Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

update important instructions on playbook order of deployment

This commit is contained in:
ngchi 2021-03-16 15:18:15 -07:00
Родитель a50aeb71ae
Коммит 8b45a938f7
2 изменённых файлов: 13 добавлений и 8 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

Двоичные данные
Playbooks/Get-Microsoft-Covid19-Indicators/playbookparameter.PNG Normal file
Просмотреть файл

Двоичный файл не отображается.
Режим "рядом"

После

Ширина:  |  Высота:  |  Размер: 92 KiB

21
Playbooks/Get-Microsoft-Covid19-Indicators/readme.md
Просмотреть файл

@ -1,17 +1,13 @@
Microsoft released threat indicators related to Covid19 as described at https://www.microsoft.com/security/blog/2020/05/14/open-sourcing-covid-threat-intelligence/
These playbooks automate the ingest of these threat indicators into the ThreatIntelligenceIndicator table of an Azure Sentinel workspace. Detailed instructions for deploying these workbooks can be found at https://aka.ms/sentinelc19blog
**Note**: You must deploy the **C19ImportToSentinel** playbook before deploying the **C19IndicatorProcessor** playbook. You must also make sure the Playbook2Name parameter uses the exact name you chose when importing the **C19ImportToSentinel** playbook.
Links to deploy the C19IndicatorProcessor playbook template:
![parameters](playbookparameter.png)
<a href="https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FPlaybooks%2FGet-Microsoft-Covid19-Indicators%2FC19IndicatorProcessor.json" target="_blank">
<img src="https://aka.ms/deploytoazurebutton"/>
</a>
<a href="https://portal.azure.us/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FPlaybooks%2FGet-Microsoft-Covid19-Indicators%2FC19IndicatorProcessor.json" target="_blank">
<img src="https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUIDE/images/deploytoazuregov.png"/>
</a>
Here is the order of deployment:
Links to deploy the C19ImportToSentinel playbook template:
1. Deploy the C19ImportToSentinel playbook template:
<a href="https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FPlaybooks%2FGet-Microsoft-Covid19-Indicators%2FC19ImportToSentinel.json" target="_blank">
<img src="https://aka.ms/deploytoazurebutton"/>
@ -19,3 +15,12 @@ Links to deploy the C19ImportToSentinel playbook template:
<a href="https://portal.azure.us/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FPlaybooks%2FGet-Microsoft-Covid19-Indicators%2FC19ImportToSentinel.json" target="_blank">
<img src="https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUIDE/images/deploytoazuregov.png"/>
</a>
2. Deploy the C19IndicatorProcessor playbook template:
<a href="https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FPlaybooks%2FGet-Microsoft-Covid19-Indicators%2FC19IndicatorProcessor.json" target="_blank">
<img src="https://aka.ms/deploytoazurebutton"/>
</a>
<a href="https://portal.azure.us/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FPlaybooks%2FGet-Microsoft-Covid19-Indicators%2FC19IndicatorProcessor.json" target="_blank">
<img src="https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/1-CONTRIBUTION-GUIDE/images/deploytoazuregov.png"/>
</a>