Playbook Preparation for M2131 (#5838)

* Playbook Preparation for Maturity Model for Event Management M2131

* Moving to folder
This commit is contained in:
v-sabiraj 2022-08-19 14:45:53 +05:30 коммит произвёл GitHub
Родитель 8c9581272c
Коммит e5ba2ab1bf
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
3 изменённых файлов: 52 добавлений и 11 удалений

Просмотреть файл

@ -1,4 +1,27 @@
{
"metadata": {
"title": "Notify-LogManagementTeam",
"description": "This Security Orchestration, Automation, & Response (SOAR) capability is designed for configuration with the solution's analytics rules. When analytics rules trigger this automation notifies the log management team of respective details via Teams chat and exchange email. this automation reduces requirements to manually monitor the workbook or analytics rules while increasing response times.",
"prerequisites": [],
"lastUpdateTime": "2022-08-05T00:00:00.000Z",
"entities": [],
"tags": [ ],
"support": {
"tier": "Community"
},
"author": {
"name": "TJ Banasik"
},
"releaseNotes": [
{
"version": "1.0.0",
"title": "Notify-LogManagementTeam",
"notes": [
"Initial version"
]
}
]
},
"parameters": {
"PlaybookName": {
"defaultValue": "Notify-LogManagementTeam",

Просмотреть файл

@ -2,18 +2,27 @@
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"metadata": {
"title": "Create-AzureDevOpsTask",
"description": "This playbook will create the Azure DevOps task filled with the Azure Sentinel incident details.",
"prerequisites": "",
"lastUpdateTime": "2021-07-14T00:00:00.000Z",
"entities": [],
"tags": ["Sync"],
"title": "Create-AzureDevOpsTask",
"description": "This playbook will create the Azure DevOps task filled with the Microsoft Sentinel incident details.",
"prerequisites": [],
"lastUpdateTime": "2021-07-14T00:00:00.000Z",
"entities": [],
"tags": [ "Sync" ],
"support": {
"tier": "Community"
"tier": "Community"
},
"author": {
"name": "Nicholas DiCola"
}
},
"releaseNotes": [
{
"version": "1.0.0",
"title": "Create Azure DevOps Task",
"notes": [
"Initial version"
]
}
]
},
"parameters": {
"PlaybookName": {

Просмотреть файл

@ -3,11 +3,11 @@
"contentVersion": "1.0.0.0",
"metadata": {
"title": "Create Jira Issue",
"description": "This playbook will open a Jira Issue when a new incident is opened in Azure Sentinel.",
"description": "This playbook will open a Jira Issue when a new incident is opened in Microsoft Sentinel.",
"prerequisites": ["1. Jira instance (ex. xyz.atlassian.net)",
"2. Jira API",
"3. Username."],
"lastUpdateTime": "2021-07-14T00:00:00.000Z",
"lastUpdateTime": "2022-08-05T00:00:00.000Z",
"entities": [],
"tags": [ "Sync" ],
"support": {
@ -15,7 +15,16 @@
},
"author": {
"name": "Yaniv Shasha and Benjamin Kovacevic"
}
},
"releaseNotes": [
{
"version": "1.0.0",
"title": "Create Jira Issue",
"notes": [
"Initial version"
]
}
]
},
"parameters": {
"PlaybookName": {