-
Notifications
You must be signed in to change notification settings - Fork 5.9k
Adding resource definition for IoTSecuritySolutionsAnalytics #6160
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
sergey-shandar
merged 47 commits into
Azure:master
from
hagba:dev-security-Microsoft.Security-2017-08-01-preview
Jul 12, 2019
Merged
Changes from 46 commits
Commits
Show all changes
47 commits
Select commit
Hold shift + click to select a range
b654b8d
Adding resource definition for IoTSecuritySolutionsAnalytics
hagba 919e914
Fix reference error
5465f41
Add reference to iotSecuritySolutionsAnalytics.json
hagba 3a82701
Fix Autorest and swagger errors
hagba b5861c5
Remove paging from short responses
hagba fcef8ed
Fix spelling
hagba 5946694
Fix wording of description
hagba 98e881d
Fix paging error
hagba e7901ca
refix paging
hagba 3adf92a
add Lists support
hagba 1b4c667
Fix example syntax
hagba 9d22d12
fix schema warnings
hagba c1638fe
fix schema
hagba 9dc526d
fix schema
hagba 907418e
fix alert required properties error
hagba 6fd8c07
add properties level for assitional properties
hagba d89b8cf
Fix additional proprties issues
hagba 945d474
fix additional properties issues
hagba 795458e
remove required tag
hagba 247ad5a
Fix according to ARM comments
hagba f23f808
fix errors
hagba 2c17cd5
fix recommendation type example
hagba 6d5d42e
fix dismiss example
hagba 816aa64
required property cannot be readonly
hagba d54c1a9
remove tags from examples
hagba 7310f4e
fix lists errors
hagba 5e160ee
remove location property
hagba e510abb
Merge branch 'master' into dev-security-Microsoft.Security-2017-08-01…
b7c2265
Fixed securitySolution patch swagger
8ed3334
fix according to ARMs comment
hagba 9527a30
Merge branch 'dev-security-Microsoft.Security-2017-08-01-preview' of …
hagba da26439
fix unhealthyDeviceCount property name
hagba 6c3fe0a
Fix syntax error
hagba e22f344
Update specification/security/resource-manager/Microsoft.Security/pre…
hagba 36efcdf
Move remediation steps from alerts to recommendations
hagba 6cfe39a
Move remediation steps from alerts to recommendations
hagba 4debc1e
Merge branch 'dev-security-Microsoft.Security-2017-08-01-preview' of …
hagba 9e1389d
rename mostPrevalentDevices to mostPrevalentDeviceAlerts
hagba bb462b6
rename mostPrevalentDevices to mostPrevalentDeviceAlerts
hagba b17efd7
add mostPrevalentDeviceRecommendations
hagba 9bf2206
fix example
hagba 9988c68
fix dismiss
hagba d1a6204
add severity to prevalent lists
hagba a240dbd
fix syntax
hagba d5967c0
fix errors
hagba cffdbb2
fix enum
hagba 49d63b7
remove dependency
hagba File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
54 changes: 54 additions & 0 deletions
54
...ecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityAggregatedAlertList_example.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,54 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2017-08-01-preview", | ||
| "subscriptionId": "20ff7fc3-e762-44dd-bd96-b71116dcdc23", | ||
| "resourceGroupName": "MyGroup", | ||
| "solutionName": "default" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "value": [ | ||
| { | ||
| "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/IoT_Bruteforce_Fail/2019-02-02", | ||
| "name": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/IoT_Bruteforce_Fail/2019-02-02", | ||
| "type": "Microsoft.Security/IoTSecurityAggregatedAlert", | ||
| "properties": { | ||
| "alertType": "IoT_Bruteforce_Fail", | ||
| "alertDisplayName": "Failed Bruteforce", | ||
| "aggregatedDateUtc": "2019-02-02", | ||
| "vendorName": "Microsoft", | ||
| "reportedSeverity": "Low", | ||
| "remediationSteps": "", | ||
| "description": "Multiple unsuccsseful login attempts identified. A Bruteforce attack on the device failed.", | ||
| "count": 50, | ||
| "effectedResourceType": "IoT Device", | ||
| "systemSource": "Devices", | ||
| "actionTaken": "Detected", | ||
| "logAnalyticsQuery": "SecurityAlert | where tolower(ResourceId) == tolower('/subscriptions/b77ec8a9-04ed-48d2-a87a-e5887b978ba6/resourceGroups/IoT-Solution-DemoEnv/providers/Microsoft.Devices/IotHubs/rtogm-hub') and tolower(AlertName) == tolower('Custom Alert - number of device to cloud messages in MQTT protocol is not in the allowed range') | extend DeviceId=parse_json(ExtendedProperties)['DeviceId'] | project DeviceId, TimeGenerated, DisplayName, AlertSeverity, Description, RemediationSteps, ExtendedProperties" | ||
| } | ||
| }, | ||
| { | ||
| "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/IoT_Bruteforce_Success/2019-02-02", | ||
| "name": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/IoT_Bruteforce_Success/2019-02-02", | ||
| "type": "Microsoft.Security/IoTSecurityAggregatedAlert", | ||
| "properties": { | ||
| "alertType": "IoT_Bruteforce_Success", | ||
| "alertDisplayName": "Successful Bruteforce", | ||
| "aggregatedDateUtc": "2019-02-02", | ||
| "vendorName": "Microsoft", | ||
| "reportedSeverity": "Low", | ||
| "remediationSteps": "", | ||
| "description": "Multiple unsuccsseful login attempts identified followed by a succssful login. A Bruteforce attack on the device was Successfule", | ||
| "count": 600000, | ||
| "effectedResourceType": "IoT Device", | ||
| "systemSource": "Devices", | ||
| "actionTaken": "Detected", | ||
| "logAnalyticsQuery": "SecurityAlert | where tolower(ResourceId) == tolower('/subscriptions/b77ec8a9-04ed-48d2-a87a-e5887b978ba6/resourceGroups/IoT-Solution-DemoEnv/providers/Microsoft.Devices/IotHubs/rtogm-hub') and tolower(AlertName) == tolower('Custom Alert - number of device to cloud messages in MQTT protocol is not in the allowed range') | extend DeviceId=parse_json(ExtendedProperties)['DeviceId'] | project DeviceId, TimeGenerated, DisplayName, AlertSeverity, Description, RemediationSteps, ExtendedProperties" | ||
| } | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } | ||
| } |
32 changes: 32 additions & 0 deletions
32
...IoTSecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityAggregatedAlert_example.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2017-08-01-preview", | ||
| "subscriptionId": "20ff7fc3-e762-44dd-bd96-b71116dcdc23", | ||
| "resourceGroupName": "MyGroup", | ||
| "solutionName": "default", | ||
| "aggregatedAlertName": "IoT_Bruteforce_Fail/2019-02-02" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/IoT_Bruteforce_Fail/2019-02-02", | ||
| "name": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/IoT_Bruteforce_Fail/2019-02-02", | ||
| "type": "Microsoft.Security/IoTSecurityAggregatedAlert", | ||
| "properties": { | ||
| "alertType": "IoT_Bruteforce_Fail", | ||
| "alertDisplayName": "Failed Bruteforce", | ||
| "aggregatedDateUtc": "2019-02-02", | ||
| "vendorName": "Microsoft", | ||
| "reportedSeverity": "Low", | ||
| "remediationSteps": "", | ||
| "description": "Multiple unsuccsseful login attempts identified. A Bruteforce attack on the device failed.", | ||
| "count": 50, | ||
| "effectedResourceType": "IoT Device", | ||
| "systemSource": "Devices", | ||
| "actionTaken": "Detected", | ||
| "logAnalyticsQuery": "SecurityAlert | where tolower(ResourceId) == tolower('/subscriptions/b77ec8a9-04ed-48d2-a87a-e5887b978ba6/resourceGroups/IoT-Solution-DemoEnv/providers/Microsoft.Devices/IotHubs/rtogm-hub') and tolower(AlertName) == tolower('Custom Alert - number of device to cloud messages in MQTT protocol is not in the allowed range') | extend DeviceId=parse_json(ExtendedProperties)['DeviceId'] | project DeviceId, TimeGenerated, DisplayName, AlertSeverity, Description, RemediationSteps, ExtendedProperties" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
95 changes: 95 additions & 0 deletions
95
...s/IoTSecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityAnalyticsList_example.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,95 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2017-08-01-preview", | ||
| "subscriptionId": "20ff7fc3-e762-44dd-bd96-b71116dcdc23", | ||
| "resourceGroupName": "MyGroup", | ||
| "solutionName": "default" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "value": [ | ||
| { | ||
| "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default", | ||
| "name": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default", | ||
| "type": "Microsoft.Security/IoTSecuritySolutionAnalyticsModelList", | ||
| "properties": { | ||
| "metrics": { | ||
| "high": 5, | ||
| "medium": 200, | ||
| "low": 102 | ||
| }, | ||
| "unhealthyDeviceCount": 1200, | ||
| "devicesMetrics": [ | ||
| { | ||
| "date": "2019-02-01T00:00:00Z", | ||
| "devicesMetrics": { | ||
| "high": 3, | ||
| "medium": 15, | ||
| "low": 70 | ||
| } | ||
| }, | ||
| { | ||
| "date": "2019-02-02T00:00:00Z", | ||
| "devicesMetrics": { | ||
| "high": 3, | ||
| "medium": 45, | ||
| "low": 65 | ||
| } | ||
| } | ||
| ], | ||
| "topAlertedDevices": [ | ||
| { | ||
| "deviceId": "id1", | ||
| "alertsCount": 200 | ||
| }, | ||
| { | ||
| "deviceId": "id2", | ||
| "alertsCount": 170 | ||
| }, | ||
| { | ||
| "deviceId": "id3", | ||
| "alertsCount": 150 | ||
| } | ||
| ], | ||
| "mostPrevalentDeviceAlerts": [ | ||
| { | ||
| "alertDisplayName": "Custom Alert - number of device to cloud messages in AMQP protocol is not in the allowed range", | ||
| "reportedSeverity": "Low", | ||
| "devicesCount": 200 | ||
| }, | ||
| { | ||
| "alertDisplayName": "Custom Alert - execution of a process that is not allowed", | ||
| "reportedSeverity": "Medium", | ||
| "devicesCount": 170 | ||
| }, | ||
| { | ||
| "alertDisplayName": "Successful Bruteforce", | ||
| "reportedSeverity": "Low", | ||
| "devicesCount": 150 | ||
| } | ||
| ], | ||
| "mostPrevalentDeviceRecommendations": [ | ||
| { | ||
| "recommendationDisplayName": "Install the Azure Security of Things Agent", | ||
| "reportedSeverity": "Low", | ||
| "devicesCount": 200 | ||
| }, | ||
| { | ||
| "recommendationDisplayName": "High level permissions configured in Edge model twin for Edge module", | ||
| "reportedSeverity": "Low", | ||
| "devicesCount": 170 | ||
| }, | ||
| { | ||
| "recommendationDisplayName": "Same Authentication Credentials used by multiple devices", | ||
| "reportedSeverity": "Medium", | ||
| "devicesCount": 150 | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } | ||
| } |
91 changes: 91 additions & 0 deletions
91
...mples/IoTSecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityAnalytics_example.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,91 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2017-08-01-preview", | ||
| "subscriptionId": "20ff7fc3-e762-44dd-bd96-b71116dcdc23", | ||
| "resourceGroupName": "MyGroup", | ||
| "solutionName": "default" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default", | ||
| "name": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default", | ||
| "type": "Microsoft.Security/IoTSecuritySolutionAnalyticsModel", | ||
| "properties": { | ||
| "metrics": { | ||
| "high": 5, | ||
| "medium": 200, | ||
| "low": 102 | ||
| }, | ||
| "unhealthyDeviceCount": 1200, | ||
| "devicesMetrics": [ | ||
| { | ||
| "date": "2019-02-01T00:00:00Z", | ||
| "devicesMetrics": { | ||
| "high": 3, | ||
| "medium": 15, | ||
| "low": 70 | ||
| } | ||
| }, | ||
| { | ||
| "date": "2019-02-02T00:00:00Z", | ||
| "devicesMetrics": { | ||
| "high": 3, | ||
| "medium": 45, | ||
| "low": 65 | ||
| } | ||
| } | ||
| ], | ||
| "topAlertedDevices": [ | ||
| { | ||
| "deviceId": "id1", | ||
| "alertsCount": 200 | ||
| }, | ||
| { | ||
| "deviceId": "id2", | ||
| "alertsCount": 170 | ||
| }, | ||
| { | ||
| "deviceId": "id3", | ||
| "alertsCount": 150 | ||
| } | ||
| ], | ||
| "mostPrevalentDeviceAlerts": [ | ||
| { | ||
| "alertDisplayName": "Custom Alert - number of device to cloud messages in AMQP protocol is not in the allowed range", | ||
| "reportedSeverity": "Low", | ||
| "alertsCount": 200 | ||
| }, | ||
| { | ||
| "alertDisplayName": "Custom Alert - execution of a process that is not allowed", | ||
| "reportedSeverity": "Medium", | ||
| "alertsCount": 170 | ||
| }, | ||
| { | ||
| "alertDisplayName": "Successful Bruteforce", | ||
| "reportedSeverity": "Low", | ||
| "alertsCount": 150 | ||
| } | ||
| ], | ||
| "mostPrevalentDeviceRecommendations": [ | ||
| { | ||
| "recommendationDisplayName": "Install the Azure Security of Things Agent", | ||
| "reportedSeverity": "Low", | ||
| "devicesCount": 200 | ||
| }, | ||
| { | ||
| "recommendationDisplayName": "High level permissions configured in Edge model twin for Edge module", | ||
| "reportedSeverity": "Low", | ||
| "devicesCount": 170 | ||
| }, | ||
| { | ||
| "recommendationDisplayName": "Same Authentication Credentials used by multiple devices", | ||
| "reportedSeverity": "Medium", | ||
| "devicesCount": 150 | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
50 changes: 50 additions & 0 deletions
50
...SecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityRecommendationList_example.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2017-08-01-preview", | ||
| "subscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735", | ||
| "resourceGroupName": "IoTEdgeResources", | ||
| "solutionName": "default" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "value": [ | ||
| { | ||
| "id": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/OpenPortsOnDevice", | ||
| "name": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/OpenPortsOnDevice", | ||
| "type": "Microsoft.Security/IoTSecurityAggregatedRecommendation", | ||
| "properties": { | ||
| "recommendationName": "OpenPortsOnDevice", | ||
| "recommendationDisplayName": "Permissive firewall policy in one of the chains was found", | ||
| "description": "An allowed firewall policy was found in main firewall Chains (INPUT/OUTPUT). The policy should Deny all traffic by default define rules to allow necessary communication to/from the device", | ||
| "recommendationTypeId": "{20ff7fc3-e762-44dd-bd96-b71116dcdc23}", | ||
| "detectedBy": "Microsoft", | ||
| "reportedSeverity": "Low", | ||
| "remediationSteps": "", | ||
| "healthyDevices": 10000, | ||
| "unhealthyDeviceCount": 200, | ||
| "logAnalyticsQuery": "SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Devices/IotHubs/t-ofdadu-hub') and tolower(RecommendationName) == tolower('OpenPortsOnDevice')" | ||
| } | ||
| }, | ||
| { | ||
| "id": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/TooLargeIPRange", | ||
| "name": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/IoT_InstallAgent", | ||
| "type": "Microsoft.Security/IoTSecurityAggregatedRecommendation", | ||
| "properties": { | ||
| "recommendationName": "TooLargeIPRange", | ||
| "recommendationDisplayName": "Permissive firewall policy in one of the chains was found", | ||
| "description": "An allow IP filter rule source IP range is too large. Overly permissive rules can expose your IoT hub to malicious actors.", | ||
| "recommendationTypeId": "{20ff7fc3-e762-44dd-bd96-b71116dcdc23}", | ||
| "detectedBy": "Microsoft", | ||
| "reportedSeverity": "High", | ||
| "remediationSteps": "", | ||
| "healthyDevices": 130000, | ||
| "unhealthyDeviceCount": 1, | ||
| "logAnalyticsQuery": "SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Devices/IotHubs/t-ofdadu-hub') and tolower(RecommendationName) == tolower('TooLargeIPRange')" | ||
| } | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } | ||
| } |
30 changes: 30 additions & 0 deletions
30
.../IoTSecuritySolutionsAnalytics/GetIoTSecuritySolutionsSecurityRecommendation_example.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,30 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2017-08-01-preview", | ||
| "subscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735", | ||
| "resourceGroupName": "IoTEdgeResources", | ||
| "solutionName": "default", | ||
| "aggregatedRecommendationName": "OpenPortsOnDevice" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/OpenPortsOnDevice", | ||
| "name": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default/OpenPortsOnDevice", | ||
| "type": "Microsoft.Security/IoTSecurityAggregatedRecommendation", | ||
| "properties": { | ||
| "recommendationName": "OpenPortsOnDevice", | ||
| "recommendationDisplayName": "Permissive firewall policy in one of the chains was found", | ||
| "description": "An allowed firewall policy was found in main firewall Chains (INPUT/OUTPUT). The policy should Deny all traffic by default define rules to allow necessary communication to/from the device", | ||
| "recommendationTypeId": "{20ff7fc3-e762-44dd-bd96-b71116dcdc23}", | ||
| "detectedBy": "Microsoft", | ||
| "reportedSeverity": "Low", | ||
| "remediationSteps": "", | ||
| "healthyDevices": 10000, | ||
| "unhealthyDeviceCount": 200, | ||
| "logAnalyticsQuery": "SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTEdgeResources/providers/Microsoft.Devices/IotHubs/t-ofdadu-hub') and tolower(RecommendationName) == tolower('OpenPortsOnDevice')" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.