Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

Solution packaged

This commit is contained in:
PrasadBoke 2024-05-29 15:39:23 +05:30
Родитель e25a27c784
Коммит 38d0e07c49
4 изменённых файлов: 94 добавлений и 62 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

Двоичные данные
Solutions/CiscoWSA/Package/3.0.0.zip
Просмотреть файл

Двоичный файл не отображается.

Двоичные данные
Solutions/CiscoWSA/Package/3.0.1.zip
Просмотреть файл

Двоичный файл не отображается.

124
Solutions/CiscoWSA/Package/mainTemplate.json
Просмотреть файл

@ -1574,10 +1574,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -1590,8 +1590,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -1678,10 +1678,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -1694,8 +1694,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -1782,10 +1782,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -1800,8 +1800,8 @@
{
"fieldMappings": [
{
"identifier": "Url",
"columnName": "URLCustomEntity"
"columnName": "URLCustomEntity",
"identifier": "Url"
}
],
"entityType": "URL"
@ -1809,8 +1809,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -1897,10 +1897,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -1913,8 +1913,8 @@
{
"fieldMappings": [
{
"identifier": "Url",
"columnName": "URLCustomEntity"
"columnName": "URLCustomEntity",
"identifier": "Url"
}
],
"entityType": "URL"
@ -1922,8 +1922,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -2010,10 +2010,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -2026,8 +2026,8 @@
{
"fieldMappings": [
{
"identifier": "Address",
"columnName": "IPCustomEntity"
"columnName": "IPCustomEntity",
"identifier": "Address"
}
],
"entityType": "IP"
@ -2035,8 +2035,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -2123,10 +2123,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -2139,8 +2139,8 @@
{
"fieldMappings": [
{
"identifier": "Address",
"columnName": "IPCustomEntity"
"columnName": "IPCustomEntity",
"identifier": "Address"
}
],
"entityType": "IP"
@ -2148,8 +2148,8 @@
{
"fieldMappings": [
{
"identifier": "Url",
"columnName": "UrlCustomEntity"
"columnName": "UrlCustomEntity",
"identifier": "Url"
}
],
"entityType": "URL"
@ -2236,10 +2236,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -2252,8 +2252,8 @@
{
"fieldMappings": [
{
"identifier": "Address",
"columnName": "IPCustomEntity"
"columnName": "IPCustomEntity",
"identifier": "Address"
}
],
"entityType": "IP"
@ -2261,8 +2261,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -2349,10 +2349,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -2365,8 +2365,8 @@
{
"fieldMappings": [
{
"identifier": "Address",
"columnName": "IPCustomEntity"
"columnName": "IPCustomEntity",
"identifier": "Address"
}
],
"entityType": "IP"
@ -2453,10 +2453,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -2469,8 +2469,8 @@
{
"fieldMappings": [
{
"identifier": "Address",
"columnName": "IPCustomEntity"
"columnName": "IPCustomEntity",
"identifier": "Address"
}
],
"entityType": "IP"
@ -2478,8 +2478,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -2566,10 +2566,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -2582,8 +2582,8 @@
{
"fieldMappings": [
{
"identifier": "Url",
"columnName": "URLCustomEntity"
"columnName": "URLCustomEntity",
"identifier": "Url"
}
],
"entityType": "URL"
@ -2591,8 +2591,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"
@ -2679,10 +2679,10 @@
"status": "Available",
"requiredDataConnectors": [
{
"connectorId": "CiscoWSA",
"dataTypes": [
"CiscoWSAEvent"
],
"connectorId": "CiscoWSA"
]
}
],
"tactics": [
@ -2695,8 +2695,8 @@
{
"fieldMappings": [
{
"identifier": "Address",
"columnName": "IPCustomEntity"
"columnName": "IPCustomEntity",
"identifier": "Address"
}
],
"entityType": "IP"
@ -2704,8 +2704,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "FileCustomEntity"
"columnName": "FileCustomEntity",
"identifier": "Name"
}
],
"entityType": "File"
@ -2713,8 +2713,8 @@
{
"fieldMappings": [
{
"identifier": "Name",
"columnName": "AccountCustomEntity"
"columnName": "AccountCustomEntity",
"identifier": "Name"
}
],
"entityType": "Account"

32
Solutions/CiscoWSA/Package/testParameters.json Normal file
Просмотреть файл

@ -0,0 +1,32 @@
{
"location": {
"type": "string",
"minLength": 1,
"defaultValue": "[resourceGroup().location]",
"metadata": {
"description": "Not used, but needed to pass arm-ttk test `Location-Should-Not-Be-Hardcoded`. We instead use the `workspace-location` which is derived from the LA workspace"
}
},
"workspace-location": {
"type": "string",
"defaultValue": "",
"metadata": {
"description": "[concat('Region to deploy solution resources -- separate from location selection',parameters('location'))]"
}
},
"workspace": {
"defaultValue": "",
"type": "string",
"metadata": {
"description": "Workspace name for Log Analytics where Microsoft Sentinel is setup"
}
},
"workbook1-name": {
"type": "string",
"defaultValue": "CiscoWSA",
"minLength": 1,
"metadata": {
"description": "Name for the workbook"
}
}
}