add metadata, remove duplicate parameter
This commit is contained in:
Родитель
e1965c969d
Коммит
fe3710476e
|
@ -1,6 +1,47 @@
|
|||
{
|
||||
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
|
||||
"contentVersion": "1.0.0.0",
|
||||
"metadata": {
|
||||
"title": "Enrich file hashes entities - MalwareBazaar",
|
||||
"description": "This playbook will enrich a Sentinel Incident with hash information from MalwareBazaar.",
|
||||
"mainSteps": [
|
||||
"Only file hashes entity types will be enriched with this playbook"
|
||||
],
|
||||
"prerequisites": [
|
||||
"1. Logic Apps Custom Connector MalwareBazaar.\n2.Logic App managed identity should be given Sentinel Responder role to read incident trigger and write comment/tag to incident."
|
||||
],
|
||||
"postDeployment": [
|
||||
"None"
|
||||
],
|
||||
"prerequisitesDeployTemplateFile": "../CustomConnector/azuredeploy.json",
|
||||
"lastUpdateTime": "2023-01-08T10:00:00.000Z",
|
||||
"entities": [
|
||||
"FileHash"
|
||||
],
|
||||
"tags": [
|
||||
"Enrichment",
|
||||
"MalwareBazaar"
|
||||
],
|
||||
"support": {
|
||||
"tier": "community"
|
||||
},
|
||||
"author": {
|
||||
"name": "juju4"
|
||||
},
|
||||
"source": {
|
||||
"kind": "Community"
|
||||
},
|
||||
"version": "1.0.0",
|
||||
"releaseNotes": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"title": "Enrich file hashes entities - MalwareBazaar",
|
||||
"notes": [
|
||||
"Initial version"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"parameters": {
|
||||
"resourceTags": {
|
||||
"type": "object",
|
||||
|
@ -12,13 +53,9 @@
|
|||
"defaultValue": "Enrich-MalwareBazaar",
|
||||
"type": "string"
|
||||
},
|
||||
"workflows_Enrich_MalwareBazaar_name": {
|
||||
"defaultValue": "Enrich-MalwareBazaar",
|
||||
"type": "String"
|
||||
},
|
||||
"customApis_MalwareBazaar_name": {
|
||||
"defaultValue": "MalwareBazaar",
|
||||
"type": "String"
|
||||
"type": "string"
|
||||
},
|
||||
"location": {
|
||||
"type": "string",
|
||||
|
@ -63,7 +100,7 @@
|
|||
{
|
||||
"type": "Microsoft.Logic/workflows",
|
||||
"apiVersion": "2019-05-01",
|
||||
"name": "[parameters('workflows_Enrich_MalwareBazaar_name')]",
|
||||
"name": "[parameters('PlaybookName')]",
|
||||
"location": "[parameters('location')]",
|
||||
"tags": "[parameters('resourceTags')]",
|
||||
"identity": {
|
||||
|
|
Загрузка…
Ссылка в новой задаче