Skip to content

[DoNotMerge] Introducing subAssessments type (Microsoft.Security provider) #6422

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
orparnes wants to merge 10 commits into from
Closed

[DoNotMerge] Introducing subAssessments type (Microsoft.Security provider) #6422

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
5810c80
Add sub-assessment resource to Microsoft.Security provider
orparnes Jun 23, 2019
dc4dc68
Fix typos, Add custom words, Descriptions, Renames, Examples
orparnes Jun 24, 2019
884ac56
Add: ResourceDetails, custom words. Fix: examples, typos.
orparnes Jun 25, 2019
cd0227d
Rename "extendedData" to "additionalData" to be aligned with "assessm…
orparnes Jun 27, 2019
43468cc
Renames
orparnes Jul 2, 2019
f5bd294
Resolve some issues, set spaces instead of tabs,
orparnes Jul 4, 2019
b4e8dab
Fix example
orparnes Jul 14, 2019
0917ba8
x-ms-enum fix
orparnes Jul 14, 2019
92f4a95
Remove some fields
orparnes Jul 23, 2019
a81cc54
Merge branch 'master' into master
orparnes Aug 4, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion custom-words.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
AADDS
AADDS
aadiam
AATP
abcxyz
Expand Down Expand Up @@ -316,6 +316,9 @@ customvision
customvisionprediction
customvisiontraining
CUTOVER
CVE
CVEs
CVSS
Cyrl
databox
Databricks
Expand Down
60 changes: 60 additions & 0 deletions ...Security/preview/2019-01-01-preview/examples/SubAssessments/GetSubAssessment_example.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,60 @@
{
"parameters": {
"api-version": "2019-01-01-preview",
"scope": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
"assessmentName": "21300918-b2e3-0346-785f-c77ff57d243b",
"subAssessmentName": "8c98f353-8b41-4e77-979b-6adeecd5d168"
},
"responses": {
"200": {
"body": {
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.ContainerRegistry/registries/myRegistry/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b/subAssessments/8c98f353-8b41-4e77-979b-6adeecd5d168",
"name": "8c98f353-8b41-4e77-979b-6adeecd5d168",
"type": "Microsoft.Security/assessments/subAssessments",
"properties": {
"displayName": "'Back Orifice' Backdoor",
"id": "1001",
"status": {
"code": "Unhealthy",
"cause": "",
"severity": "High",
"description": "The resource is unhealthy"
},
"resourceDetails": {
"source": "Azure",
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.ContainerRegistry/registries/myRegistry/repository/myRepo/imageDigest/c186fc44-3154-4ce2-ba18-b719d895c3b0/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b/subAssessments/8c98f353-8b41-4e77-979b-6adeecd5d168"
},
"remediation": "Use a recent anti-virus program to remove this backdoor and check your system regularly with anti-virus software.",
"impact": "3",
"category": "Backdoors and trojan horses",
"description": "The backdoor 'Back Orifice' was detected on this system. The presence of this backdoor indicates that your system has already been compromised. Unauthorized users can access your host at any time. Unauthorized users can take complete control of the host and manipulate data. They can steal the data or even wipe out the host.",
"timeGenerated": "2019-06-23T12:20:08.7644808Z",
"additionalData": {
"assessedResourceType": "ContainerRegistryVulnerability",
"imageDigest": "c186fc44-3154-4ce2-ba18-b719d895c3b0",
"repositoryName": "myRepo",
"type": "Vulnerability",
"cvss": {
"2.0": {
"base": 10
},
"3.0": {
"base": 10
}
},
"patchable": true,
"cve": [{
"title": "CVE-2019-12345",
"link": "http://contoso.com"
}],
"publishedTime": "2018-01-01T00:00:00.0000000Z",
"vendorReferences": [{
"title": "Reference_1",
"link": "http://contoso.com"
}]
}
}
}
}
}
}
61 changes: 61 additions & 0 deletions ...curity/preview/2019-01-01-preview/examples/SubAssessments/ListSubAssessments_example.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
{
"parameters": {
"api-version": "2019-01-01-preview",
"scope": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
"assessmentName": "21300918-b2e3-0346-785f-c77ff57d243b"
},
"responses": {
"200": {
"body": {
"value": [{
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.ContainerRegistry/registries/myRegistry/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b/subAssessments/8c98f353-8b41-4e77-979b-6adeecd5d168",
"name": "8c98f353-8b41-4e77-979b-6adeecd5d168",
"type": "Microsoft.Security/assessments/subAssessments",
"properties": {
"displayName": "'Back Orifice' Backdoor",
"id": "1001",
"status": {
"code": "Unhealthy",
"cause": "",
"severity": "High",
"description": "The resource is unhealthy"
},
"resourceDetails": {
"source": "Azure",
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.ContainerRegistry/registries/myRegistry/repository/myRepo/imageDigest/c186fc44-3154-4ce2-ba18-b719d895c3b0/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b/subAssessments/8c98f353-8b41-4e77-979b-6adeecd5d168"
},
"remediation": "Use a recent anti-virus program to remove this backdoor and check your system regularly with anti-virus software.",
"impact": "3",
"category": "Backdoors and trojan horses",
"description": "The backdoor 'Back Orifice' was detected on this system. The presence of this backdoor indicates that your system has already been compromised. Unauthorized users can access your host at any time. Unauthorized users can take complete control of the host and manipulate data. They can steal the data or even wipe out the host.",
"timeGenerated": "2019-06-23T12:20:08.7644808Z",
"additionalData": {
"assessedResourceType": "ContainerRegistryVulnerability",
"imageDigest": "c186fc44-3154-4ce2-ba18-b719d895c3b0",
"repositoryName": "myRepo",
"type": "Vulnerability",
"cvss": {
"2.0": {
"base": 10
},
"3.0": {
"base": 10
}
},
"patchable": true,
"cve": [{
"title": "CVE-2019-12345",
"link": "http://contoso.com"
}],
"publishedTime": "2018-01-01T00:00:00.0000000Z",
"vendorReferences": [{
"title": "Reference_1",
"link": "http://contoso.com"
}]
}
}
}]
}
}
}
}
Loading