Connector fix customer feedback - #4
Closed
udinagari wants to merge 11 commits into
Closed
Conversation
- Added support for fetching /revoking bearer tokens for Agari Phishing Defense (APD) - Added support for fetching /revoking bearer tokens for Agari Phishing Response (APR) - Added support for fetching /revoking bearer tokens for Agari Brand Protection (BP) - Added support Microsoft Security Graph via OAuth - Added support for fetching Policy Hits and Threat Categories for APD into Sentinel Log Analytics - Added support for Brand Protection alert logs to Sentinel Log Analytics. - Added support for Brand Protection Threat Feeds to feed URL data to the Security Graph - Added support for Phishing Response IoCs to be fed to the Security Graph API - Added error checking on API responses - Added support for pagination of API responses - Added instructions for fetching the Agari Client ID / Secret - Added instructions about the Security Graph API - Added instructions for manual deployment
- fixed typo in token gen if statement - fixed header variable in APD call - added x-header to API call to identify Sentinel - added if statements for APD push to Sentinel to verify if there is data to push - removed en-us from URLs - added BP logs to deployment template - added log samples - raw is data from the API call, formatted is what is used to push to Sentinel - added approprtiate files to the zip archive - functionapp.json-- - removed Preview from the title - added preview to the availability section --deploy.json-- - removed "description" tag from the boolean variables - fixed typos in the descriptions - fixed alignment of paramaters - added new resources to capture function, resource groups, subscriptionid for writing to the evironment variables - added 3 new variables for LastLogtTime per product --run.ps1 changes-- - added new variables to take read environment variables - added new function SetLastLogTime. This function stamps the new startdate to be used on the next run of the script. This was done to satisfy the case where if the script failed to run there would be no gap in the logs vs relying on the timer function - added UserAgent Strings - moved startdate into if statements per product to read the latest time in the respective variables - added varaiables to be populated if the API call was successfule, used in the function above to signal a new startdate should be populated - call the function last as it resets the current app session --zip file-- - created new zip with updated app - added version of powershell progamatically to the UA String - per product UA strings - Set the the first run start-date once - moved to per product startdate variables - modified queries to use per-product startdates - Update agari.zip
-Updated instructions for additonal steps around permissions to make both the automated and manual deployments have the correct permissions. -added BP logs to the query section
Cleaned up the instructions further added samples in json format removed old zip samples
Changed text to Contirbutor vs owner
Updated as per guidance from @nazang
- Added the ?raw=true to the link.
@nazang I'll need a shortened link for the FunctionAPP.json as well
- added short links to json files - added Agari logo
added logic for parsing true/false env variables updated zip
logo update boolean logic update update zip file
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #
new logo
boolean logic fix
new zip file
Proposed Changes