch-1
Update AWSBucketAPILogs-SuspiciousDataAccessToS3BucketsfromUnknownIP.…
commit c74e7d8174da6482f81e22d73ea20c8dfce4be5d
Merge: 5d7077c80 3391ffcaf
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:38:08 2023 +0530
Merge pull request #7035 from ep3p/patch-6
Fix fields in Solution/Analytic Rule AzureADRoleManagementPermissionGrant.yaml
commit 755249e24ac7dec840264a1b527c70e90464402e
Merge: 4460ad5b2 ce1b0e7e2
Author: Meena Kumari Chatla <v-mchatla@microsoft.com>
Date: Wed Mar 1 10:31:27 2023 +0530
Merge branch 'master' into v-ntripathi/MaturityModelWorkbookFixIcM361952128
commit 5d7077c805af8ccd6b1b364e4dad95eba89390ea
Merge: ce1b0e7e2 1757d5974
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:30:45 2023 +0530
Merge pull request #7456 from Azure/arm-ttk-issue-fix
Arm ttk issue fix
commit 427a8a26d9c17a24a5d097d17ad1419223f20731
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 10:28:56 2023 +0530
Update IPEntity_DuoSecurity.yaml
commit 89bc51c158b9996b8225c184d2e0dd4f20904de6
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 10:28:01 2023 +0530
Updating AdFind_Usage.yaml
commit 63fe5ba5903964d432fc97940bf77add1e24b67a
Author: Shain <45466083+shainw@users.noreply.github.com>
Date: Tue Feb 28 20:34:53 2023 -0800
Update gte_6_FailedLogons_10m.yaml
commit ce1b0e7e2889918b66533a1333f1a47b1aaf14d1
Merge: 3af5f111d 3101d404a
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Wed Mar 1 10:03:43 2023 +0530
Merge pull request #7431 from briandelmsft/ii_wb_patch
Investigation Insights - ASIM Support
commit bd66e550853991f9681d826e8ac528abcd33b827
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Wed Mar 1 09:04:33 2023 +0530
Update azuredeploy.json
commit 6f3d5a72da513412e73a218d98d45359aee64666
Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com>
Date: Wed Mar 1 09:01:46 2023 +0530
Update readme.md
commit 775998089da2b6925873939014e57a34abf8496e
Author: gitj121 <jekurien@microsoft.com>
Date: Tue Feb 28 13:16:07 2023 -0800
Description changes
commit 37428ea2fffae391739b7910cc04c3c8ab010d50
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Wed Mar 1 00:14:23 2023 +0530
version update
commit 04ad400e02cc6a3b158b67f417885671d68b2101
Author: gitj121 <jekurien@microsoft.com>
Date: Tue Feb 28 10:41:11 2023 -0800
Adding with changes
commit a074d314c8b6bfab71c17afd61d68ab79da0dfa1
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Wed Mar 1 00:06:08 2023 +0530
version update
commit 3c519a323bae6df8ad7ae41ee83f09393f518dd4
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Feb 28 23:39:59 2023 +0530
Adding playbooks to MDE Solution
commit 0f2c9966b5db3e22e2edc7455fc20b74dedf75df
Author: Catherine Watson <cwatson@microsoft.com>
Date: Tue Feb 28 08:38:50 2023 -0800
Update Dynamics 365 md desc to add Docs link
@prtanej
commit 187ec26e2b36bcc1cae47ff4c684bcf4ac326b55
Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com>
Date: Tue Feb 28 22:00:59 2023 +0530
Updated readme file by adding prerequisite about to deploy dependent playbook first. (#6)
Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL>
commit 1757d5974db4a74761e73a0672b74d9a802bc132
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Tue Feb 28 21:55:35 2023 +0530
Update arm-ttk-validations.yaml
commit f34c5e317318410318bbf548945bc4bece3a4f2c
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Tue Feb 28 21:45:23 2023 +0530
updated code
commit 3af5f111d58b65d8bb8293f4aacc97776b617bc8
Merge: 68516975f 95df0ea8f
Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com>
Date: Tue Feb 28 20:02:16 2023 +0530
Merge pull request #7240 from Azure/v-atulyadav/Windows-Security-Events
Repackage Windows Security Events
commit bd9ad173269557a88012a581d698d39b829c9deb
Author: v-amolpatil <v-amolpatil@microsoft.com>
Date: Tue Feb 28 19:50:49 2023 +0530
updated code to fix
commit 0277f7811b1193e424d656315b07bcc75db350a7
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Feb 28 19:31:27 2023 +0530
updating whitespaces
commit bd419b31f0ebd30e32bc11bc96053b162b396c73
Author: v-sabiraj <v-sabiraj@microsoft.com>
Date: Tue Feb 28 19:14:27 2023 +0530
Update azuredeploy.json
commit c1061631e5fb01469ff8ab3e771573f1baa7bb9f
Merge: debfbfb03 68516975f
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:54:19 2023 +0530
Merge branch 'master' into v-vdixit/file-path-update3
commit debfbfb03103d7006097b1f4eb8f8278e7de7357
Merge: cf4145086 adf2433a8
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Feb 28 18:46:12 2023 +0530
Updating description
commit cf414508699f640f8ba5dbe174538e1fe100715f
Author: DixitVedanshi <v-vdixit@microsoft.com>
Date: Tue Feb 28 18:37:37 2023 +0530
updating quotes
commit fdd23459a6420076e93c300c1683b9e1ae401cbb
Author: syed-loginsoft <sdawood@loginsoft.com>
Date: Tue Feb 28 18:19:56 2023 +0530
Updated version from 2.0.0 to 2.0.1
commit adf2433a8d963bdd1765c714c8f64e11c97a250c
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:03:56 2023 +0530
Updating ProofpointPODHighScoreAdultValue.yaml
commit d9c8af19ebadb591c6cabc46acceba17fdd6cfe9
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:02:53 2023 +0530
Updating UseragentExploitPentest
commit 76dac88a9155c3e2287ea44b4dcb4d283e71750b
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:01:57 2023 +0530
Updating quotes
commit 491992bb8f26ec824b69297d7225cc0ab633ea1f
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 18:01:32 2023 +0530
updating quotes
commit 99a4f75d27c6ba71193083d1bc3cfb40a634e3bf
Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com>
Date: Tue Feb 28 17:59:55 2023 +0…
v-dvedak
pushed a commit
that referenced
this pull request
Apr 10, 2023
commit 4b2bc0cc248f326e62aebd132626b44e15cbacb6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Mar 1 17:23:17 2023 -0800
add this file, for further customization.
+++ ./Solutions/CohesitySecurity/Tools/createSolutionV2.ps1
commit 9cba831803a72179ac0f6ce71af90127e686bbc0
Merge: 40ad85f0e a75b98838
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Mar 1 12:58:40 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 40ad85f0e1968d380d28115bca8c7ff592f76b75
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Feb 24 16:50:48 2023 -0800
Added status to the incident to allow Welcome incident creation
- Fixed startDaysAgo parameter usage in function azuredeploy.json
- Replace ApiKey in blob key to a static value.
- Removed ApiKey references in the logs.
- Changed the status of the incidient to "New" always as we only
query for kOpen alerts.
- Refactored the code to have incident creation at a single place.
commit ab333b79b112e47d9d44834762c97f2b8acad934
Merge: 878871468 3af5f111d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Feb 28 13:58:11 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 878871468e45b65faed668b606025987dd2659f5
Merge: 9a961ab2a 4ed65ef71
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 27 16:27:00 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 9a961ab2ac3d0a4d5cd7dfa117c98a70373e53ce
Merge: 38a0bbd01 4e53f5de0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Feb 24 10:45:17 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 38a0bbd0113ba0b42d18a87faa9bce7fe31779e4
Merge: b768cab7f ed943622b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 23 11:16:06 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit b768cab7f3636d8ab9bcc103afea7062bcaeecdc
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 22 18:25:53 2023 -0800
Fix the required permissions and role for the Azure AD app
commit 474253f2bf90fb2be70de63f48fa22579028610c
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 21 11:49:26 2023 -0800
Regenerate package with v2 solution creator and updated partner info
commit 44e2f1b7921cccbe0ca1cabb52df3e45b3d0d82b
Merge: 12ec703ac 284f45dc7
Author: Ying Huang <ying.huang@cohesity.com>
Date: Sun Feb 19 22:49:30 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 12ec703acecd71fe81a218dc0de0ea293f04907b
Merge: 4243ee149 3d8a1cbdd
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 16 16:08:39 2023 -0800
Merge pull request #5 from cohesity/audo_deployment
fix to the serverfarms Conflict issue.
commit 4243ee1498650ae062034f5b04a267e906c0dd20
Merge: dcd835bd2 5127b80fd
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 16 16:08:04 2023 -0800
Merge pull request #6 from cohesity/build
update the build related stuff.
commit 5127b80fdeae73342ce5c74e98499fb358137454
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 16 14:55:44 2023 -0800
add this file, but which still not working yet.
./Solutions/CohesitySecurity/Package/mainTemplate.json.sh
update the build script.
commit b4b7dcce8c80a788b36e2560eed301a479dc0884
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 16 11:19:41 2023 -0800
update the build related stuff.
small change to metadata.
commit 3d8a1cbdd19cea118e497b00802855b75705f1d0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Feb 15 11:03:21 2023 -0800
fix to the serverfarms Conflict issue.
small update to the deployment script.
commit dcd835bd2a13b8dcd336985560c6503fffbd6811
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:58:34 2023 -0800
Re-create package with version 2.0 and updated URLs
commit 26b81b758dedaecd41a179197dfc8ec0f28c7cde
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:54:10 2023 -0800
Replace github URL to Azure from Cohesity
commit 2f3e379183d7caf1c71f6d5fb4e0ccb6071427a4
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:16:52 2023 -0800
Remove manual deployment option, change version and URLs
commit 3eb7ffc7aae1590043f4cea4f8e72ceffa57aee9
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 9 11:13:27 2023 -0800
Zip (#4)
Add producer and consumer packaging scripts
commit 724bd4b85ed9acc1caf564466b074a53a69fd546
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 16:55:25 2023 -0800
Renamed function app package name and location
commit 8a2a67073b318300cec969d745eeaba9dee41179
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 14:02:55 2023 -0800
Add logo to solution
Also, fix manual deployment steps in Cohesity_API_FunctionApp.json.
Updated connector description in createUiTemplate.json and re-created
package.
commit 03d5b8d68aaaabf2db88407347e390620b6a7983
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 13:11:54 2023 -0800
Add Cohesity logo
commit c79d25164adc86a467e5d3e187c9c7e8e38842af
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 18:13:10 2023 -0800
Create package using v2 solution creator
Also, moved the Solution file into 'Data' folder as it looks like that's
the standard.
commit e3d0f772cdac49f08a09913f9d36527ed5db65f5
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 17:29:53 2023 -0800
Change post deployment field in email to an array of values
Also, add periods at the end of descriptions in all the playbooks.
commit e8053f8b1c9fef0f0834cf37f3f00bbf25a939f9
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 15:55:32 2023 -0800
Add Cohesity in the title of playbooks and update readme accordingly
commit da51a755a27cb4415b6c1efc30d69e730791ed55
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Feb 6 20:45:28 2023 -0800
Created package files with the new playbook
Also, fixed readme to add the new playbook and some corrections.
commit e94659171063a83ca891ebc138e612969d0934a9
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Feb 6 13:41:13 2023 -0800
Remove empty parameter from playbook as package validation fails
commit 6c52f04bf8c1a87b4e504abcce115237e61b5220
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Feb 6 19:27:57 2023 -0600
Update readme.md
Removed an extra dot
commit 7af5db70561fc2c1e7b1d74947e161aec7c10a1f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 6 10:00:51 2023 -0800
update/add some auto deploy related scripts.
commit b5ffb7134481589da0beb3746d77fba1ce1843f8
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 6 09:52:36 2023 -0800
beautify this json file
commit d00210396cb89f45cea45d47ecc4836c99f409f7
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Feb 3 19:26:15 2023 -0800
Fix package download links and producer timer trigger
Also, changed the function app packaging by removing top-level directory.
commit 1a953226cf64afc0b238406e3e94fb1580b0f443
Author: Kishan Nerella <kishannerella@MacBook-Pro.local>
Date: Fri Feb 3 12:51:48 2023 -0800
Add function runtime config and deployment url
commit 8bfc80e4cd58c377e343a8e307d9a2a34f3a320a
Author: Kishan Nerella <kishannerella@MacBook-Pro.local>
Date: Fri Feb 3 12:13:42 2023 -0800
Create producer and consumer packages for deployment
commit f45527acc1c89998eee11aa421377a14ea4ec956
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Feb 2 20:02:00 2023 -0800
Fix readme language
commit eaf972c5170288be0e5c1ba43cf41d60969628c6
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Feb 2 19:55:37 2023 -0800
Fix links in readme files
commit 7dbcd360ce6c3b40bad1de6095f6d355a9a31e61
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Feb 2 12:55:57 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed a wrong reference
commit 85f916b3d50bf24fb02b675b25b21308392cd5d7
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 31 17:33:10 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed locale from the link
commit bd24164805c493d20199db1faae38a14f043ea7f
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Jan 30 17:22:41 2023 -0800
Fix delete blob deployment URL and tags
commit e6cab0c1135ab753775722083049f1eae7f2a37f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:40:38 2023 -0800
add back folders with name begining in upper case.
commit 9bca6381b287585e4e448e6b7680e5a2f0aed918
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:38:42 2023 -0800
delete those old folders with name begining in lower case.
commit 38e30732c96e418b7394b01bbd0dcb00b3a5d99a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:37:04 2023 -0800
uniform data input.
rename folders to upper case prefix.
add more test cases.
commit 62429c630ae109a775026251829dd6652d7fe178
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:33:05 2023 -0800
uniform data input.
rename folders to upper case prefix.
add more test cases.
commit 4a0baa24f13e0ad52c6fac91449040c819de3cfb
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Jan 27 21:02:12 2023 -0800
Add delete incident blobs playbook
commit aca0d06a5022aac01e0e713bf8e57a04d76f5821
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 27 17:44:19 2023 -0800
add one new exported playbook, need to later add description, name, author, etc.
add cohesity tool to export playbook.
commit 79bb3a1fbe8fba031ffda0c3b75e6108c9d02d5e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 27 17:25:10 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed unnecessary coma
commit 331342e06349501d5aba8a9e3e1d17a0c8ff0e88
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Sat Jan 28 02:17:57 2023 +0530
Reviewed doc
Reviewed for style and language
commit f5ce722a37566212ed90ff7562012f0deb702e7a
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Sat Jan 28 02:12:12 2023 +0530
Reviewed the doc
Reviewed for style and language
commit 047a772779550a5edc30428c1df004b3b0abcaf5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Jan 26 17:51:02 2023 -0600
Create Cohesity_API_FunctionApp.json
First version of data connector file
commit aee525ee71b1995bc7087d6b091c0e1f36ad87ce
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Jan 26 17:38:11 2023 -0600
Update readme.md
Typo
commit 011848f908fd9ce07a261a864ba8ac9e969f1df0
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Jan 26 15:13:52 2023 -0800
Remove pre-requisited from CloseHeliosIncident and Restore playbooks
commit 65180bee333f86de2c4fd14d7cef5e45a26704b3
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 25 17:20:47 2023 -0800
add test case for playbook: Cohesity_Close_Helios_Incident.
commit 9e22aacb3c7372ca7be444bc3ac53e4af9c7ca73
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Jan 25 14:47:31 2023 -0800
Add user role related info to playbook readme files
commit dea9ed121034fec3f6c27bfc03fe6d45a98945a6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 24 17:14:06 2023 -0800
a decent fix for the dup issue by Eugene.
commit 66c1136590967efb139aa2e3fd7debe72fbf3933
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 24 13:42:41 2023 -0800
a temporary fix for the duplicate incident issue.
will try to add some automation tests to verify:
1: has incidents generated.
2: no duplicate
and then find a decent fix.
commit 3338fe0c4dc77c30ccf7780fd526e997683606a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 24 15:11:50 2023 -0600
Update azuredeploy.json
Added link to the prerequisite details
commit e563f5ff1eb065d58e63533d4afb40c5f0e4f9ce
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 24 15:09:26 2023 -0600
Update azuredeploy.json
Added link to prerequisite details
commit 956a4e44371144b22925009b02a5a009db5c4797
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 03:06:04 2023 +0530
Doc review
Reviewed doc for language and style
commit 9c6e3cffbc659023a2456125d83f0161451ac9a1
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 02:58:14 2023 +0530
Doc review
Reviewed for language and style
commit dc847550980ac19f14c9d1f348443ca5e57c5a86
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 02:46:15 2023 +0530
Doc Review
Reviewed for language and style
commit 2069d81a441a25775bf8c38ca0a2241676f87b3d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 20 11:06:13 2023 -0800
clean the codes.
commit edc60d45ab75373d1c771f550616602e92791ede
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 20 10:26:19 2023 -0800
add feature: TestAlertToQueue
commit 28efdb81d136e80fa0ad2f79e4cdd7b8d61ca56b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 19 15:46:24 2023 -0800
clean some codes.
commit eb86fbf97d28026c9ad96d243b1b4fe2b41af556
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 19 14:05:22 2023 -0800
Fix some warning, retire some obsolete codes.
commit fe35840043aadbe44b3f21b63ff248cf1be3967a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 18 17:08:17 2023 -0800
fix some compilation warnings.
commit 8fae6744b2f67494fbe4619ffeff8d62973dbf24
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Wed Jan 18 16:04:32 2023 +0530
Reviews
Edited content for style and grammar
commit 2bec432bd4a047bdc994c8c7ebe2c8e239fc1c4e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:33:30 2023 -0600
Update azuredeploy.json
Updated metadata
commit c97b56befe48ec5804bc738a843b4385869fd10e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:29:18 2023 -0600
Update azuredeploy.json
Fixed quotes
commit c3b07a1ed51fa810ebf3c3d4cc5b9d714cf438fc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:25:09 2023 -0600
Update azuredeploy.json
Fixed typo
commit 04289abf2cb4926da8c705b6bd9b6911ca73587d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:23:34 2023 -0600
Update azuredeploy.json
Added metadata
commit 8e139c0072c79557fb3f14b2ba9f59befc8cfeb9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 11 10:27:54 2023 -0800
update text from 'Azure Sentinel' to 'Microsoft Sentinel'
commit 94270ea0f0bb549f6a963ea40ebc7107f9e38f21
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 10 15:21:44 2023 -0800
remove BlobStorageConnectionString for duplication.
remove a dup try catch.
commit 199f5a140dd318095a1d2eaf7188a331da1258e3
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 10 11:07:38 2023 -0800
update the Function Apps to use env instead of secret for variables.
fix some properties in azuredeploy.json.
commit 7bb4f9341f949369c05ff44e38253f69d283bb2a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 17:51:04 2023 -0800
small fix in script.
commit d43cfccf320eca66bbb8f94eac77198dbaf04434
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 14:25:35 2023 -0800
update deploy scripts.
commit 05f45be3853adde4bf9f82d68c6c654615f3ad85
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:11:45 2023 -0600
Update readme.md
Fixed a typo
commit 6155c4e0f7fdee7afdbcdfe72dccd08bad8d9c5a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:08:20 2023 -0600
Update readme.md
Updated the instructions to reflect the new deployment script
commit 98347394d8af51d997359c310f5e7335392c8680
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:07:16 2023 -0600
Update readme.md
Updated the instructions to reflect new deployment steps
commit 607b64f197fb8a914165f6482c954232409e93fb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 13:49:24 2023 -0600
Update readme.md
Fixed a typo
commit db7be2ab9188b4d6d2a9e1cc960321a71d921d8e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 13:44:56 2023 -0600
Update readme.md
Polished language
commit 8371bf109edb915a78307e4f35af74891e614ae6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 10:45:15 2023 -0800
update azuredeploy to host on windows OS.
add deployment related scripts.
update the readme file.
commit bc64f554f27e8a32558b5b66ab455294ee8e620a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 11:38:53 2023 -0600
Update readme.md
Updated publishing instructions
commit de74f40e18f9c890f66f516d4463c1cb14e07a97
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 5 14:21:11 2023 -0800
change to windows host to workaround the AzureWebJobsStorage error issue.
commit 5a1daf5b3cc1eb7637c2b9213de051769b2d96c9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 4 15:57:42 2023 -0800
small fix in azuredeploy.json
commit d9cdca1acb1c2fc26b335bac98d6747371413cf4
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 4 15:54:46 2023 -0800
add DefaultEndpointsProtocol to azuredeploy.json
commit 688ca03cb660a3a855913cdcb9313ba5fdf2b8cb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Jan 4 15:58:33 2023 -0600
Update readme.md
Updated pre-requisites and troubleshooting steps
commit a286f9c06418c619d1f9b1ca9938e965d4ec4ea5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Jan 4 15:42:56 2023 -0600
Update readme.md
Updated prerequisites and troubleshooting details per MS code review
commit 208d1f3d73001fdfd3bef7ea4d99453063b7175d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 3 17:49:26 2023 -0800
beautify this json file.
commit 92de7c93bb4df329925bd67c4809996eaf694a80
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 3 17:48:57 2023 -0800
beautify this json file.
commit 02bb9f3da89e7da8cf634dae5bae5a8732c29bb9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 17:07:12 2023 -0600
Update readme.md
Updated deployment instructions to reflect that keyvault is now a managed connection
commit 9386f5c8fc2636af920c2d91a5d9d66517de8f56
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 16:56:46 2023 -0600
Update azuredeploy.json
Fixed container name
commit 748937fe2035ba8877006141da6985367e8081a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 16:09:35 2023 -0600
Update readme.md
Updated instructions to reflect the new deployment steps
commit 3fdcfd398ba5ec273b2669a3ff2a6941cbce54a9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 15:45:13 2023 -0600
Update azuredeploy.json
Made KeyVault managed connection with the predefined Keyvault name
commit 0d4a8fabf9fab804d49ae6f6b4fb10e2f05d785c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 10:43:18 2023 -0600
Update azuredeploy.json
Added Keyvaultname as a connection parameter
commit 52a92c57ab077249e7e32aa251476f85abecdea9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 23 15:55:50 2022 -0800
update the managedApis.
commit 3b671431946ffee40a95c5d6ae917074e3d1e872
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:33:47 2022 -0600
Update azuredeploy.json
Removed managed identity from Blob
commit 978af21d84fc4fc462e3b4dcdb7634e0717b5045
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:30:04 2022 -0600
Update azuredeploy.json
Testing managed connection with Azure Blob
commit 4d3b80361763c3202234a349512ad55e2670e57a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:23:47 2022 -0600
Delete incident_producer_azuredeploy.json
Deleted file that I created for test purposes
commit be1f06e1b8733d353481c844b7dff7b3de9117ad
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:19:39 2022 -0600
Update azuredeploy.json
Changed prerequisites
commit cce48babe94de2598891538f1196b629a903e5d8
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:15:25 2022 -0600
Update azuredeploy.json
Added metadata to the deployment wizard
commit c59d740aff4b104504ea999d2b507717ccd4fc4e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:11:59 2022 -0600
Update readme.md
Changed deployment instructions
commit 7b4cb687b11173032a761d652a00767d2d55b084
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:10:33 2022 -0600
Update readme.md
Fixed a typo
commit 0a0604e23d21ab691e4cebdfc6af6b326531c1ef
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 13:27:00 2022 -0600
Update readme.md
Added info about authorization
commit a91e642e9288513681a42816e35e0892c0c44a56
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 23 11:26:54 2022 -0800
some small change according to the comments.
commit 57f27beb00a17d25118bb29ecbde2de7420db714
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 13:19:42 2022 -0600
Update azuredeploy.json
Removed managed identity from Outlook
commit d84dfd4e1fd67560cc55edaf294817f0e540557f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 11:03:10 2022 -0600
Update azuredeploy.json
Fixed a typo (",")
commit eb38749daf730775b6b5b3c2105476a5961aed70
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 11:00:35 2022 -0600
Update azuredeploy.json
Added metadata and made Outlook connection type ManagedServiceIdentity
commit 3b526dedd207d181db5beea74a4bc3f8dc5f4868
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:51:55 2022 -0600
Update readme.md
Updated with consideration of a new ARM template for Azure function config deployment
commit 2b7fa46d117f0f0777d25f6376c1c877165df3eb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:25:38 2022 -0600
Update azuredeploy.json
Fixed type ","
commit 6bd4f29dd61e4eff16a4feeeca0e974e041d89d3
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:24:16 2022 -0600
Update azuredeploy.json
Added metadata
commit d993c87642efb1cef144bfeb41c497531b2e27a1
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:18:03 2022 -0600
Update azuredeploy.json
Updated metadata
commit 4fd3aaf0bc9f15c5536fe27644b21a823a7300b4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 09:44:48 2022 -0600
Delete func_azuredeploy.json
This is a temporary file that was created by mistake.
commit 4c32629bca96318c4fe8f731d78d3709d3c3f836
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:56:10 2022 -0800
update the csproj files
commit 3d1e443984cd2e917a9208d28fa8df4c6d9c4830
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:51:36 2022 -0800
update the csproj files.
commit 1bb53f3db70f5c86abaf14f4e56d8337dd266344
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:49:02 2022 -0800
change to read from key vault intead of env.
commit e89a55ae22ae9b0ad48033fd0cc2c99dea78cbd4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 22 14:09:01 2022 -0600
Update readme.md
Added button to deploy the functions to Azure.
commit d3ef3bd69760acbd0febb547cc76eb5323cc5877
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 22 14:03:17 2022 -0600
Create azuredeploy.json
ARM template for deploying both Azure functions.
commit 979c7d3c7d29d8a69891808d61cb3719bf8cefe2
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 21 19:38:28 2022 -0800
retire redis in IncidentProducer
add Anomaly Strength in description
re-organize the codes
commit ac0ae888d48f2032827ec5a2a577f93c008fd0d0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 19:33:30 2022 -0600
Update readme.md
Returned the reference to the Restore playbook
commit 8f0536ea15bb5de6373024e412f3f78658b96e9d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 17:23:58 2022 -0800
update the readme files.
commit 2c7eb694bc41153566f22b51115490b5551d6fc1
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 17:01:30 2022 -0800
update these 2 package files.
+++ ./Solutions/CohesitySecurity/Package/createUiDefinition.json
+++ ./Solutions/CohesitySecurity/Package/mainTemplate.json
commit 4520fcb7fdbe7c1f8d2619ba314a7a00a9137bfb
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 16:49:04 2022 -0800
update these 2 Playbooks:
./Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json
./Solutions/CohesitySecurity/Playbooks/Cohesity_CreateOrUpdate_ServiceNow_Incident/azuredeploy.json
commit e13cc5a80f376d76c6df8f49c788f00e21510657
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 17:27:36 2022 -0600
Create incident_producer_azuredeploy.json
Initial version of the IncidentProducer Function App
commit 0d2c1d1b534a844607149b46e8ac8f7c38310825
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 15:44:46 2022 -0600
Create func_azuredeploy.json
Test Azure func deploy
commit db241debae8d5d4f226dcca6e4f0eda712721ae3
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 13:10:35 2022 -0600
Update readme.md
Added instructions about connection authorization
commit 7b950bcce0745708ff4b62c36a04599801e34ceb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 13:06:47 2022 -0600
Update readme.md
Added connection authorization instructions
commit 4e38c1cca6336d3b9c97039a7cda9e8e2c122f72
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:48:49 2022 -0600
Update readme.md
Fixed broken links
commit c454187a07654d6a293f57641b6d33db0367e6c7
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:42:53 2022 -0600
Update readme.md
Fixed broken links
commit 138ce8147da4d339633afdaa46a6cc0401920959
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:36:24 2022 -0600
Update readme.md
Fixed broken links
commit d9a069e6c948698b735acd441af5c91426460388
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:27:31 2022 -0600
Update readme.md
Typo.
commit 6b73ea2794d07fe2e635e3526212d9c94c8b8099
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:27:13 2022 -0600
Update readme.md
Add info about skipping steps if the API key is already stored in the vault.
commit 829395b3aea5d420622c4fea04906836be74d1e1
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:22:41 2022 -0600
Update readme.md
- Added info about creating an automation trigger for closing SNOW tickets
commit 0249a4383ae9053cc29b4b5140d139ed63d1956f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 09:57:33 2022 -0600
Update readme.md
- Replaced Helios with DataHawk + a few other formatting changes.
commit 617395e1914de1dcf5224be2abbedb79683dc763
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 09:50:57 2022 -0600
Update readme.md
- Fixed broken links
- Added info about the Cohesity Close Helios Incident playbook
- Did some formatting
commit c371a4644d05843114675cfae6b0521041be3e95
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 21:43:53 2022 -0800
+ "Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json",
commit 5b8a57d500862899b03cd847ce03d7b377b6a9ee
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 22:00:52 2022 -0600
Update readme.md
Added specific name for the playbook
commit d48f6f273414fa4b135e3724c47568f708f3aac2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 21:59:47 2022 -0600
Update readme.md
Added specific name for the vault
commit 864b714422baa0eceb005751604b691f7e16c59e
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:21:06 2022 -0800
+++ b/Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json
+++ b/Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/readme.md
commit fffc00bd40a4b743a29a4e905c11343e7c7d02de
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:13:15 2022 -0800
fix the extra "\" in readme files.
commit 4923932eb14f14623a148fe86145dbf86c8812af
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:04:32 2022 -0800
rename from "Solutions/CohesitySecurity/Data\\ Connectors/
rename to Solutions/CohesitySecurity/Data Connectors/
commit ef5279c6eb7d2b1b1940e9cb48eb783602737c11
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 19:47:16 2022 -0600
Update readme.md
Typo
commit 94e4bdfe643acb573a1c2c771ce62086d475acd7
Merge: 2e21ed5ed 6d788faf0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 17:26:43 2022 -0800
Merge remote-tracking branch 'cohesity/CohesitySecurity.internal' into CohesitySecurity.internal
commit 2e21ed5edf18e34d32b618465c5d137fbc184ba9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 17:26:26 2022 -0800
rename from DataConnectors/CohesitySecurity/Helios2Sentinel
rename to "Solutions/CohesitySecurity/Data\\ Connectors/Helios2Sentinel
update to use keyvault instead of apiKey from env.
rename some playbooks.
commit 6d788faf0f448b33ac505db4a1c982a08dcd06ad
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 19:22:01 2022 -0600
Update readme.md
Updated info related to using the KeyVault to store the API Key.
commit 2eb03064da4d07aef5a2c6fac6d41143cebb9b94
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 16:31:57 2022 -0600
Update readme.md
Updated instructions for SNOW playbook to create automation rule for closing SNOW tickets.
commit 8295c49fd69245ececfa08b9d5877428930de713
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 12:13:14 2022 -0800
rename playbook from Incident_VM_Playbook to Cohesity_Restore_From_Last_Snapshot
update to read the details from blob storage.
commit 1a2df6f10c514da74300b1a2a850c4b5dfd5fb4a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 16 10:37:58 2022 -0800
parameterize the containerName
take back the multi-thread implementation of ParseAlertToQueue
commit a3da7f4d4382060342c448a7df0e08c43e343fee
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 15 18:17:20 2022 -0800
add the vm playbook related parameters into blob storage in IncidentProducer.
commit 6899e05da662c496a412c262fca3f0f835cd7519
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 12:17:01 2022 -0600
Update readme.md
Added info and new steps for the API key
commit 0dda5f371b016fa28ec7e4f476171da9973e5c3c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:32:08 2022 -0600
Update readme.md
Updated with the info about adding the automation rule.
commit fb94db0ee57e8e1398f14590615db1de4ee42353
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:27:17 2022 -0600
Update readme.md
Added link about editing connections
commit bb844f6a6e86d8ec763ef858ae8d08b5ef37ae30
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:25:30 2022 -0600
Update readme.md
Added a step about adding SNOW credentials
commit f5efccdf5178d6e2552c0f4dde54a5528368ff1d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:12:46 2022 -0600
Update readme.md
Added steps about connection authorization
commit a7fde185bc5b3250b58b5b225642f55a6505863f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 14 11:33:21 2022 -0800
update the Cohesity_Send_Incident_Email Playbook
commit 53ab7909287d9141ad936e60cc7f30756a80135a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 20:12:54 2022 -0600
Update readme.md
Added troubleshooting section
commit 38fae0f6ee8e8ca732dc2168ccbab610b1925f91
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 19:26:41 2022 -0600
Update azuredeploy.json
Added "My" to distinguish template from the actual playbook
commit 2c5e09ecde3e3251ba111da81fc983d794977b01
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 19:25:50 2022 -0600
Update readme.md
Fixed link to the Cohesity_Send_Incident_Email template
commit 542d3622af65da620038e1ab69416f990063bbcc
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 13 17:12:01 2022 -0800
further remove the locale in readme.md
rename and sync to the latest Cohesity_Send_Incident_Email Playbook
commit 5ef898ebcd7c503ee58518e8faa15b23a9a9010e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 18:36:01 2022 -0600
Update readme.md
Removed en-us locale from links
commit df0261d7ff646c304381b10595cd66d6dbf501e9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:39:03 2022 -0800
fix typo.
commit 3cbc054f560096ff6a152ac8c4cfe6c86c993795
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:22:53 2022 -0800
update the host.json for queue policy.
commit 5c975aa3bd8045e8e913b4cf2f86dddd0035f226
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:11:29 2022 -0800
delete these 2 not in use files.
commit 34d4b4ea72e6055cbe0724b196ee87cb61bd5de0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:01:47 2022 -0800
avoid recursion in catch.
move FixedDelayRetry into host.json file.
commit a5675c32eca3a8b7006585e4985403430e28a67e
Merge: e4316deb4 24fdabb0d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:43:06 2022 -0800
Merge branch 'CohesitySecurity.internal' of ../../BareReps/workspace/Azure-Sentinel1 into CohesitySecurity.internal
commit e4316deb49a3514edbd112305ced244f37ce4aad
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:43:06 2022 -0800
fix the indent issue.
commit 24fdabb0d5ce75cb4f6c587ff4df6ccdf2331702
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:39:58 2022 -0800
n
commit 91a8b155d839783e4b3977ced1738f9916fc4edb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:19:21 2022 -0600
Update readme.md
Formatting changes
commit eba35f847f4759335c94d8776169856effe1bdf2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:18:44 2022 -0600
Update readme.md
Formatting changes
commit 4922249d7c41619c0ea86c1dd7e8bc93228b8c8b
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:17:32 2022 -0600
Update readme.md
Updated links to individual deployment instructions.
commit d0504d30064fef632d91cdac07d8cded6941a787
Author: Ying Huang <ying.huang@cohesity.com>
Date: Sat Dec 10 22:47:59 2022 -0800
add lock to protect the queue in multi-thread scenarios.
commit 79216fa51eaccf5ed0fe6b460cc00ca9f43ff9f2
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 9 16:27:40 2022 -0800
update readme file to add introduction about CohesityQueueName.
commit 3684302ebd5cd47a4df31adcef34f984182eacf6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 9 16:07:24 2022 -0800
moving the try catch logic up.
Add FixedDelayRetry for QueueTrigger.
commit 2bb8bdb2dff613feaf76bf76c91b124ad40aec29
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 9 09:46:22 2022 -0600
Update Solution_CohesitySecurity.json
Changed per Microsoft review
commit 2e4cd092da35eac529ad40cf13965891bcd23e7a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 9 09:40:25 2022 -0600
Update SolutionMetadata.json
Changed per Microsoft code review
commit 4f9275a6c72fb1a3c43e954187aa78b03ef7933e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:30:33 2022 -0600
Update readme.md
Adding a testing step
commit 0e6eef68994005f3910d9ea1f19316568ed605f4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:22:54 2022 -0600
Update readme.md
Added more testing instructions
commit 868e8aff161f4545303844273885bfaf80f1f850
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:17:29 2022 -0600
Update SolutionMetadata.json
Formatting changes
commit 2681e4e2104e1b3bb9fdcc2a306396402a55c2a5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:16:47 2022 -0600
Update SolutionMetadata.json
Expanding categories and updating support info
commit 456cde77cf36f57505d799ae641e4b0860801837
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:11:55 2022 -0600
Update readme.md
Polished text
commit e7596e2376153ff6a5a9e304f78d7ef44b6566a0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 19:51:46 2022 -0600
Update Solution_CohesitySecurity.json
Added product description
commit 3b0d6cae138980f4c2b0689e743a14729ce8f5cd
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 8 17:49:44 2022 -0800
obfuscate the CohesityQueueName
multi-thread improve ParseAlertToQueue function
commit 6a010359f4fc1bf4452b0ad82f473bb89115e4e2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 17:34:47 2022 -0600
Create readme.md
Final version
commit f062e826cc2f7aad7c71303f74b5343c6b7ba0de
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 16:39:52 2022 -0600
Update readme.md
Fixed typos
commit 16dd47d262e6e8af7bd0154049f6516be88ecf03
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 16:32:18 2022 -0600
Update readme.md
Complete version
commit 1cc3573c4652b5b37fcbcd390d60290d83390991
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 13:45:14 2022 -0600
Update readme.md
Typo
commit 882e06b81c24a3f066362e25d163c03727476f8b
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 13:09:45 2022 -0600
Create readme.md
Initial commit
commit a3604698a1cbadefb5c4eab32160ef378bb93eb6
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:55:06 2022 -0600
Create readme.md
Initial version
commit a3691ffe3cd4c566dc7ff19fbf25890367e4c893
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:27:32 2022 -0600
Update readme.md
Removed unnecessary parameter
commit b54d3775058650cfdcd55b5f53b32eb183e1a4cc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:26:47 2022 -0600
Update readme.md
Formatting changes
commit 7a1d5c44c6b3928a8c19d09b29516f4bd9e03c3f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:22:17 2022 -0600
Update readme.md
Corrected typos
commit beba853c334afcc41c41b9cba573a0017114054f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:05:11 2022 -0600
Update readme.md
Corrected the URI
commit f57caf6c0e43e3c367c756e53c686919bdb33a31
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:03:07 2022 -0600
Update readme.md
Initial version
commit e6456173f4d0cde1d28279c995fca17f4210764e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:45:53 2022 -0600
Update readme.md
Added formatting
commit 776e8f5f9f77360dc5944bb0ea42683e66244c57
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:45:12 2022 -0600
Update readme.md
Completed the description
commit 9f32298f3f806649e3f7e892ba3b8d38f163d9bb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:12:00 2022 -0600
Update readme.md
Initial version
commit 124d09ab973d57965a14011be1acd5d05feeedef
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 10:57:08 2022 -0600
Update readme.md
Added word Cohesity to the playbook name
commit 72ffa6e79eb3f3bee7b6603bc576222d59701120
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:55:55 2022 -0600
Update readme.md
Formatting changes
commit 63d91a5d6a0351db688cf5442d39c78dcaf76440
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:48:38 2022 -0600
Update readme.md
Updated ARM template
commit 9778263e071c5813200c46f27fffaebfbcefbd08
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:37:38 2022 -0600
Update readme.md
Trying new URI format
commit 30630efe42cf7ef46f5af74d7042c5db5f851389
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:30:39 2022 -0600
Update readme.md
Changed URI again
commit 0622eba625495e163e2b36a249a550728100ab42
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:29:04 2022 -0600
Update readme.md
Changed URI for ARM template
commit 6b33b2525f6df624af25f80762463876ddfdd5d5
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 7 17:15:05 2022 -0800
obfuscate the values in local.settings.json files.
rename cohesity.config to cohesity.json, and update the build.ps1, readme.md.
The github/codeql-action/autobuild keeps failing, but DataConnectors/CohesitySecurity/Helios2Sentinel build succeeded, as shown in following log.
thus will disable the autobuild work flow.
=============================
MSBuild version 17.4.0+18d5aef85 for .NET
Determining projects to restore...
Restored /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj (in 241 ms).
Restored /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj (in 241 ms).
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.cs(65,34): warning CS1998: This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread. [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj]
IncidentProducer -> /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/bin/Debug/net6.0/Helios2Sentinel.dll
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(30,32): warning CS0618: 'AuthenticationContext.AcquireTokenAsync(string, ClientCredential)' is obsolete: 'Microsoft.IdentityModel.Clients.ActiveDirectory is deprecated and replaced with Microsoft.Identity.Client. To migrate a daemon application, or service to service flow, see https://aka.ms/adal-to-msal-net/daemon' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(39,51): warning SYSLIB0014: 'WebRequest.Create(Uri)' is obsolete: 'WebRequest, HttpWebRequest, ServicePoint, and WebClient are obsolete. Use HttpClient instead.' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
IncidentConsumer -> /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/bin/Debug/net6.0/IncidentConsumer.dll
Build succeeded.
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.cs(65,34): warning CS1998: This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread. [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(30,32): warning CS0618: 'AuthenticationContext.AcquireTokenAsync(string, ClientCredential)' is obsolete: 'Microsoft.IdentityModel.Clients.ActiveDirectory is deprecated and replaced with Microsoft.Identity.Client. To migrate a daemon application, or service to service flow, see https://aka.ms/adal-to-msal-net/daemon' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(39,51): warning SYSLIB0014: 'WebRequest.Create(Uri)' is obsolete: 'WebRequest, HttpWebRequest, ServicePoint, and WebClient are obsolete. Use HttpClient instead.' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
3 Warning(s)
0 Error(s)
Time Elapsed 00:00:03.65
commit 48a92fa01538c5f9682cf85ec863fee7034db2bc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:56:38 2022 -0600
Update readme.md
commit fff7b50eef941fc31baaf0132fabc2a5c8be4580
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:55:03 2022 -0600
Update readme.md
URI test
commit d9e31f7740e6848b76bb8fb52b23aea4d447717d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:53:17 2022 -0600
Update readme.md
Another link test
commit d2c11aa620bfc8f677de973a4781997349e9573c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:49:15 2022 -0600
Update readme.md
Another URI test
commit 4af3e3078bc46faae5f25ae60db23add4dc64f1e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:48:19 2022 -0600
Update readme.md
Trying different link
commit 3137eb24dbd9c65b11d9893f15b749bfacebc503
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:40:02 2022 -0600
Update readme.md
Changed URI
commit 2483ea6d37e3073fd9af84ece13a9bfacf0efa0b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 7 13:31:11 2022 -0800
--- ./Solutions/CohesitySecurity/Analytic Rules/RansomwareAlert.yaml
--- ./Solutions/CohesitySecurity/Data Connectors/helios_connector.json
+++ ./Solutions/CohesitySecurity/Package/createUiDefinition.json
+++ ./Solutions/CohesitySecurity/Package/mainTemplate.json
update the build script.
commit fefdf8cfd2bedde33c8f9e866653cee2a2fd5ee0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:25:13 2022 -0600
Update readme.md
Testing ARM
commit 19ec494e83bb4ddbf7f987e89d90597282fdf247
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:18:22 2022 -0600
Update readme.md
Corrected playbook description
commit 59cd9b5250fb8fe40cf8cba981f426562aadcd90
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:04:28 2022 -0600
Update readme.md
Added TBD for package directory
commit 66bdab4f47ce3a10b3f9520c8a8a5302a9dc3c7c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:02:15 2022 -0600
Update readme.md
Fixed typos
commit cd7ec9fd1da7147aaa9adf3bd9308a44a877ad1f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:00:08 2022 -0600
Update readme.md
Minor fixes
commit 7ba845641f2ee7eef676988e82f53c221bb4e28a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:45:22 2022 -0600
Update readme.md
Deployment steps corrections
commit e6dd9c5fce55658a1ef567f8666252421c922828
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:42:44 2022 -0600
Update readme.md
commit 29ca436444bcc5cb2da9df46790533969402d4d5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:41:33 2022 -0600
Update readme.md
Setting ref line
commit b1301e2b6ee1513f5c7d6c7fdd02f071279773fa
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:40:34 2022 -0600
Update readme.md
Fixing URL again
commit 6d7012c1b57ab0232a9963345d2b68d55b1b4639
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:39:11 2022 -0600
Update readme.md
Fixing build instructions URL
commit 098e27bbf719ed680bbbec1da5698d8fe7e4bbca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:36:40 2022 -0600
Update readme.md
Escaped URL
commit 61ea1d567270fb2c0056ed766771050165898d27
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:35:11 2022 -0600
Update readme.md
Fixed step #1
commit 0d071a0b695060caffdf0a28f00d2dae927fb5ca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:34:04 2022 -0600
Update readme.md
Typo
commit 028950c162cd7c3fbe21d3f4daeaa980da6be8ca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:33:26 2022 -0600
Update readme.md
Fixed link for the package directory
commit 15af0de66deecf90fc0d631300cd031c20174090
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:31:25 2022 -0600
Update readme.md
Added references to other deployment instructions
commit f7e5af2070474d57a0233b238a864e3c37d422dc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 11:30:56 2022 -0600
Update readme.md
First draft of deployment instructions
commit b83e93aea069b80ff535acaa69149e37f900e3da
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:29:02 2022 -0600
Update readme.md
commit 372ae3e17ed3e21ec5958a6619071d1a9db96564
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:26:25 2022 -0600
Update readme.md
commit e6b15a5793fe2736c42293c3d2d3d7d8af140cd9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:18:30 2022 -0600
Update readme.md
Updated link to Azure deployment
commit 3447201611a96ce8b4989483c385877b798016a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 18:56:16 2022 -0600
Update readme.md
Added link to the playbook template
commit 36c776fd5b20c27ab9b6668c4c12d3ff89621de5
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 2 15:54:33 2022 -0800
Just initialize this new branch for Cohesity internal collaboration/review.
v-dvedak
pushed a commit
that referenced
this pull request
Apr 10, 2023
commit 2fbfbbbc09dab94d0418561d75bd72f7517030df
Author: Kishan Nerella <11820638+kishannerella@users.noreply.github.com>
Date: Wed Mar 15 12:27:05 2023 -0700
Fetch alerts in a large interval and cache them to avoid missing them (#9)
Fetch alerts in a large interval and cache them to avoid missing them
Helios can insert alerts because of which Producer may miss alerts
because Producer only fetches alerts in the last 5 minutes. This
period is now increased to 24 hours and a blob is used to store
the previous alert ID to avoid pushing duplicate alerts in to the
queue.
commit b8c1e29d2560049820487b417bd174427bb0edc7
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Wed Mar 8 13:43:11 2023 -0800
add test cases, to do match up test between sentinel and helios. (#8)
Add test: Match up test between Sentinel and Helios.
commit 4b2bc0cc248f326e62aebd132626b44e15cbacb6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Mar 1 17:23:17 2023 -0800
add this file, for further customization.
+++ ./Solutions/CohesitySecurity/Tools/createSolutionV2.ps1
commit 9cba831803a72179ac0f6ce71af90127e686bbc0
Merge: 40ad85f0e a75b98838
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Mar 1 12:58:40 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 40ad85f0e1968d380d28115bca8c7ff592f76b75
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Feb 24 16:50:48 2023 -0800
Added status to the incident to allow Welcome incident creation
- Fixed startDaysAgo parameter usage in function azuredeploy.json
- Replace ApiKey in blob key to a static value.
- Removed ApiKey references in the logs.
- Changed the status of the incidient to "New" always as we only
query for kOpen alerts.
- Refactored the code to have incident creation at a single place.
commit ab333b79b112e47d9d44834762c97f2b8acad934
Merge: 878871468 3af5f111d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Feb 28 13:58:11 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 878871468e45b65faed668b606025987dd2659f5
Merge: 9a961ab2a 4ed65ef71
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 27 16:27:00 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 9a961ab2ac3d0a4d5cd7dfa117c98a70373e53ce
Merge: 38a0bbd01 4e53f5de0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Feb 24 10:45:17 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 38a0bbd0113ba0b42d18a87faa9bce7fe31779e4
Merge: b768cab7f ed943622b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 23 11:16:06 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit b768cab7f3636d8ab9bcc103afea7062bcaeecdc
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 22 18:25:53 2023 -0800
Fix the required permissions and role for the Azure AD app
commit 474253f2bf90fb2be70de63f48fa22579028610c
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 21 11:49:26 2023 -0800
Regenerate package with v2 solution creator and updated partner info
commit 44e2f1b7921cccbe0ca1cabb52df3e45b3d0d82b
Merge: 12ec703ac 284f45dc7
Author: Ying Huang <ying.huang@cohesity.com>
Date: Sun Feb 19 22:49:30 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 12ec703acecd71fe81a218dc0de0ea293f04907b
Merge: 4243ee149 3d8a1cbdd
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 16 16:08:39 2023 -0800
Merge pull request #5 from cohesity/audo_deployment
fix to the serverfarms Conflict issue.
commit 4243ee1498650ae062034f5b04a267e906c0dd20
Merge: dcd835bd2 5127b80fd
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 16 16:08:04 2023 -0800
Merge pull request #6 from cohesity/build
update the build related stuff.
commit 5127b80fdeae73342ce5c74e98499fb358137454
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 16 14:55:44 2023 -0800
add this file, but which still not working yet.
./Solutions/CohesitySecurity/Package/mainTemplate.json.sh
update the build script.
commit b4b7dcce8c80a788b36e2560eed301a479dc0884
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 16 11:19:41 2023 -0800
update the build related stuff.
small change to metadata.
commit 3d8a1cbdd19cea118e497b00802855b75705f1d0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Feb 15 11:03:21 2023 -0800
fix to the serverfarms Conflict issue.
small update to the deployment script.
commit dcd835bd2a13b8dcd336985560c6503fffbd6811
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:58:34 2023 -0800
Re-create package with version 2.0 and updated URLs
commit 26b81b758dedaecd41a179197dfc8ec0f28c7cde
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:54:10 2023 -0800
Replace github URL to Azure from Cohesity
commit 2f3e379183d7caf1c71f6d5fb4e0ccb6071427a4
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:16:52 2023 -0800
Remove manual deployment option, change version and URLs
commit 3eb7ffc7aae1590043f4cea4f8e72ceffa57aee9
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 9 11:13:27 2023 -0800
Zip (#4)
Add producer and consumer packaging scripts
commit 724bd4b85ed9acc1caf564466b074a53a69fd546
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 16:55:25 2023 -0800
Renamed function app package name and location
commit 8a2a67073b318300cec969d745eeaba9dee41179
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 14:02:55 2023 -0800
Add logo to solution
Also, fix manual deployment steps in Cohesity_API_FunctionApp.json.
Updated connector description in createUiTemplate.json and re-created
package.
commit 03d5b8d68aaaabf2db88407347e390620b6a7983
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 13:11:54 2023 -0800
Add Cohesity logo
commit c79d25164adc86a467e5d3e187c9c7e8e38842af
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 18:13:10 2023 -0800
Create package using v2 solution creator
Also, moved the Solution file into 'Data' folder as it looks like that's
the standard.
commit e3d0f772cdac49f08a09913f9d36527ed5db65f5
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 17:29:53 2023 -0800
Change post deployment field in email to an array of values
Also, add periods at the end of descriptions in all the playbooks.
commit e8053f8b1c9fef0f0834cf37f3f00bbf25a939f9
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 15:55:32 2023 -0800
Add Cohesity in the title of playbooks and update readme accordingly
commit da51a755a27cb4415b6c1efc30d69e730791ed55
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Feb 6 20:45:28 2023 -0800
Created package files with the new playbook
Also, fixed readme to add the new playbook and some corrections.
commit e94659171063a83ca891ebc138e612969d0934a9
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Feb 6 13:41:13 2023 -0800
Remove empty parameter from playbook as package validation fails
commit 6c52f04bf8c1a87b4e504abcce115237e61b5220
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Feb 6 19:27:57 2023 -0600
Update readme.md
Removed an extra dot
commit 7af5db70561fc2c1e7b1d74947e161aec7c10a1f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 6 10:00:51 2023 -0800
update/add some auto deploy related scripts.
commit b5ffb7134481589da0beb3746d77fba1ce1843f8
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 6 09:52:36 2023 -0800
beautify this json file
commit d00210396cb89f45cea45d47ecc4836c99f409f7
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Feb 3 19:26:15 2023 -0800
Fix package download links and producer timer trigger
Also, changed the function app packaging by removing top-level directory.
commit 1a953226cf64afc0b238406e3e94fb1580b0f443
Author: Kishan Nerella <kishannerella@MacBook-Pro.local>
Date: Fri Feb 3 12:51:48 2023 -0800
Add function runtime config and deployment url
commit 8bfc80e4cd58c377e343a8e307d9a2a34f3a320a
Author: Kishan Nerella <kishannerella@MacBook-Pro.local>
Date: Fri Feb 3 12:13:42 2023 -0800
Create producer and consumer packages for deployment
commit f45527acc1c89998eee11aa421377a14ea4ec956
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Feb 2 20:02:00 2023 -0800
Fix readme language
commit eaf972c5170288be0e5c1ba43cf41d60969628c6
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Feb 2 19:55:37 2023 -0800
Fix links in readme files
commit 7dbcd360ce6c3b40bad1de6095f6d355a9a31e61
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Feb 2 12:55:57 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed a wrong reference
commit 85f916b3d50bf24fb02b675b25b21308392cd5d7
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 31 17:33:10 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed locale from the link
commit bd24164805c493d20199db1faae38a14f043ea7f
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Jan 30 17:22:41 2023 -0800
Fix delete blob deployment URL and tags
commit e6cab0c1135ab753775722083049f1eae7f2a37f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:40:38 2023 -0800
add back folders with name begining in upper case.
commit 9bca6381b287585e4e448e6b7680e5a2f0aed918
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:38:42 2023 -0800
delete those old folders with name begining in lower case.
commit 38e30732c96e418b7394b01bbd0dcb00b3a5d99a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:37:04 2023 -0800
uniform data input.
rename folders to upper case prefix.
add more test cases.
commit 62429c630ae109a775026251829dd6652d7fe178
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:33:05 2023 -0800
uniform data input.
rename folders to upper case prefix.
add more test cases.
commit 4a0baa24f13e0ad52c6fac91449040c819de3cfb
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Jan 27 21:02:12 2023 -0800
Add delete incident blobs playbook
commit aca0d06a5022aac01e0e713bf8e57a04d76f5821
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 27 17:44:19 2023 -0800
add one new exported playbook, need to later add description, name, author, etc.
add cohesity tool to export playbook.
commit 79bb3a1fbe8fba031ffda0c3b75e6108c9d02d5e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 27 17:25:10 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed unnecessary coma
commit 331342e06349501d5aba8a9e3e1d17a0c8ff0e88
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Sat Jan 28 02:17:57 2023 +0530
Reviewed doc
Reviewed for style and language
commit f5ce722a37566212ed90ff7562012f0deb702e7a
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Sat Jan 28 02:12:12 2023 +0530
Reviewed the doc
Reviewed for style and language
commit 047a772779550a5edc30428c1df004b3b0abcaf5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Jan 26 17:51:02 2023 -0600
Create Cohesity_API_FunctionApp.json
First version of data connector file
commit aee525ee71b1995bc7087d6b091c0e1f36ad87ce
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Jan 26 17:38:11 2023 -0600
Update readme.md
Typo
commit 011848f908fd9ce07a261a864ba8ac9e969f1df0
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Jan 26 15:13:52 2023 -0800
Remove pre-requisited from CloseHeliosIncident and Restore playbooks
commit 65180bee333f86de2c4fd14d7cef5e45a26704b3
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 25 17:20:47 2023 -0800
add test case for playbook: Cohesity_Close_Helios_Incident.
commit 9e22aacb3c7372ca7be444bc3ac53e4af9c7ca73
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Jan 25 14:47:31 2023 -0800
Add user role related info to playbook readme files
commit dea9ed121034fec3f6c27bfc03fe6d45a98945a6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 24 17:14:06 2023 -0800
a decent fix for the dup issue by Eugene.
commit 66c1136590967efb139aa2e3fd7debe72fbf3933
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 24 13:42:41 2023 -0800
a temporary fix for the duplicate incident issue.
will try to add some automation tests to verify:
1: has incidents generated.
2: no duplicate
and then find a decent fix.
commit 3338fe0c4dc77c30ccf7780fd526e997683606a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 24 15:11:50 2023 -0600
Update azuredeploy.json
Added link to the prerequisite details
commit e563f5ff1eb065d58e63533d4afb40c5f0e4f9ce
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 24 15:09:26 2023 -0600
Update azuredeploy.json
Added link to prerequisite details
commit 956a4e44371144b22925009b02a5a009db5c4797
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 03:06:04 2023 +0530
Doc review
Reviewed doc for language and style
commit 9c6e3cffbc659023a2456125d83f0161451ac9a1
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 02:58:14 2023 +0530
Doc review
Reviewed for language and style
commit dc847550980ac19f14c9d1f348443ca5e57c5a86
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 02:46:15 2023 +0530
Doc Review
Reviewed for language and style
commit 2069d81a441a25775bf8c38ca0a2241676f87b3d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 20 11:06:13 2023 -0800
clean the codes.
commit edc60d45ab75373d1c771f550616602e92791ede
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 20 10:26:19 2023 -0800
add feature: TestAlertToQueue
commit 28efdb81d136e80fa0ad2f79e4cdd7b8d61ca56b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 19 15:46:24 2023 -0800
clean some codes.
commit eb86fbf97d28026c9ad96d243b1b4fe2b41af556
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 19 14:05:22 2023 -0800
Fix some warning, retire some obsolete codes.
commit fe35840043aadbe44b3f21b63ff248cf1be3967a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 18 17:08:17 2023 -0800
fix some compilation warnings.
commit 8fae6744b2f67494fbe4619ffeff8d62973dbf24
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Wed Jan 18 16:04:32 2023 +0530
Reviews
Edited content for style and grammar
commit 2bec432bd4a047bdc994c8c7ebe2c8e239fc1c4e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:33:30 2023 -0600
Update azuredeploy.json
Updated metadata
commit c97b56befe48ec5804bc738a843b4385869fd10e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:29:18 2023 -0600
Update azuredeploy.json
Fixed quotes
commit c3b07a1ed51fa810ebf3c3d4cc5b9d714cf438fc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:25:09 2023 -0600
Update azuredeploy.json
Fixed typo
commit 04289abf2cb4926da8c705b6bd9b6911ca73587d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:23:34 2023 -0600
Update azuredeploy.json
Added metadata
commit 8e139c0072c79557fb3f14b2ba9f59befc8cfeb9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 11 10:27:54 2023 -0800
update text from 'Azure Sentinel' to 'Microsoft Sentinel'
commit 94270ea0f0bb549f6a963ea40ebc7107f9e38f21
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 10 15:21:44 2023 -0800
remove BlobStorageConnectionString for duplication.
remove a dup try catch.
commit 199f5a140dd318095a1d2eaf7188a331da1258e3
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 10 11:07:38 2023 -0800
update the Function Apps to use env instead of secret for variables.
fix some properties in azuredeploy.json.
commit 7bb4f9341f949369c05ff44e38253f69d283bb2a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 17:51:04 2023 -0800
small fix in script.
commit d43cfccf320eca66bbb8f94eac77198dbaf04434
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 14:25:35 2023 -0800
update deploy scripts.
commit 05f45be3853adde4bf9f82d68c6c654615f3ad85
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:11:45 2023 -0600
Update readme.md
Fixed a typo
commit 6155c4e0f7fdee7afdbcdfe72dccd08bad8d9c5a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:08:20 2023 -0600
Update readme.md
Updated the instructions to reflect the new deployment script
commit 98347394d8af51d997359c310f5e7335392c8680
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:07:16 2023 -0600
Update readme.md
Updated the instructions to reflect new deployment steps
commit 607b64f197fb8a914165f6482c954232409e93fb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 13:49:24 2023 -0600
Update readme.md
Fixed a typo
commit db7be2ab9188b4d6d2a9e1cc960321a71d921d8e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 13:44:56 2023 -0600
Update readme.md
Polished language
commit 8371bf109edb915a78307e4f35af74891e614ae6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 10:45:15 2023 -0800
update azuredeploy to host on windows OS.
add deployment related scripts.
update the readme file.
commit bc64f554f27e8a32558b5b66ab455294ee8e620a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 11:38:53 2023 -0600
Update readme.md
Updated publishing instructions
commit de74f40e18f9c890f66f516d4463c1cb14e07a97
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 5 14:21:11 2023 -0800
change to windows host to workaround the AzureWebJobsStorage error issue.
commit 5a1daf5b3cc1eb7637c2b9213de051769b2d96c9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 4 15:57:42 2023 -0800
small fix in azuredeploy.json
commit d9cdca1acb1c2fc26b335bac98d6747371413cf4
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 4 15:54:46 2023 -0800
add DefaultEndpointsProtocol to azuredeploy.json
commit 688ca03cb660a3a855913cdcb9313ba5fdf2b8cb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Jan 4 15:58:33 2023 -0600
Update readme.md
Updated pre-requisites and troubleshooting steps
commit a286f9c06418c619d1f9b1ca9938e965d4ec4ea5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Jan 4 15:42:56 2023 -0600
Update readme.md
Updated prerequisites and troubleshooting details per MS code review
commit 208d1f3d73001fdfd3bef7ea4d99453063b7175d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 3 17:49:26 2023 -0800
beautify this json file.
commit 92de7c93bb4df329925bd67c4809996eaf694a80
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 3 17:48:57 2023 -0800
beautify this json file.
commit 02bb9f3da89e7da8cf634dae5bae5a8732c29bb9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 17:07:12 2023 -0600
Update readme.md
Updated deployment instructions to reflect that keyvault is now a managed connection
commit 9386f5c8fc2636af920c2d91a5d9d66517de8f56
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 16:56:46 2023 -0600
Update azuredeploy.json
Fixed container name
commit 748937fe2035ba8877006141da6985367e8081a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 16:09:35 2023 -0600
Update readme.md
Updated instructions to reflect the new deployment steps
commit 3fdcfd398ba5ec273b2669a3ff2a6941cbce54a9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 15:45:13 2023 -0600
Update azuredeploy.json
Made KeyVault managed connection with the predefined Keyvault name
commit 0d4a8fabf9fab804d49ae6f6b4fb10e2f05d785c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 10:43:18 2023 -0600
Update azuredeploy.json
Added Keyvaultname as a connection parameter
commit 52a92c57ab077249e7e32aa251476f85abecdea9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 23 15:55:50 2022 -0800
update the managedApis.
commit 3b671431946ffee40a95c5d6ae917074e3d1e872
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:33:47 2022 -0600
Update azuredeploy.json
Removed managed identity from Blob
commit 978af21d84fc4fc462e3b4dcdb7634e0717b5045
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:30:04 2022 -0600
Update azuredeploy.json
Testing managed connection with Azure Blob
commit 4d3b80361763c3202234a349512ad55e2670e57a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:23:47 2022 -0600
Delete incident_producer_azuredeploy.json
Deleted file that I created for test purposes
commit be1f06e1b8733d353481c844b7dff7b3de9117ad
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:19:39 2022 -0600
Update azuredeploy.json
Changed prerequisites
commit cce48babe94de2598891538f1196b629a903e5d8
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:15:25 2022 -0600
Update azuredeploy.json
Added metadata to the deployment wizard
commit c59d740aff4b104504ea999d2b507717ccd4fc4e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:11:59 2022 -0600
Update readme.md
Changed deployment instructions
commit 7b4cb687b11173032a761d652a00767d2d55b084
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:10:33 2022 -0600
Update readme.md
Fixed a typo
commit 0a0604e23d21ab691e4cebdfc6af6b326531c1ef
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 13:27:00 2022 -0600
Update readme.md
Added info about authorization
commit a91e642e9288513681a42816e35e0892c0c44a56
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 23 11:26:54 2022 -0800
some small change according to the comments.
commit 57f27beb00a17d25118bb29ecbde2de7420db714
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 13:19:42 2022 -0600
Update azuredeploy.json
Removed managed identity from Outlook
commit d84dfd4e1fd67560cc55edaf294817f0e540557f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 11:03:10 2022 -0600
Update azuredeploy.json
Fixed a typo (",")
commit eb38749daf730775b6b5b3c2105476a5961aed70
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 11:00:35 2022 -0600
Update azuredeploy.json
Added metadata and made Outlook connection type ManagedServiceIdentity
commit 3b526dedd207d181db5beea74a4bc3f8dc5f4868
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:51:55 2022 -0600
Update readme.md
Updated with consideration of a new ARM template for Azure function config deployment
commit 2b7fa46d117f0f0777d25f6376c1c877165df3eb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:25:38 2022 -0600
Update azuredeploy.json
Fixed type ","
commit 6bd4f29dd61e4eff16a4feeeca0e974e041d89d3
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:24:16 2022 -0600
Update azuredeploy.json
Added metadata
commit d993c87642efb1cef144bfeb41c497531b2e27a1
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:18:03 2022 -0600
Update azuredeploy.json
Updated metadata
commit 4fd3aaf0bc9f15c5536fe27644b21a823a7300b4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 09:44:48 2022 -0600
Delete func_azuredeploy.json
This is a temporary file that was created by mistake.
commit 4c32629bca96318c4fe8f731d78d3709d3c3f836
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:56:10 2022 -0800
update the csproj files
commit 3d1e443984cd2e917a9208d28fa8df4c6d9c4830
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:51:36 2022 -0800
update the csproj files.
commit 1bb53f3db70f5c86abaf14f4e56d8337dd266344
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:49:02 2022 -0800
change to read from key vault intead of env.
commit e89a55ae22ae9b0ad48033fd0cc2c99dea78cbd4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 22 14:09:01 2022 -0600
Update readme.md
Added button to deploy the functions to Azure.
commit d3ef3bd69760acbd0febb547cc76eb5323cc5877
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 22 14:03:17 2022 -0600
Create azuredeploy.json
ARM template for deploying both Azure functions.
commit 979c7d3c7d29d8a69891808d61cb3719bf8cefe2
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 21 19:38:28 2022 -0800
retire redis in IncidentProducer
add Anomaly Strength in description
re-organize the codes
commit ac0ae888d48f2032827ec5a2a577f93c008fd0d0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 19:33:30 2022 -0600
Update readme.md
Returned the reference to the Restore playbook
commit 8f0536ea15bb5de6373024e412f3f78658b96e9d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 17:23:58 2022 -0800
update the readme files.
commit 2c7eb694bc41153566f22b51115490b5551d6fc1
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 17:01:30 2022 -0800
update these 2 package files.
+++ ./Solutions/CohesitySecurity/Package/createUiDefinition.json
+++ ./Solutions/CohesitySecurity/Package/mainTemplate.json
commit 4520fcb7fdbe7c1f8d2619ba314a7a00a9137bfb
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 16:49:04 2022 -0800
update these 2 Playbooks:
./Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json
./Solutions/CohesitySecurity/Playbooks/Cohesity_CreateOrUpdate_ServiceNow_Incident/azuredeploy.json
commit e13cc5a80f376d76c6df8f49c788f00e21510657
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 17:27:36 2022 -0600
Create incident_producer_azuredeploy.json
Initial version of the IncidentProducer Function App
commit 0d2c1d1b534a844607149b46e8ac8f7c38310825
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 15:44:46 2022 -0600
Create func_azuredeploy.json
Test Azure func deploy
commit db241debae8d5d4f226dcca6e4f0eda712721ae3
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 13:10:35 2022 -0600
Update readme.md
Added instructions about connection authorization
commit 7b950bcce0745708ff4b62c36a04599801e34ceb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 13:06:47 2022 -0600
Update readme.md
Added connection authorization instructions
commit 4e38c1cca6336d3b9c97039a7cda9e8e2c122f72
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:48:49 2022 -0600
Update readme.md
Fixed broken links
commit c454187a07654d6a293f57641b6d33db0367e6c7
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:42:53 2022 -0600
Update readme.md
Fixed broken links
commit 138ce8147da4d339633afdaa46a6cc0401920959
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:36:24 2022 -0600
Update readme.md
Fixed broken links
commit d9a069e6c948698b735acd441af5c91426460388
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:27:31 2022 -0600
Update readme.md
Typo.
commit 6b73ea2794d07fe2e635e3526212d9c94c8b8099
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:27:13 2022 -0600
Update readme.md
Add info about skipping steps if the API key is already stored in the vault.
commit 829395b3aea5d420622c4fea04906836be74d1e1
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:22:41 2022 -0600
Update readme.md
- Added info about creating an automation trigger for closing SNOW tickets
commit 0249a4383ae9053cc29b4b5140d139ed63d1956f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 09:57:33 2022 -0600
Update readme.md
- Replaced Helios with DataHawk + a few other formatting changes.
commit 617395e1914de1dcf5224be2abbedb79683dc763
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 09:50:57 2022 -0600
Update readme.md
- Fixed broken links
- Added info about the Cohesity Close Helios Incident playbook
- Did some formatting
commit c371a4644d05843114675cfae6b0521041be3e95
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 21:43:53 2022 -0800
+ "Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json",
commit 5b8a57d500862899b03cd847ce03d7b377b6a9ee
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 22:00:52 2022 -0600
Update readme.md
Added specific name for the playbook
commit d48f6f273414fa4b135e3724c47568f708f3aac2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 21:59:47 2022 -0600
Update readme.md
Added specific name for the vault
commit 864b714422baa0eceb005751604b691f7e16c59e
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:21:06 2022 -0800
+++ b/Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json
+++ b/Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/readme.md
commit fffc00bd40a4b743a29a4e905c11343e7c7d02de
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:13:15 2022 -0800
fix the extra "\" in readme files.
commit 4923932eb14f14623a148fe86145dbf86c8812af
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:04:32 2022 -0800
rename from "Solutions/CohesitySecurity/Data\\ Connectors/
rename to Solutions/CohesitySecurity/Data Connectors/
commit ef5279c6eb7d2b1b1940e9cb48eb783602737c11
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 19:47:16 2022 -0600
Update readme.md
Typo
commit 94e4bdfe643acb573a1c2c771ce62086d475acd7
Merge: 2e21ed5ed 6d788faf0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 17:26:43 2022 -0800
Merge remote-tracking branch 'cohesity/CohesitySecurity.internal' into CohesitySecurity.internal
commit 2e21ed5edf18e34d32b618465c5d137fbc184ba9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 17:26:26 2022 -0800
rename from DataConnectors/CohesitySecurity/Helios2Sentinel
rename to "Solutions/CohesitySecurity/Data\\ Connectors/Helios2Sentinel
update to use keyvault instead of apiKey from env.
rename some playbooks.
commit 6d788faf0f448b33ac505db4a1c982a08dcd06ad
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 19:22:01 2022 -0600
Update readme.md
Updated info related to using the KeyVault to store the API Key.
commit 2eb03064da4d07aef5a2c6fac6d41143cebb9b94
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 16:31:57 2022 -0600
Update readme.md
Updated instructions for SNOW playbook to create automation rule for closing SNOW tickets.
commit 8295c49fd69245ececfa08b9d5877428930de713
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 12:13:14 2022 -0800
rename playbook from Incident_VM_Playbook to Cohesity_Restore_From_Last_Snapshot
update to read the details from blob storage.
commit 1a2df6f10c514da74300b1a2a850c4b5dfd5fb4a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 16 10:37:58 2022 -0800
parameterize the containerName
take back the multi-thread implementation of ParseAlertToQueue
commit a3da7f4d4382060342c448a7df0e08c43e343fee
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 15 18:17:20 2022 -0800
add the vm playbook related parameters into blob storage in IncidentProducer.
commit 6899e05da662c496a412c262fca3f0f835cd7519
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 12:17:01 2022 -0600
Update readme.md
Added info and new steps for the API key
commit 0dda5f371b016fa28ec7e4f476171da9973e5c3c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:32:08 2022 -0600
Update readme.md
Updated with the info about adding the automation rule.
commit fb94db0ee57e8e1398f14590615db1de4ee42353
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:27:17 2022 -0600
Update readme.md
Added link about editing connections
commit bb844f6a6e86d8ec763ef858ae8d08b5ef37ae30
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:25:30 2022 -0600
Update readme.md
Added a step about adding SNOW credentials
commit f5efccdf5178d6e2552c0f4dde54a5528368ff1d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:12:46 2022 -0600
Update readme.md
Added steps about connection authorization
commit a7fde185bc5b3250b58b5b225642f55a6505863f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 14 11:33:21 2022 -0800
update the Cohesity_Send_Incident_Email Playbook
commit 53ab7909287d9141ad936e60cc7f30756a80135a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 20:12:54 2022 -0600
Update readme.md
Added troubleshooting section
commit 38fae0f6ee8e8ca732dc2168ccbab610b1925f91
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 19:26:41 2022 -0600
Update azuredeploy.json
Added "My" to distinguish template from the actual playbook
commit 2c5e09ecde3e3251ba111da81fc983d794977b01
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 19:25:50 2022 -0600
Update readme.md
Fixed link to the Cohesity_Send_Incident_Email template
commit 542d3622af65da620038e1ab69416f990063bbcc
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 13 17:12:01 2022 -0800
further remove the locale in readme.md
rename and sync to the latest Cohesity_Send_Incident_Email Playbook
commit 5ef898ebcd7c503ee58518e8faa15b23a9a9010e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 18:36:01 2022 -0600
Update readme.md
Removed en-us locale from links
commit df0261d7ff646c304381b10595cd66d6dbf501e9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:39:03 2022 -0800
fix typo.
commit 3cbc054f560096ff6a152ac8c4cfe6c86c993795
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:22:53 2022 -0800
update the host.json for queue policy.
commit 5c975aa3bd8045e8e913b4cf2f86dddd0035f226
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:11:29 2022 -0800
delete these 2 not in use files.
commit 34d4b4ea72e6055cbe0724b196ee87cb61bd5de0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:01:47 2022 -0800
avoid recursion in catch.
move FixedDelayRetry into host.json file.
commit a5675c32eca3a8b7006585e4985403430e28a67e
Merge: e4316deb4 24fdabb0d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:43:06 2022 -0800
Merge branch 'CohesitySecurity.internal' of ../../BareReps/workspace/Azure-Sentinel1 into CohesitySecurity.internal
commit e4316deb49a3514edbd112305ced244f37ce4aad
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:43:06 2022 -0800
fix the indent issue.
commit 24fdabb0d5ce75cb4f6c587ff4df6ccdf2331702
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:39:58 2022 -0800
n
commit 91a8b155d839783e4b3977ced1738f9916fc4edb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:19:21 2022 -0600
Update readme.md
Formatting changes
commit eba35f847f4759335c94d8776169856effe1bdf2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:18:44 2022 -0600
Update readme.md
Formatting changes
commit 4922249d7c41619c0ea86c1dd7e8bc93228b8c8b
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:17:32 2022 -0600
Update readme.md
Updated links to individual deployment instructions.
commit d0504d30064fef632d91cdac07d8cded6941a787
Author: Ying Huang <ying.huang@cohesity.com>
Date: Sat Dec 10 22:47:59 2022 -0800
add lock to protect the queue in multi-thread scenarios.
commit 79216fa51eaccf5ed0fe6b460cc00ca9f43ff9f2
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 9 16:27:40 2022 -0800
update readme file to add introduction about CohesityQueueName.
commit 3684302ebd5cd47a4df31adcef34f984182eacf6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 9 16:07:24 2022 -0800
moving the try catch logic up.
Add FixedDelayRetry for QueueTrigger.
commit 2bb8bdb2dff613feaf76bf76c91b124ad40aec29
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 9 09:46:22 2022 -0600
Update Solution_CohesitySecurity.json
Changed per Microsoft review
commit 2e4cd092da35eac529ad40cf13965891bcd23e7a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 9 09:40:25 2022 -0600
Update SolutionMetadata.json
Changed per Microsoft code review
commit 4f9275a6c72fb1a3c43e954187aa78b03ef7933e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:30:33 2022 -0600
Update readme.md
Adding a testing step
commit 0e6eef68994005f3910d9ea1f19316568ed605f4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:22:54 2022 -0600
Update readme.md
Added more testing instructions
commit 868e8aff161f4545303844273885bfaf80f1f850
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:17:29 2022 -0600
Update SolutionMetadata.json
Formatting changes
commit 2681e4e2104e1b3bb9fdcc2a306396402a55c2a5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:16:47 2022 -0600
Update SolutionMetadata.json
Expanding categories and updating support info
commit 456cde77cf36f57505d799ae641e4b0860801837
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:11:55 2022 -0600
Update readme.md
Polished text
commit e7596e2376153ff6a5a9e304f78d7ef44b6566a0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 19:51:46 2022 -0600
Update Solution_CohesitySecurity.json
Added product description
commit 3b0d6cae138980f4c2b0689e743a14729ce8f5cd
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 8 17:49:44 2022 -0800
obfuscate the CohesityQueueName
multi-thread improve ParseAlertToQueue function
commit 6a010359f4fc1bf4452b0ad82f473bb89115e4e2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 17:34:47 2022 -0600
Create readme.md
Final version
commit f062e826cc2f7aad7c71303f74b5343c6b7ba0de
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 16:39:52 2022 -0600
Update readme.md
Fixed typos
commit 16dd47d262e6e8af7bd0154049f6516be88ecf03
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 16:32:18 2022 -0600
Update readme.md
Complete version
commit 1cc3573c4652b5b37fcbcd390d60290d83390991
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 13:45:14 2022 -0600
Update readme.md
Typo
commit 882e06b81c24a3f066362e25d163c03727476f8b
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 13:09:45 2022 -0600
Create readme.md
Initial commit
commit a3604698a1cbadefb5c4eab32160ef378bb93eb6
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:55:06 2022 -0600
Create readme.md
Initial version
commit a3691ffe3cd4c566dc7ff19fbf25890367e4c893
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:27:32 2022 -0600
Update readme.md
Removed unnecessary parameter
commit b54d3775058650cfdcd55b5f53b32eb183e1a4cc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:26:47 2022 -0600
Update readme.md
Formatting changes
commit 7a1d5c44c6b3928a8c19d09b29516f4bd9e03c3f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:22:17 2022 -0600
Update readme.md
Corrected typos
commit beba853c334afcc41c41b9cba573a0017114054f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:05:11 2022 -0600
Update readme.md
Corrected the URI
commit f57caf6c0e43e3c367c756e53c686919bdb33a31
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:03:07 2022 -0600
Update readme.md
Initial version
commit e6456173f4d0cde1d28279c995fca17f4210764e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:45:53 2022 -0600
Update readme.md
Added formatting
commit 776e8f5f9f77360dc5944bb0ea42683e66244c57
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:45:12 2022 -0600
Update readme.md
Completed the description
commit 9f32298f3f806649e3f7e892ba3b8d38f163d9bb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:12:00 2022 -0600
Update readme.md
Initial version
commit 124d09ab973d57965a14011be1acd5d05feeedef
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 10:57:08 2022 -0600
Update readme.md
Added word Cohesity to the playbook name
commit 72ffa6e79eb3f3bee7b6603bc576222d59701120
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:55:55 2022 -0600
Update readme.md
Formatting changes
commit 63d91a5d6a0351db688cf5442d39c78dcaf76440
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:48:38 2022 -0600
Update readme.md
Updated ARM template
commit 9778263e071c5813200c46f27fffaebfbcefbd08
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:37:38 2022 -0600
Update readme.md
Trying new URI format
commit 30630efe42cf7ef46f5af74d7042c5db5f851389
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:30:39 2022 -0600
Update readme.md
Changed URI again
commit 0622eba625495e163e2b36a249a550728100ab42
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:29:04 2022 -0600
Update readme.md
Changed URI for ARM template
commit 6b33b2525f6df624af25f80762463876ddfdd5d5
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 7 17:15:05 2022 -0800
obfuscate the values in local.settings.json files.
rename cohesity.config to cohesity.json, and update the build.ps1, readme.md.
The github/codeql-action/autobuild keeps failing, but DataConnectors/CohesitySecurity/Helios2Sentinel build succeeded, as shown in following log.
thus will disable the autobuild work flow.
=============================
MSBuild version 17.4.0+18d5aef85 for .NET
Determining projects to restore...
Restored /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj (in 241 ms).
Restored /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj (in 241 ms).
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.cs(65,34): warning CS1998: This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread. [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj]
IncidentProducer -> /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/bin/Debug/net6.0/Helios2Sentinel.dll
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(30,32): warning CS0618: 'AuthenticationContext.AcquireTokenAsync(string, ClientCredential)' is obsolete: 'Microsoft.IdentityModel.Clients.ActiveDirectory is deprecated and replaced with Microsoft.Identity.Client. To migrate a daemon application, or service to service flow, see https://aka.ms/adal-to-msal-net/daemon' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(39,51): warning SYSLIB0014: 'WebRequest.Create(Uri)' is obsolete: 'WebRequest, HttpWebRequest, ServicePoint, and WebClient are obsolete. Use HttpClient instead.' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
IncidentConsumer -> /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/bin/Debug/net6.0/IncidentConsumer.dll
Build succeeded.
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.cs(65,34): warning CS1998: This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread. [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(30,32): warning CS0618: 'AuthenticationContext.AcquireTokenAsync(string, ClientCredential)' is obsolete: 'Microsoft.IdentityModel.Clients.ActiveDirectory is deprecated and replaced with Microsoft.Identity.Client. To migrate a daemon application, or service to service flow, see https://aka.ms/adal-to-msal-net/daemon' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(39,51): warning SYSLIB0014: 'WebRequest.Create(Uri)' is obsolete: 'WebRequest, HttpWebRequest, ServicePoint, and WebClient are obsolete. Use HttpClient instead.' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
3 Warning(s)
0 Error(s)
Time Elapsed 00:00:03.65
commit 48a92fa01538c5f9682cf85ec863fee7034db2bc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:56:38 2022 -0600
Update readme.md
commit fff7b50eef941fc31baaf0132fabc2a5c8be4580
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:55:03 2022 -0600
Update readme.md
URI test
commit d9e31f7740e6848b76bb8fb52b23aea4d447717d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:53:17 2022 -0600
Update readme.md
Another link test
commit d2c11aa620bfc8f677de973a4781997349e9573c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:49:15 2022 -0600
Update readme.md
Another URI test
commit 4af3e3078bc46faae5f25ae60db23add4dc64f1e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:48:19 2022 -0600
Update readme.md
Trying different link
commit 3137eb24dbd9c65b11d9893f15b749bfacebc503
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:40:02 2022 -0600
Update readme.md
Changed URI
commit 2483ea6d37e3073fd9af84ece13a9bfacf0efa0b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 7 13:31:11 2022 -0800
--- ./Solutions/CohesitySecurity/Analytic Rules/RansomwareAlert.yaml
--- ./Solutions/CohesitySecurity/Data Connectors/helios_connector.json
+++ ./Solutions/CohesitySecurity/Package/createUiDefinition.json
+++ ./Solutions/CohesitySecurity/Package/mainTemplate.json
update the build script.
commit fefdf8cfd2bedde33c8f9e866653cee2a2fd5ee0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:25:13 2022 -0600
Update readme.md
Testing ARM
commit 19ec494e83bb4ddbf7f987e89d90597282fdf247
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:18:22 2022 -0600
Update readme.md
Corrected playbook description
commit 59cd9b5250fb8fe40cf8cba981f426562aadcd90
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:04:28 2022 -0600
Update readme.md
Added TBD for package directory
commit 66bdab4f47ce3a10b3f9520c8a8a5302a9dc3c7c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:02:15 2022 -0600
Update readme.md
Fixed typos
commit cd7ec9fd1da7147aaa9adf3bd9308a44a877ad1f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:00:08 2022 -0600
Update readme.md
Minor fixes
commit 7ba845641f2ee7eef676988e82f53c221bb4e28a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:45:22 2022 -0600
Update readme.md
Deployment steps corrections
commit e6dd9c5fce55658a1ef567f8666252421c922828
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:42:44 2022 -0600
Update readme.md
commit 29ca436444bcc5cb2da9df46790533969402d4d5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:41:33 2022 -0600
Update readme.md
Setting ref line
commit b1301e2b6ee1513f5c7d6c7fdd02f071279773fa
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:40:34 2022 -0600
Update readme.md
Fixing URL again
commit 6d7012c1b57ab0232a9963345d2b68d55b1b4639
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:39:11 2022 -0600
Update readme.md
Fixing build instructions URL
commit 098e27bbf719ed680bbbec1da5698d8fe7e4bbca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:36:40 2022 -0600
Update readme.md
Escaped URL
commit 61ea1d567270fb2c0056ed766771050165898d27
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:35:11 2022 -0600
Update readme.md
Fixed step #1
commit 0d071a0b695060caffdf0a28f00d2dae927fb5ca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:34:04 2022 -0600
Update readme.md
Typo
commit 028950c162cd7c3fbe21d3f4daeaa980da6be8ca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:33:26 2022 -0600
Update readme.md
Fixed link for the package directory
commit 15af0de66deecf90fc0d631300cd031c20174090
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:31:25 2022 -0600
Update readme.md
Added references to other deployment instructions
commit f7e5af2070474d57a0233b238a864e3c37d422dc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 11:30:56 2022 -0600
Update readme.md
First draft of deployment instructions
commit b83e93aea069b80ff535acaa69149e37f900e3da
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:29:02 2022 -0600
Update readme.md
commit 372ae3e17ed3e21ec5958a6619071d1a9db96564
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:26:25 2022 -0600
Update readme.md
commit e6b15a5793fe2736c42293c3d2d3d7d8af140cd9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:18:30 2022 -0600
Update readme.md
Updated link to Azure deployment
commit 3447201611a96ce8b4989483c385877b798016a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 18:56:16 2022 -0600
Update readme.md
Added link to the playbook template
commit 36c776fd5b20c27ab9b6668c4c12d3ff89621de5
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 2 15:54:33 2022 -0800
Just initialize this new branch for Cohesity internal collaboration/review.
v-dvedak
pushed a commit
that referenced
this pull request
Apr 10, 2023
commit 0a6733e1fb59bc5ce282d1a84ad3f0a3b71c222c
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Mar 31 12:25:10 2023 -0700
Remove print statement from assert to avoid CodeQL warning
commit e5995670acbecd5d0adc0b9e525c8f2756bbe8fc
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Mar 31 10:49:21 2023 -0700
Remove solution generator and fix CodeQL warnings
commit 08d0d91679afc18c2b9c55e84defacc217a02d88
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Wed Mar 29 13:35:44 2023 -0700
Automation test (#13)
* add test cases, to do match up test between sentinel and helios.
* hide/remove this file
* some small changes according to review feedback.
* add Test for theCohesity_Restore_From_Last_Snapshot playbook
some other minor changes.
* post resolve some merge conflicts.
* add some comments.
* small update according to feedback.
* small changes according to review feedback.
* add def get_latest_playbook_run, and only use it to test playbooks.
* add back some old changes.
and small changes according to review feedback.
* add back some old changes.
and small changes according to review feedback.
* small changes according to review feedback.
* move the poll of status and assert codes inside playbook_run function.
* add timeout to the get_latest_playbook_run loop.
commit 563e1682ef7b71807d7b3a0ce8552aeac0ad847f
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Mar 23 13:26:03 2023 -0700
add Test for theCohesity_Restore_From_Last_Snapshot playbook (#11)
* add Test for theCohesity_Restore_From_Last_Snapshot playbook
some other minor changes.
* post resolve some merge conflicts.
* add some comments.
* small update according to feedback.
* small changes according to review feedback.
commit d1abd5a563fe5c77f3f841ce43df26a40d5bf140
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Tue Mar 21 11:52:08 2023 -0700
just use following command (#12)
"find Solutions/CohesitySecurity -type f -iname \*.py -exec black -l 79 {} \;"
to format our py codes.
commit be8f4de7ec206967f8e31bde9cf94156fbcd2988
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Wed Mar 15 13:52:05 2023 -0700
Automation test (#10)
* add test cases, to do match up test between sentinel and helios.
* hide/remove this file
* some small changes according to review feedback.
* add these files to parse alert.json
+++ ./Solutions/CohesitySecurity/Tests/Alert.py
+++ ./Solutions/CohesitySecurity/Tests/Alert.test.py
some other small changes.
* add/update comments in codes.
change from apiKey to api_key
* small changes based on review feedback.
add/update comments.
* rename files.
add comments, small changes according to review feedback.
* add this renamed file.
* remove old file
* add the new renamed file.
* small changes.
* fix the indent issue.
* small changes based on feedback.
* split the long lines.
some renames
+++ ./Solutions/CohesitySecurity/Tests/helios.test.py
* move recover.json inside Data folder.
add comments.
* update the variables to be snake case.
commit 2fbfbbbc09dab94d0418561d75bd72f7517030df
Author: Kishan Nerella <11820638+kishannerella@users.noreply.github.com>
Date: Wed Mar 15 12:27:05 2023 -0700
Fetch alerts in a large interval and cache them to avoid missing them (#9)
Fetch alerts in a large interval and cache them to avoid missing them
Helios can insert alerts because of which Producer may miss alerts
because Producer only fetches alerts in the last 5 minutes. This
period is now increased to 24 hours and a blob is used to store
the previous alert ID to avoid pushing duplicate alerts in to the
queue.
commit b8c1e29d2560049820487b417bd174427bb0edc7
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Wed Mar 8 13:43:11 2023 -0800
add test cases, to do match up test between sentinel and helios. (#8)
Add test: Match up test between Sentinel and Helios.
commit 4b2bc0cc248f326e62aebd132626b44e15cbacb6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Mar 1 17:23:17 2023 -0800
add this file, for further customization.
+++ ./Solutions/CohesitySecurity/Tools/createSolutionV2.ps1
commit 9cba831803a72179ac0f6ce71af90127e686bbc0
Merge: 40ad85f0e a75b98838
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Mar 1 12:58:40 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 40ad85f0e1968d380d28115bca8c7ff592f76b75
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Feb 24 16:50:48 2023 -0800
Added status to the incident to allow Welcome incident creation
- Fixed startDaysAgo parameter usage in function azuredeploy.json
- Replace ApiKey in blob key to a static value.
- Removed ApiKey references in the logs.
- Changed the status of the incidient to "New" always as we only
query for kOpen alerts.
- Refactored the code to have incident creation at a single place.
commit ab333b79b112e47d9d44834762c97f2b8acad934
Merge: 878871468 3af5f111d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Feb 28 13:58:11 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 878871468e45b65faed668b606025987dd2659f5
Merge: 9a961ab2a 4ed65ef71
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 27 16:27:00 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 9a961ab2ac3d0a4d5cd7dfa117c98a70373e53ce
Merge: 38a0bbd01 4e53f5de0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Feb 24 10:45:17 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 38a0bbd0113ba0b42d18a87faa9bce7fe31779e4
Merge: b768cab7f ed943622b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 23 11:16:06 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit b768cab7f3636d8ab9bcc103afea7062bcaeecdc
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 22 18:25:53 2023 -0800
Fix the required permissions and role for the Azure AD app
commit 474253f2bf90fb2be70de63f48fa22579028610c
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 21 11:49:26 2023 -0800
Regenerate package with v2 solution creator and updated partner info
commit 44e2f1b7921cccbe0ca1cabb52df3e45b3d0d82b
Merge: 12ec703ac 284f45dc7
Author: Ying Huang <ying.huang@cohesity.com>
Date: Sun Feb 19 22:49:30 2023 -0800
Merge remote-tracking branch 'origin/master' into CohesitySecurity.internal
commit 12ec703acecd71fe81a218dc0de0ea293f04907b
Merge: 4243ee149 3d8a1cbdd
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 16 16:08:39 2023 -0800
Merge pull request #5 from cohesity/audo_deployment
fix to the serverfarms Conflict issue.
commit 4243ee1498650ae062034f5b04a267e906c0dd20
Merge: dcd835bd2 5127b80fd
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 16 16:08:04 2023 -0800
Merge pull request #6 from cohesity/build
update the build related stuff.
commit 5127b80fdeae73342ce5c74e98499fb358137454
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 16 14:55:44 2023 -0800
add this file, but which still not working yet.
./Solutions/CohesitySecurity/Package/mainTemplate.json.sh
update the build script.
commit b4b7dcce8c80a788b36e2560eed301a479dc0884
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Feb 16 11:19:41 2023 -0800
update the build related stuff.
small change to metadata.
commit 3d8a1cbdd19cea118e497b00802855b75705f1d0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Feb 15 11:03:21 2023 -0800
fix to the serverfarms Conflict issue.
small update to the deployment script.
commit dcd835bd2a13b8dcd336985560c6503fffbd6811
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:58:34 2023 -0800
Re-create package with version 2.0 and updated URLs
commit 26b81b758dedaecd41a179197dfc8ec0f28c7cde
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:54:10 2023 -0800
Replace github URL to Azure from Cohesity
commit 2f3e379183d7caf1c71f6d5fb4e0ccb6071427a4
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Feb 10 13:16:52 2023 -0800
Remove manual deployment option, change version and URLs
commit 3eb7ffc7aae1590043f4cea4f8e72ceffa57aee9
Author: yinghuang123 <115043385+yinghuang123@users.noreply.github.com>
Date: Thu Feb 9 11:13:27 2023 -0800
Zip (#4)
Add producer and consumer packaging scripts
commit 724bd4b85ed9acc1caf564466b074a53a69fd546
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 16:55:25 2023 -0800
Renamed function app package name and location
commit 8a2a67073b318300cec969d745eeaba9dee41179
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 14:02:55 2023 -0800
Add logo to solution
Also, fix manual deployment steps in Cohesity_API_FunctionApp.json.
Updated connector description in createUiTemplate.json and re-created
package.
commit 03d5b8d68aaaabf2db88407347e390620b6a7983
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Feb 8 13:11:54 2023 -0800
Add Cohesity logo
commit c79d25164adc86a467e5d3e187c9c7e8e38842af
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 18:13:10 2023 -0800
Create package using v2 solution creator
Also, moved the Solution file into 'Data' folder as it looks like that's
the standard.
commit e3d0f772cdac49f08a09913f9d36527ed5db65f5
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 17:29:53 2023 -0800
Change post deployment field in email to an array of values
Also, add periods at the end of descriptions in all the playbooks.
commit e8053f8b1c9fef0f0834cf37f3f00bbf25a939f9
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Tue Feb 7 15:55:32 2023 -0800
Add Cohesity in the title of playbooks and update readme accordingly
commit da51a755a27cb4415b6c1efc30d69e730791ed55
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Feb 6 20:45:28 2023 -0800
Created package files with the new playbook
Also, fixed readme to add the new playbook and some corrections.
commit e94659171063a83ca891ebc138e612969d0934a9
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Feb 6 13:41:13 2023 -0800
Remove empty parameter from playbook as package validation fails
commit 6c52f04bf8c1a87b4e504abcce115237e61b5220
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Feb 6 19:27:57 2023 -0600
Update readme.md
Removed an extra dot
commit 7af5db70561fc2c1e7b1d74947e161aec7c10a1f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 6 10:00:51 2023 -0800
update/add some auto deploy related scripts.
commit b5ffb7134481589da0beb3746d77fba1ce1843f8
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Feb 6 09:52:36 2023 -0800
beautify this json file
commit d00210396cb89f45cea45d47ecc4836c99f409f7
Author: Kishan Nerella <kishannerella@gmail.com>
Date: Fri Feb 3 19:26:15 2023 -0800
Fix package download links and producer timer trigger
Also, changed the function app packaging by removing top-level directory.
commit 1a953226cf64afc0b238406e3e94fb1580b0f443
Author: Kishan Nerella <kishannerella@MacBook-Pro.local>
Date: Fri Feb 3 12:51:48 2023 -0800
Add function runtime config and deployment url
commit 8bfc80e4cd58c377e343a8e307d9a2a34f3a320a
Author: Kishan Nerella <kishannerella@MacBook-Pro.local>
Date: Fri Feb 3 12:13:42 2023 -0800
Create producer and consumer packages for deployment
commit f45527acc1c89998eee11aa421377a14ea4ec956
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Feb 2 20:02:00 2023 -0800
Fix readme language
commit eaf972c5170288be0e5c1ba43cf41d60969628c6
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Feb 2 19:55:37 2023 -0800
Fix links in readme files
commit 7dbcd360ce6c3b40bad1de6095f6d355a9a31e61
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Feb 2 12:55:57 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed a wrong reference
commit 85f916b3d50bf24fb02b675b25b21308392cd5d7
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 31 17:33:10 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed locale from the link
commit bd24164805c493d20199db1faae38a14f043ea7f
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Mon Jan 30 17:22:41 2023 -0800
Fix delete blob deployment URL and tags
commit e6cab0c1135ab753775722083049f1eae7f2a37f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:40:38 2023 -0800
add back folders with name begining in upper case.
commit 9bca6381b287585e4e448e6b7680e5a2f0aed918
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:38:42 2023 -0800
delete those old folders with name begining in lower case.
commit 38e30732c96e418b7394b01bbd0dcb00b3a5d99a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:37:04 2023 -0800
uniform data input.
rename folders to upper case prefix.
add more test cases.
commit 62429c630ae109a775026251829dd6652d7fe178
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Jan 30 16:33:05 2023 -0800
uniform data input.
rename folders to upper case prefix.
add more test cases.
commit 4a0baa24f13e0ad52c6fac91449040c819de3cfb
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Fri Jan 27 21:02:12 2023 -0800
Add delete incident blobs playbook
commit aca0d06a5022aac01e0e713bf8e57a04d76f5821
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 27 17:44:19 2023 -0800
add one new exported playbook, need to later add description, name, author, etc.
add cohesity tool to export playbook.
commit 79bb3a1fbe8fba031ffda0c3b75e6108c9d02d5e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 27 17:25:10 2023 -0600
Update Cohesity_API_FunctionApp.json
Removed unnecessary coma
commit 331342e06349501d5aba8a9e3e1d17a0c8ff0e88
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Sat Jan 28 02:17:57 2023 +0530
Reviewed doc
Reviewed for style and language
commit f5ce722a37566212ed90ff7562012f0deb702e7a
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Sat Jan 28 02:12:12 2023 +0530
Reviewed the doc
Reviewed for style and language
commit 047a772779550a5edc30428c1df004b3b0abcaf5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Jan 26 17:51:02 2023 -0600
Create Cohesity_API_FunctionApp.json
First version of data connector file
commit aee525ee71b1995bc7087d6b091c0e1f36ad87ce
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Jan 26 17:38:11 2023 -0600
Update readme.md
Typo
commit 011848f908fd9ce07a261a864ba8ac9e969f1df0
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Thu Jan 26 15:13:52 2023 -0800
Remove pre-requisited from CloseHeliosIncident and Restore playbooks
commit 65180bee333f86de2c4fd14d7cef5e45a26704b3
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 25 17:20:47 2023 -0800
add test case for playbook: Cohesity_Close_Helios_Incident.
commit 9e22aacb3c7372ca7be444bc3ac53e4af9c7ca73
Author: Kishan Nerella <kishan.nerella@cohesity.com>
Date: Wed Jan 25 14:47:31 2023 -0800
Add user role related info to playbook readme files
commit dea9ed121034fec3f6c27bfc03fe6d45a98945a6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 24 17:14:06 2023 -0800
a decent fix for the dup issue by Eugene.
commit 66c1136590967efb139aa2e3fd7debe72fbf3933
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 24 13:42:41 2023 -0800
a temporary fix for the duplicate incident issue.
will try to add some automation tests to verify:
1: has incidents generated.
2: no duplicate
and then find a decent fix.
commit 3338fe0c4dc77c30ccf7780fd526e997683606a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 24 15:11:50 2023 -0600
Update azuredeploy.json
Added link to the prerequisite details
commit e563f5ff1eb065d58e63533d4afb40c5f0e4f9ce
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 24 15:09:26 2023 -0600
Update azuredeploy.json
Added link to prerequisite details
commit 956a4e44371144b22925009b02a5a009db5c4797
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 03:06:04 2023 +0530
Doc review
Reviewed doc for language and style
commit 9c6e3cffbc659023a2456125d83f0161451ac9a1
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 02:58:14 2023 +0530
Doc review
Reviewed for language and style
commit dc847550980ac19f14c9d1f348443ca5e57c5a86
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Mon Jan 23 02:46:15 2023 +0530
Doc Review
Reviewed for language and style
commit 2069d81a441a25775bf8c38ca0a2241676f87b3d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 20 11:06:13 2023 -0800
clean the codes.
commit edc60d45ab75373d1c771f550616602e92791ede
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 20 10:26:19 2023 -0800
add feature: TestAlertToQueue
commit 28efdb81d136e80fa0ad2f79e4cdd7b8d61ca56b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 19 15:46:24 2023 -0800
clean some codes.
commit eb86fbf97d28026c9ad96d243b1b4fe2b41af556
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 19 14:05:22 2023 -0800
Fix some warning, retire some obsolete codes.
commit fe35840043aadbe44b3f21b63ff248cf1be3967a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 18 17:08:17 2023 -0800
fix some compilation warnings.
commit 8fae6744b2f67494fbe4619ffeff8d62973dbf24
Author: rohit2230 <121071301+rohit2230@users.noreply.github.com>
Date: Wed Jan 18 16:04:32 2023 +0530
Reviews
Edited content for style and grammar
commit 2bec432bd4a047bdc994c8c7ebe2c8e239fc1c4e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:33:30 2023 -0600
Update azuredeploy.json
Updated metadata
commit c97b56befe48ec5804bc738a843b4385869fd10e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:29:18 2023 -0600
Update azuredeploy.json
Fixed quotes
commit c3b07a1ed51fa810ebf3c3d4cc5b9d714cf438fc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:25:09 2023 -0600
Update azuredeploy.json
Fixed typo
commit 04289abf2cb4926da8c705b6bd9b6911ca73587d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 13 17:23:34 2023 -0600
Update azuredeploy.json
Added metadata
commit 8e139c0072c79557fb3f14b2ba9f59befc8cfeb9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 11 10:27:54 2023 -0800
update text from 'Azure Sentinel' to 'Microsoft Sentinel'
commit 94270ea0f0bb549f6a963ea40ebc7107f9e38f21
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 10 15:21:44 2023 -0800
remove BlobStorageConnectionString for duplication.
remove a dup try catch.
commit 199f5a140dd318095a1d2eaf7188a331da1258e3
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 10 11:07:38 2023 -0800
update the Function Apps to use env instead of secret for variables.
fix some properties in azuredeploy.json.
commit 7bb4f9341f949369c05ff44e38253f69d283bb2a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 17:51:04 2023 -0800
small fix in script.
commit d43cfccf320eca66bbb8f94eac77198dbaf04434
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 14:25:35 2023 -0800
update deploy scripts.
commit 05f45be3853adde4bf9f82d68c6c654615f3ad85
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:11:45 2023 -0600
Update readme.md
Fixed a typo
commit 6155c4e0f7fdee7afdbcdfe72dccd08bad8d9c5a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:08:20 2023 -0600
Update readme.md
Updated the instructions to reflect the new deployment script
commit 98347394d8af51d997359c310f5e7335392c8680
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 15:07:16 2023 -0600
Update readme.md
Updated the instructions to reflect new deployment steps
commit 607b64f197fb8a914165f6482c954232409e93fb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 13:49:24 2023 -0600
Update readme.md
Fixed a typo
commit db7be2ab9188b4d6d2a9e1cc960321a71d921d8e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 13:44:56 2023 -0600
Update readme.md
Polished language
commit 8371bf109edb915a78307e4f35af74891e614ae6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Jan 6 10:45:15 2023 -0800
update azuredeploy to host on windows OS.
add deployment related scripts.
update the readme file.
commit bc64f554f27e8a32558b5b66ab455294ee8e620a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Jan 6 11:38:53 2023 -0600
Update readme.md
Updated publishing instructions
commit de74f40e18f9c890f66f516d4463c1cb14e07a97
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Jan 5 14:21:11 2023 -0800
change to windows host to workaround the AzureWebJobsStorage error issue.
commit 5a1daf5b3cc1eb7637c2b9213de051769b2d96c9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 4 15:57:42 2023 -0800
small fix in azuredeploy.json
commit d9cdca1acb1c2fc26b335bac98d6747371413cf4
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Jan 4 15:54:46 2023 -0800
add DefaultEndpointsProtocol to azuredeploy.json
commit 688ca03cb660a3a855913cdcb9313ba5fdf2b8cb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Jan 4 15:58:33 2023 -0600
Update readme.md
Updated pre-requisites and troubleshooting steps
commit a286f9c06418c619d1f9b1ca9938e965d4ec4ea5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Jan 4 15:42:56 2023 -0600
Update readme.md
Updated prerequisites and troubleshooting details per MS code review
commit 208d1f3d73001fdfd3bef7ea4d99453063b7175d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 3 17:49:26 2023 -0800
beautify this json file.
commit 92de7c93bb4df329925bd67c4809996eaf694a80
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Jan 3 17:48:57 2023 -0800
beautify this json file.
commit 02bb9f3da89e7da8cf634dae5bae5a8732c29bb9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 17:07:12 2023 -0600
Update readme.md
Updated deployment instructions to reflect that keyvault is now a managed connection
commit 9386f5c8fc2636af920c2d91a5d9d66517de8f56
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 16:56:46 2023 -0600
Update azuredeploy.json
Fixed container name
commit 748937fe2035ba8877006141da6985367e8081a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 16:09:35 2023 -0600
Update readme.md
Updated instructions to reflect the new deployment steps
commit 3fdcfd398ba5ec273b2669a3ff2a6941cbce54a9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 15:45:13 2023 -0600
Update azuredeploy.json
Made KeyVault managed connection with the predefined Keyvault name
commit 0d4a8fabf9fab804d49ae6f6b4fb10e2f05d785c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Jan 3 10:43:18 2023 -0600
Update azuredeploy.json
Added Keyvaultname as a connection parameter
commit 52a92c57ab077249e7e32aa251476f85abecdea9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 23 15:55:50 2022 -0800
update the managedApis.
commit 3b671431946ffee40a95c5d6ae917074e3d1e872
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:33:47 2022 -0600
Update azuredeploy.json
Removed managed identity from Blob
commit 978af21d84fc4fc462e3b4dcdb7634e0717b5045
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:30:04 2022 -0600
Update azuredeploy.json
Testing managed connection with Azure Blob
commit 4d3b80361763c3202234a349512ad55e2670e57a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:23:47 2022 -0600
Delete incident_producer_azuredeploy.json
Deleted file that I created for test purposes
commit be1f06e1b8733d353481c844b7dff7b3de9117ad
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:19:39 2022 -0600
Update azuredeploy.json
Changed prerequisites
commit cce48babe94de2598891538f1196b629a903e5d8
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:15:25 2022 -0600
Update azuredeploy.json
Added metadata to the deployment wizard
commit c59d740aff4b104504ea999d2b507717ccd4fc4e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:11:59 2022 -0600
Update readme.md
Changed deployment instructions
commit 7b4cb687b11173032a761d652a00767d2d55b084
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 14:10:33 2022 -0600
Update readme.md
Fixed a typo
commit 0a0604e23d21ab691e4cebdfc6af6b326531c1ef
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 13:27:00 2022 -0600
Update readme.md
Added info about authorization
commit a91e642e9288513681a42816e35e0892c0c44a56
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 23 11:26:54 2022 -0800
some small change according to the comments.
commit 57f27beb00a17d25118bb29ecbde2de7420db714
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 13:19:42 2022 -0600
Update azuredeploy.json
Removed managed identity from Outlook
commit d84dfd4e1fd67560cc55edaf294817f0e540557f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 11:03:10 2022 -0600
Update azuredeploy.json
Fixed a typo (",")
commit eb38749daf730775b6b5b3c2105476a5961aed70
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 11:00:35 2022 -0600
Update azuredeploy.json
Added metadata and made Outlook connection type ManagedServiceIdentity
commit 3b526dedd207d181db5beea74a4bc3f8dc5f4868
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:51:55 2022 -0600
Update readme.md
Updated with consideration of a new ARM template for Azure function config deployment
commit 2b7fa46d117f0f0777d25f6376c1c877165df3eb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:25:38 2022 -0600
Update azuredeploy.json
Fixed type ","
commit 6bd4f29dd61e4eff16a4feeeca0e974e041d89d3
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:24:16 2022 -0600
Update azuredeploy.json
Added metadata
commit d993c87642efb1cef144bfeb41c497531b2e27a1
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 10:18:03 2022 -0600
Update azuredeploy.json
Updated metadata
commit 4fd3aaf0bc9f15c5536fe27644b21a823a7300b4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 23 09:44:48 2022 -0600
Delete func_azuredeploy.json
This is a temporary file that was created by mistake.
commit 4c32629bca96318c4fe8f731d78d3709d3c3f836
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:56:10 2022 -0800
update the csproj files
commit 3d1e443984cd2e917a9208d28fa8df4c6d9c4830
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:51:36 2022 -0800
update the csproj files.
commit 1bb53f3db70f5c86abaf14f4e56d8337dd266344
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 22 14:49:02 2022 -0800
change to read from key vault intead of env.
commit e89a55ae22ae9b0ad48033fd0cc2c99dea78cbd4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 22 14:09:01 2022 -0600
Update readme.md
Added button to deploy the functions to Azure.
commit d3ef3bd69760acbd0febb547cc76eb5323cc5877
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 22 14:03:17 2022 -0600
Create azuredeploy.json
ARM template for deploying both Azure functions.
commit 979c7d3c7d29d8a69891808d61cb3719bf8cefe2
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 21 19:38:28 2022 -0800
retire redis in IncidentProducer
add Anomaly Strength in description
re-organize the codes
commit ac0ae888d48f2032827ec5a2a577f93c008fd0d0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 19:33:30 2022 -0600
Update readme.md
Returned the reference to the Restore playbook
commit 8f0536ea15bb5de6373024e412f3f78658b96e9d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 17:23:58 2022 -0800
update the readme files.
commit 2c7eb694bc41153566f22b51115490b5551d6fc1
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 17:01:30 2022 -0800
update these 2 package files.
+++ ./Solutions/CohesitySecurity/Package/createUiDefinition.json
+++ ./Solutions/CohesitySecurity/Package/mainTemplate.json
commit 4520fcb7fdbe7c1f8d2619ba314a7a00a9137bfb
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 20 16:49:04 2022 -0800
update these 2 Playbooks:
./Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json
./Solutions/CohesitySecurity/Playbooks/Cohesity_CreateOrUpdate_ServiceNow_Incident/azuredeploy.json
commit e13cc5a80f376d76c6df8f49c788f00e21510657
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 17:27:36 2022 -0600
Create incident_producer_azuredeploy.json
Initial version of the IncidentProducer Function App
commit 0d2c1d1b534a844607149b46e8ac8f7c38310825
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 15:44:46 2022 -0600
Create func_azuredeploy.json
Test Azure func deploy
commit db241debae8d5d4f226dcca6e4f0eda712721ae3
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 13:10:35 2022 -0600
Update readme.md
Added instructions about connection authorization
commit 7b950bcce0745708ff4b62c36a04599801e34ceb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 13:06:47 2022 -0600
Update readme.md
Added connection authorization instructions
commit 4e38c1cca6336d3b9c97039a7cda9e8e2c122f72
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:48:49 2022 -0600
Update readme.md
Fixed broken links
commit c454187a07654d6a293f57641b6d33db0367e6c7
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:42:53 2022 -0600
Update readme.md
Fixed broken links
commit 138ce8147da4d339633afdaa46a6cc0401920959
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:36:24 2022 -0600
Update readme.md
Fixed broken links
commit d9a069e6c948698b735acd441af5c91426460388
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:27:31 2022 -0600
Update readme.md
Typo.
commit 6b73ea2794d07fe2e635e3526212d9c94c8b8099
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:27:13 2022 -0600
Update readme.md
Add info about skipping steps if the API key is already stored in the vault.
commit 829395b3aea5d420622c4fea04906836be74d1e1
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 10:22:41 2022 -0600
Update readme.md
- Added info about creating an automation trigger for closing SNOW tickets
commit 0249a4383ae9053cc29b4b5140d139ed63d1956f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 09:57:33 2022 -0600
Update readme.md
- Replaced Helios with DataHawk + a few other formatting changes.
commit 617395e1914de1dcf5224be2abbedb79683dc763
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 20 09:50:57 2022 -0600
Update readme.md
- Fixed broken links
- Added info about the Cohesity Close Helios Incident playbook
- Did some formatting
commit c371a4644d05843114675cfae6b0521041be3e95
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 21:43:53 2022 -0800
+ "Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json",
commit 5b8a57d500862899b03cd847ce03d7b377b6a9ee
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 22:00:52 2022 -0600
Update readme.md
Added specific name for the playbook
commit d48f6f273414fa4b135e3724c47568f708f3aac2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 21:59:47 2022 -0600
Update readme.md
Added specific name for the vault
commit 864b714422baa0eceb005751604b691f7e16c59e
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:21:06 2022 -0800
+++ b/Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/azuredeploy.json
+++ b/Solutions/CohesitySecurity/Playbooks/Cohesity_Close_Helios_Incident/readme.md
commit fffc00bd40a4b743a29a4e905c11343e7c7d02de
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:13:15 2022 -0800
fix the extra "\" in readme files.
commit 4923932eb14f14623a148fe86145dbf86c8812af
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 18:04:32 2022 -0800
rename from "Solutions/CohesitySecurity/Data\\ Connectors/
rename to Solutions/CohesitySecurity/Data Connectors/
commit ef5279c6eb7d2b1b1940e9cb48eb783602737c11
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 19:47:16 2022 -0600
Update readme.md
Typo
commit 94e4bdfe643acb573a1c2c771ce62086d475acd7
Merge: 2e21ed5ed 6d788faf0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 17:26:43 2022 -0800
Merge remote-tracking branch 'cohesity/CohesitySecurity.internal' into CohesitySecurity.internal
commit 2e21ed5edf18e34d32b618465c5d137fbc184ba9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 17:26:26 2022 -0800
rename from DataConnectors/CohesitySecurity/Helios2Sentinel
rename to "Solutions/CohesitySecurity/Data\\ Connectors/Helios2Sentinel
update to use keyvault instead of apiKey from env.
rename some playbooks.
commit 6d788faf0f448b33ac505db4a1c982a08dcd06ad
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 19:22:01 2022 -0600
Update readme.md
Updated info related to using the KeyVault to store the API Key.
commit 2eb03064da4d07aef5a2c6fac6d41143cebb9b94
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 19 16:31:57 2022 -0600
Update readme.md
Updated instructions for SNOW playbook to create automation rule for closing SNOW tickets.
commit 8295c49fd69245ececfa08b9d5877428930de713
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 19 12:13:14 2022 -0800
rename playbook from Incident_VM_Playbook to Cohesity_Restore_From_Last_Snapshot
update to read the details from blob storage.
commit 1a2df6f10c514da74300b1a2a850c4b5dfd5fb4a
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 16 10:37:58 2022 -0800
parameterize the containerName
take back the multi-thread implementation of ParseAlertToQueue
commit a3da7f4d4382060342c448a7df0e08c43e343fee
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 15 18:17:20 2022 -0800
add the vm playbook related parameters into blob storage in IncidentProducer.
commit 6899e05da662c496a412c262fca3f0f835cd7519
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 12:17:01 2022 -0600
Update readme.md
Added info and new steps for the API key
commit 0dda5f371b016fa28ec7e4f476171da9973e5c3c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:32:08 2022 -0600
Update readme.md
Updated with the info about adding the automation rule.
commit fb94db0ee57e8e1398f14590615db1de4ee42353
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:27:17 2022 -0600
Update readme.md
Added link about editing connections
commit bb844f6a6e86d8ec763ef858ae8d08b5ef37ae30
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:25:30 2022 -0600
Update readme.md
Added a step about adding SNOW credentials
commit f5efccdf5178d6e2552c0f4dde54a5528368ff1d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 15 11:12:46 2022 -0600
Update readme.md
Added steps about connection authorization
commit a7fde185bc5b3250b58b5b225642f55a6505863f
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 14 11:33:21 2022 -0800
update the Cohesity_Send_Incident_Email Playbook
commit 53ab7909287d9141ad936e60cc7f30756a80135a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 20:12:54 2022 -0600
Update readme.md
Added troubleshooting section
commit 38fae0f6ee8e8ca732dc2168ccbab610b1925f91
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 19:26:41 2022 -0600
Update azuredeploy.json
Added "My" to distinguish template from the actual playbook
commit 2c5e09ecde3e3251ba111da81fc983d794977b01
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 13 19:25:50 2022 -0600
Update readme.md
Fixed link to the Cohesity_Send_Incident_Email template
commit 542d3622af65da620038e1ab69416f990063bbcc
Author: Ying Huang <ying.huang@cohesity.com>
Date: Tue Dec 13 17:12:01 2022 -0800
further remove the locale in readme.md
rename and sync to the latest Cohesity_Send_Incident_Email Playbook
commit 5ef898ebcd7c503ee58518e8faa15b23a9a9010e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 18:36:01 2022 -0600
Update readme.md
Removed en-us locale from links
commit df0261d7ff646c304381b10595cd66d6dbf501e9
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:39:03 2022 -0800
fix typo.
commit 3cbc054f560096ff6a152ac8c4cfe6c86c993795
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:22:53 2022 -0800
update the host.json for queue policy.
commit 5c975aa3bd8045e8e913b4cf2f86dddd0035f226
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:11:29 2022 -0800
delete these 2 not in use files.
commit 34d4b4ea72e6055cbe0724b196ee87cb61bd5de0
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 14:01:47 2022 -0800
avoid recursion in catch.
move FixedDelayRetry into host.json file.
commit a5675c32eca3a8b7006585e4985403430e28a67e
Merge: e4316deb4 24fdabb0d
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:43:06 2022 -0800
Merge branch 'CohesitySecurity.internal' of ../../BareReps/workspace/Azure-Sentinel1 into CohesitySecurity.internal
commit e4316deb49a3514edbd112305ced244f37ce4aad
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:43:06 2022 -0800
fix the indent issue.
commit 24fdabb0d5ce75cb4f6c587ff4df6ccdf2331702
Author: Ying Huang <ying.huang@cohesity.com>
Date: Mon Dec 12 13:39:58 2022 -0800
n
commit 91a8b155d839783e4b3977ced1738f9916fc4edb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:19:21 2022 -0600
Update readme.md
Formatting changes
commit eba35f847f4759335c94d8776169856effe1bdf2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:18:44 2022 -0600
Update readme.md
Formatting changes
commit 4922249d7c41619c0ea86c1dd7e8bc93228b8c8b
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Mon Dec 12 10:17:32 2022 -0600
Update readme.md
Updated links to individual deployment instructions.
commit d0504d30064fef632d91cdac07d8cded6941a787
Author: Ying Huang <ying.huang@cohesity.com>
Date: Sat Dec 10 22:47:59 2022 -0800
add lock to protect the queue in multi-thread scenarios.
commit 79216fa51eaccf5ed0fe6b460cc00ca9f43ff9f2
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 9 16:27:40 2022 -0800
update readme file to add introduction about CohesityQueueName.
commit 3684302ebd5cd47a4df31adcef34f984182eacf6
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 9 16:07:24 2022 -0800
moving the try catch logic up.
Add FixedDelayRetry for QueueTrigger.
commit 2bb8bdb2dff613feaf76bf76c91b124ad40aec29
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 9 09:46:22 2022 -0600
Update Solution_CohesitySecurity.json
Changed per Microsoft review
commit 2e4cd092da35eac529ad40cf13965891bcd23e7a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Fri Dec 9 09:40:25 2022 -0600
Update SolutionMetadata.json
Changed per Microsoft code review
commit 4f9275a6c72fb1a3c43e954187aa78b03ef7933e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:30:33 2022 -0600
Update readme.md
Adding a testing step
commit 0e6eef68994005f3910d9ea1f19316568ed605f4
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:22:54 2022 -0600
Update readme.md
Added more testing instructions
commit 868e8aff161f4545303844273885bfaf80f1f850
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:17:29 2022 -0600
Update SolutionMetadata.json
Formatting changes
commit 2681e4e2104e1b3bb9fdcc2a306396402a55c2a5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:16:47 2022 -0600
Update SolutionMetadata.json
Expanding categories and updating support info
commit 456cde77cf36f57505d799ae641e4b0860801837
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 20:11:55 2022 -0600
Update readme.md
Polished text
commit e7596e2376153ff6a5a9e304f78d7ef44b6566a0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 19:51:46 2022 -0600
Update Solution_CohesitySecurity.json
Added product description
commit 3b0d6cae138980f4c2b0689e743a14729ce8f5cd
Author: Ying Huang <ying.huang@cohesity.com>
Date: Thu Dec 8 17:49:44 2022 -0800
obfuscate the CohesityQueueName
multi-thread improve ParseAlertToQueue function
commit 6a010359f4fc1bf4452b0ad82f473bb89115e4e2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 17:34:47 2022 -0600
Create readme.md
Final version
commit f062e826cc2f7aad7c71303f74b5343c6b7ba0de
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 16:39:52 2022 -0600
Update readme.md
Fixed typos
commit 16dd47d262e6e8af7bd0154049f6516be88ecf03
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 16:32:18 2022 -0600
Update readme.md
Complete version
commit 1cc3573c4652b5b37fcbcd390d60290d83390991
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 13:45:14 2022 -0600
Update readme.md
Typo
commit 882e06b81c24a3f066362e25d163c03727476f8b
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 13:09:45 2022 -0600
Create readme.md
Initial commit
commit a3604698a1cbadefb5c4eab32160ef378bb93eb6
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:55:06 2022 -0600
Create readme.md
Initial version
commit a3691ffe3cd4c566dc7ff19fbf25890367e4c893
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:27:32 2022 -0600
Update readme.md
Removed unnecessary parameter
commit b54d3775058650cfdcd55b5f53b32eb183e1a4cc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:26:47 2022 -0600
Update readme.md
Formatting changes
commit 7a1d5c44c6b3928a8c19d09b29516f4bd9e03c3f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:22:17 2022 -0600
Update readme.md
Corrected typos
commit beba853c334afcc41c41b9cba573a0017114054f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:05:11 2022 -0600
Update readme.md
Corrected the URI
commit f57caf6c0e43e3c367c756e53c686919bdb33a31
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 12:03:07 2022 -0600
Update readme.md
Initial version
commit e6456173f4d0cde1d28279c995fca17f4210764e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:45:53 2022 -0600
Update readme.md
Added formatting
commit 776e8f5f9f77360dc5944bb0ea42683e66244c57
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:45:12 2022 -0600
Update readme.md
Completed the description
commit 9f32298f3f806649e3f7e892ba3b8d38f163d9bb
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 11:12:00 2022 -0600
Update readme.md
Initial version
commit 124d09ab973d57965a14011be1acd5d05feeedef
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Thu Dec 8 10:57:08 2022 -0600
Update readme.md
Added word Cohesity to the playbook name
commit 72ffa6e79eb3f3bee7b6603bc576222d59701120
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:55:55 2022 -0600
Update readme.md
Formatting changes
commit 63d91a5d6a0351db688cf5442d39c78dcaf76440
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:48:38 2022 -0600
Update readme.md
Updated ARM template
commit 9778263e071c5813200c46f27fffaebfbcefbd08
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:37:38 2022 -0600
Update readme.md
Trying new URI format
commit 30630efe42cf7ef46f5af74d7042c5db5f851389
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:30:39 2022 -0600
Update readme.md
Changed URI again
commit 0622eba625495e163e2b36a249a550728100ab42
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 19:29:04 2022 -0600
Update readme.md
Changed URI for ARM template
commit 6b33b2525f6df624af25f80762463876ddfdd5d5
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 7 17:15:05 2022 -0800
obfuscate the values in local.settings.json files.
rename cohesity.config to cohesity.json, and update the build.ps1, readme.md.
The github/codeql-action/autobuild keeps failing, but DataConnectors/CohesitySecurity/Helios2Sentinel build succeeded, as shown in following log.
thus will disable the autobuild work flow.
=============================
MSBuild version 17.4.0+18d5aef85 for .NET
Determining projects to restore...
Restored /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj (in 241 ms).
Restored /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj (in 241 ms).
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.cs(65,34): warning CS1998: This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread. [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj]
IncidentProducer -> /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/bin/Debug/net6.0/Helios2Sentinel.dll
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(30,32): warning CS0618: 'AuthenticationContext.AcquireTokenAsync(string, ClientCredential)' is obsolete: 'Microsoft.IdentityModel.Clients.ActiveDirectory is deprecated and replaced with Microsoft.Identity.Client. To migrate a daemon application, or service to service flow, see https://aka.ms/adal-to-msal-net/daemon' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(39,51): warning SYSLIB0014: 'WebRequest.Create(Uri)' is obsolete: 'WebRequest, HttpWebRequest, ServicePoint, and WebClient are obsolete. Use HttpClient instead.' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
IncidentConsumer -> /Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/bin/Debug/net6.0/IncidentConsumer.dll
Build succeeded.
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.cs(65,34): warning CS1998: This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread. [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentProducer/IncidentProducer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(30,32): warning CS0618: 'AuthenticationContext.AcquireTokenAsync(string, ClientCredential)' is obsolete: 'Microsoft.IdentityModel.Clients.ActiveDirectory is deprecated and replaced with Microsoft.Identity.Client. To migrate a daemon application, or service to service flow, see https://aka.ms/adal-to-msal-net/daemon' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.cs(39,51): warning SYSLIB0014: 'WebRequest.Create(Uri)' is obsolete: 'WebRequest, HttpWebRequest, ServicePoint, and WebClient are obsolete. Use HttpClient instead.' [/Users/ying.huang/workspace/Azure-Sentinel/DataConnectors/CohesitySecurity/Helios2Sentinel/IncidentConsumer/IncidentConsumer.csproj]
3 Warning(s)
0 Error(s)
Time Elapsed 00:00:03.65
commit 48a92fa01538c5f9682cf85ec863fee7034db2bc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:56:38 2022 -0600
Update readme.md
commit fff7b50eef941fc31baaf0132fabc2a5c8be4580
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:55:03 2022 -0600
Update readme.md
URI test
commit d9e31f7740e6848b76bb8fb52b23aea4d447717d
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:53:17 2022 -0600
Update readme.md
Another link test
commit d2c11aa620bfc8f677de973a4781997349e9573c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:49:15 2022 -0600
Update readme.md
Another URI test
commit 4af3e3078bc46faae5f25ae60db23add4dc64f1e
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:48:19 2022 -0600
Update readme.md
Trying different link
commit 3137eb24dbd9c65b11d9893f15b749bfacebc503
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:40:02 2022 -0600
Update readme.md
Changed URI
commit 2483ea6d37e3073fd9af84ece13a9bfacf0efa0b
Author: Ying Huang <ying.huang@cohesity.com>
Date: Wed Dec 7 13:31:11 2022 -0800
--- ./Solutions/CohesitySecurity/Analytic Rules/RansomwareAlert.yaml
--- ./Solutions/CohesitySecurity/Data Connectors/helios_connector.json
+++ ./Solutions/CohesitySecurity/Package/createUiDefinition.json
+++ ./Solutions/CohesitySecurity/Package/mainTemplate.json
update the build script.
commit fefdf8cfd2bedde33c8f9e866653cee2a2fd5ee0
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:25:13 2022 -0600
Update readme.md
Testing ARM
commit 19ec494e83bb4ddbf7f987e89d90597282fdf247
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:18:22 2022 -0600
Update readme.md
Corrected playbook description
commit 59cd9b5250fb8fe40cf8cba981f426562aadcd90
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:04:28 2022 -0600
Update readme.md
Added TBD for package directory
commit 66bdab4f47ce3a10b3f9520c8a8a5302a9dc3c7c
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:02:15 2022 -0600
Update readme.md
Fixed typos
commit cd7ec9fd1da7147aaa9adf3bd9308a44a877ad1f
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 15:00:08 2022 -0600
Update readme.md
Minor fixes
commit 7ba845641f2ee7eef676988e82f53c221bb4e28a
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:45:22 2022 -0600
Update readme.md
Deployment steps corrections
commit e6dd9c5fce55658a1ef567f8666252421c922828
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:42:44 2022 -0600
Update readme.md
commit 29ca436444bcc5cb2da9df46790533969402d4d5
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:41:33 2022 -0600
Update readme.md
Setting ref line
commit b1301e2b6ee1513f5c7d6c7fdd02f071279773fa
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:40:34 2022 -0600
Update readme.md
Fixing URL again
commit 6d7012c1b57ab0232a9963345d2b68d55b1b4639
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:39:11 2022 -0600
Update readme.md
Fixing build instructions URL
commit 098e27bbf719ed680bbbec1da5698d8fe7e4bbca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:36:40 2022 -0600
Update readme.md
Escaped URL
commit 61ea1d567270fb2c0056ed766771050165898d27
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:35:11 2022 -0600
Update readme.md
Fixed step #1
commit 0d071a0b695060caffdf0a28f00d2dae927fb5ca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:34:04 2022 -0600
Update readme.md
Typo
commit 028950c162cd7c3fbe21d3f4daeaa980da6be8ca
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:33:26 2022 -0600
Update readme.md
Fixed link for the package directory
commit 15af0de66deecf90fc0d631300cd031c20174090
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 13:31:25 2022 -0600
Update readme.md
Added references to other deployment instructions
commit f7e5af2070474d57a0233b238a864e3c37d422dc
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Wed Dec 7 11:30:56 2022 -0600
Update readme.md
First draft of deployment instructions
commit b83e93aea069b80ff535acaa69149e37f900e3da
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:29:02 2022 -0600
Update readme.md
commit 372ae3e17ed3e21ec5958a6619071d1a9db96564
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:26:25 2022 -0600
Update readme.md
commit e6b15a5793fe2736c42293c3d2d3d7d8af140cd9
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 19:18:30 2022 -0600
Update readme.md
Updated link to Azure deployment
commit 3447201611a96ce8b4989483c385877b798016a2
Author: eerus <115032728+eerus@users.noreply.github.com>
Date: Tue Dec 6 18:56:16 2022 -0600
Update readme.md
Added link to the playbook template
commit 36c776fd5b20c27ab9b6668c4c12d3ff89621de5
Author: Ying Huang <ying.huang@cohesity.com>
Date: Fri Dec 2 15:54:33 2022 -0800
Just initialize this new branch for Cohesity internal collaboration/review.
v-dvedak
pushed a commit
that referenced
this pull request
Aug 2, 2023
Merge Azure-Sentinel/master into local fork repo
Ashwin Patil (ashwin-patil)
added a commit
that referenced
this pull request
Dec 8, 2023
Updating Entity Mapping set #6
v-atulyadav
pushed a commit
that referenced
this pull request
Dec 31, 2024
Fix offerId and analytics rule and repackage solution
v-atulyadav
pushed a commit
that referenced
this pull request
May 20, 2025
…initions Bugfix/added missing param definitions
v-dvedak
pushed a commit
that referenced
this pull request
Jan 22, 2026
Co-authored-by: RamboV <68921481+RamboV@users.noreply.github.com>
v-dvedak
pushed a commit
that referenced
this pull request
Jan 22, 2026
)" This reverts commit 64f82f2.
v-dvedak
pushed a commit
that referenced
this pull request
Mar 3, 2026
Co-authored-by: nitsan-tzur <153099157+nitsan-tzur@users.noreply.github.com>
v-dvedak
pushed a commit
that referenced
this pull request
Apr 8, 2026
Co-authored-by: MartinPankraz <5108923+MartinPankraz@users.noreply.github.com>
noodlemctwoodle (noodlemctwoodle)
added a commit
to noodlemctwoodle/Azure-Sentinel
that referenced
this pull request
Jul 21, 2026
…#14726 Applies fixes for every Copilot inline comment on Azure#14726, retaining the Logstash container semantics that are already validated in production. Logstash pipeline (deployed to prod, verified end-to-end): - Solutions/UniFi Syslog (CCF)/Logstash/logstash.conf - Azure#2/Azure#3: Section 0's ruby PRI decoder now also maps facility/severity integer codes to their RFC 5424 name strings (kern/user/mail/... and emergency/alert/critical/error/warning/notice/informational/debug). Without this, section 6's rename filter (`syslog_facility -> Facility`, `syslog_severity -> SyslogSeverity`) was a silent no-op and every row landed with null Facility/SyslogSeverity. Consequence in prod: `UnifiSyslogCriticalSeverityEvent` never matched an event since the solution's initial commit — its `where SyslogSeverity in~ ("critical")` predicate could never be true. Confirmed post-fix: 100% of events populate both fields. - Azure#2/Azure#3 extended: added a CEF-without-syslog-header fallback right before section 6's rename. Raw CEF sent by the UDM cloud-key API direct to UDP/TCP 514 bypasses the syslog header parse (no <pri> prefix), so section 0's ruby decode skips them. New block: * if EventFormat == "cef": derive Facility=daemon (network daemon origin) + SyslogSeverity from CEF LogSeverity range mapping (0-3=informational, 4-5=notice, 6=warning, 7-8=error, 9-10=critical) * otherwise: default to "unknown"/"unknown" Confirmed post-fix: 0/157 recent fresh events land with a null. - Azure#4: replaced always-on `stdout { codec => rubydebug }` with a conditional gated on ENABLE_STDOUT_RUBYDEBUG env var (default "false"). Logstash env-var interpolation syntax `"${ENABLE_STDOUT_RUBYDEBUG:false}" == "true"` means production containers never dump per-event debug to `docker logs` unless the operator explicitly opts in via .env. Confirmed post-fix: log volume dropped from thousands of lines/min to 39 lines / 3min (startup only, zero rubydebug event blocks). - Azure#12: typo `slient` -> `silent` in a code comment (line 583). - Solutions/UniFi Syslog (CCF)/Logstash/.env.example - Documented the new ENABLE_STDOUT_RUBYDEBUG env var with a warning about production log volume. - Solutions/UniFi Syslog (CCF)/Logstash/docker-compose.yml - Azure#9/Azure#10: rewrote for portability. Old file required an external `syslog-net` macvlan network + hardcoded `10.0.0.21` IP that would fail immediately for anyone else. New default publishes 514/udp + 514/tcp from the host via `ports:`, which works out of the box on any Docker host. The macvlan pattern is documented as a commented optional section at the bottom of the file for advanced users who need a dedicated LAN IP (e.g. hosts already running rsyslog on 514, or UniFi devices that prefer target-discovery on-LAN). Also passes ENABLE_STDOUT_RUBYDEBUG through with a `:-false` default so the guard evaluates correctly even if the env var is unset. DCR / mainTemplate: - Solutions/UniFi Syslog (CCF)/Data Connectors/UnifiSyslog_ccf/UnifiSyslog_DCR.json - Azure#5: added isnotempty() guards on the CEF transformKql's SourcePort and DestinationPort projections. Before: `SourcePort = toint(SourcePort)` which converts an empty string ('') to `0`, meaning downstream queries filtering `where SourcePort > 0` silently drop rows that genuinely had no source port emitted by CEF (e.g. ICMP flows). After: `SourcePort = iff(isnotempty(SourcePort), toint(SourcePort), int(null))`. Matches the guard pattern already used elsewhere in the same transformKql for DeviceCustomNumber1 / ThreatSeverity / MaliciousIPLatitude / MaliciousIPLongitude. Same fix applied to DestinationPort. Analytic rules + hunting queries (11 files): - Azure#7: added `| where DeviceVendor =~ "Ubiquiti"` scope filter right after the `CommonSecurityLog` table reference on every rule/hunt whose query starts with CommonSecurityLog. Without this scope, the rules/hunts would fire on any TI match / SSH brute force / Tor exit hit / port scan / etc. from any Sentinel data source that lands in CommonSecurityLog (Fortinet, Cisco, Palo Alto, etc.) — creating cross-solution false positives with generic "UniFi:" alert titles. Files updated: Analytic Rules/UnifiSyslogSshBruteForce.yaml Analytic Rules/UnifiSyslogThreatIntelMatch.yaml Analytic Rules/UnifiSyslogTorExitTraffic.yaml Hunting Queries/UnifiSyslogApplicationPortScanners.yaml Hunting Queries/UnifiSyslogDhcpNakDecline.yaml Hunting Queries/UnifiSyslogFirstSeenExternalSources.yaml Hunting Queries/UnifiSyslogPortScannerSweep.yaml Hunting Queries/UnifiSyslogSshTargetUsers.yaml Hunting Queries/UnifiSyslogSudoActivityAudit.yaml Hunting Queries/UnifiSyslogTiFeedEffectiveness.yaml Hunting Queries/UnifiSyslogTopExternalAttackers.yaml Hunting Queries/UnifiSyslogWifiDeauthFlood.yaml Post-audit: `grep DeviceVendor` confirms all 11 files now have `DeviceVendor =~ "Ubiquiti"` filter; audit script exits clean. - Solutions/UniFi Syslog (CCF)/Hunting Queries/UnifiSyslogDhcpNakDecline.yaml - Azure#8: entityMappings block was declaring a Host entity with HostName mapped to `SampleClient`, but `SampleClient = take_any(SourceMACAddress)` is a MAC address, not a hostname. Sentinel would try to resolve the Host entity against something like "aa:bb:cc:dd:ee:ff" — invalid entity resolution. Fix: added `SampleHost = take_any(SourceHostName)` and `SampleIP = take_any(SourceIP)` to the summarize output; entity mappings now declare an IP entity (Address -> SampleIP) and a Host entity (HostName -> SampleHost). Real hostnames + real IPs, valid Sentinel entity resolution. Workbook: - Solutions/UniFi Syslog (CCF)/Workbooks/UnifiSyslog.json - Azure#6: the "Rows landing per 5-min bucket" timechart on the Pipeline Health tab had TWO `union` clauses of the same `CommonSecurityLog` CEF count query. Result: the CEF series was double-counted and the timechart under-represented Unifi_Syslog_CL's share of ingestion. Removed the trailing `| union (...)` block. Not changed (Copilot false positive): - Azure#1: Copilot flagged doubled `||` in ReleaseNotes.md line 3. Confirmed by byte inspection — file has clean single `|` pipes throughout. Will reply to the comment marking as invalid. Package regenerated: - Solutions/UniFi Syslog (CCF)/Package/mainTemplate.json - Solutions/UniFi Syslog (CCF)/Package/3.0.0.zip - Rebuilt via createSolutionV3.ps1. Version reset 3.0.1 -> 3.0.0 (script always auto-bumps; post-process restores). Byte-parity verified: disk mainTemplate.json and inside-zip mainTemplate.json both sha256=237b8b91d947c246..., both 249,625 bytes. Explicitly prevents the "outside and inside zip file mainTemplates are different" finding that hit PR Azure#14253. Validation: - KQL validation: PASS (22 files) - ARM-TTK: PASS 48/48 - Field Types: PASS - Classic App Insights: PASS - Hyperlink Validation: PASS - (Skipped: .NET Core 3.1 detection-schema + non-ASCII + TruffleHog — local tooling not installed, upstream CI covers these.) End-to-end prod verification (Logstash relay on 10.0.10.2): - Container: healthy (Up 37 seconds after last rebuild) - Pipeline: in=3 filtered=3 out=3 (clean 1:1 processing) - Docker log volume: 39 lines / 3min (was thousands/min pre-Azure#4-fix) - Facility/SyslogSeverity population: 157/157 fresh events (0 nulls) Breaking changes: none.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Azure AD hunting queries