185 строки
6.9 KiB
JSON
185 строки
6.9 KiB
JSON
{
|
|
"$schema": "https://schema.management.azure.com/schemas/2019-08-01/deploymentTemplate.json#",
|
|
"contentVersion": "1.0.0.0",
|
|
"parameters": {
|
|
"Workspace": {
|
|
"type": "string",
|
|
"metadata": {
|
|
"description": "The Microsoft Sentinel workspace into which the function will be deployed. Has to be in the selected Resource Group."
|
|
}
|
|
},
|
|
"WorkspaceRegion": {
|
|
"type": "string",
|
|
"defaultValue": "[resourceGroup().location]",
|
|
"metadata": {
|
|
"description": "The region of the selected workspace. The default value will use the Region selection above."
|
|
}
|
|
}
|
|
},
|
|
"variables": {},
|
|
"resources": [
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedAuthentication",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedDns",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimDns/ARM/FullDeploymentDns.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedFileEvent",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimFileEvent/ARM/FullDeploymentFileEvent.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedNetworkEvent",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimNetworkSession/ARM/FullDeploymentNetworkSession.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedProcessEvent",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimProcessEvent/ARM/FullDeploymentProcessEvent.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedRegistryEvent",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimRegistryEvent/ARM/FullDeploymentRegistryEvent.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedWebSession",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimWebSession/ARM/FullDeploymentWebSession.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedAuditEvent",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimAuditEvent/ARM/FullDeploymentAuditEvent.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"outputs": {
|
|
}
|
|
}
|