Update azuredeploy.json

Accelerynt-Security · Apr 20, 2023 · 6500e15 · 6500e15
1 parent 09c3338
commit 6500e15
Showing 1 changed file with 14 additions and 7 deletions.
diff --git a/Playbooks/AS-Incident-Spiderfoot-Scan/azuredeploy.json b/Playbooks/AS-Incident-Spiderfoot-Scan/azuredeploy.json
@@ -2,14 +2,14 @@
     "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
     "contentVersion": "1.0.0.0",
     "metadata": {
-        "title": "AS-Remove-Domains-from-Zscaler-URL-Category", 
+        "title": "AS-Incident-Spiderfoot-Scan", 
         "description": "This playbook will pull email addresses from the account entities in a Microsoft Sentinel incident and use them as targets in a Spiderfoot scan. By default, the scan is created using the HaveIBeenPwned module. The resulting report of that scan will be emailed to a recipient specified upon deployment.",
-        "prerequisites": "1. A Spiderfootccount is needed, along with an API key for this account. Support for the set up and configuration of each of these items can be found here: https://github.com/Accelerynt-Security/AS-Incident-Spiderfoot-Scan",
-        "lastUpdateTime": "2023-04-14T16:33:46Z",
+        "prerequisites": "1. A Spiderfoot account is needed, along with an API key for this account. Support for the set up and configuration of each of these items can be found here: https://github.com/Accelerynt-Security/AS-Incident-Spiderfoot-Scan",
+        "lastUpdateTime": "2023-04-19T15:23:18Z",
         "entities": ["Account"], 
         "tags": ["Microsoft Sentinel", "Incident", "Spiderfoot"], 
         "support": {
-            "tier": "partner"
+            "tier": "Partner"
         },
         "author": {
             "name": "Accelerynt"
@@ -20,9 +20,12 @@
             "defaultValue": "AS-Incident-Spiderfoot-Scan",
             "type": "string"
         },
-        "SpiderfootURL": {
+        "SpiderfootSubdomain": {
             "defaultValue": "example.hx.spiderfoot.net",
-            "type": "string"
+            "type": "string",
+            "metadata" : {
+                "description" : "Enter the name of your unique Spiderfoot subdomain"
+            }
         },
         "KeyVaultName": {
             "type": "string",
@@ -38,11 +41,15 @@
         },
         "RecipientEmail": {
             "defaultValue": "username@example.com",
-            "type": "string"
+            "type": "string",
+            "metadata" : {
+                "description" : "Enter the email address you would like the Spiderfoot report sent to"
+            }
         }
     },
     "variables": {
         "azuresentinel": "[concat('azuresentinel-', parameters('PlaybookName'))]",
+        "keyvault": "[concat('keyvault-', parameters('PlaybookName'))]",
         "office365": "[concat('office365-', parameters('PlaybookName'))]"
     },
     "resources": [