Creating Initial Commit adding Cyera DSPM

[joshua-acklin-cyera]

Required items, please complete

Change(s):

• Logos/cyera_* Adding Cyera's ICON to platform
• Solutions/CyeraDSPM/* Created Connector

Reason for Change(s):

• Adding Cyera DSPM Connector

Version Updated:

• Net New

Testing Completed:

• Yes

Checked that the validations are passing and have addressed any issues that are present:

• Y

_Note Completed all validation steps within -> https://github.com/Azure/Azure-Sentinel/blob/master/Tools/Create-Azure-Sentinel-Solution/V3/README.md and confirmed data ingested by the connector into Sentinel via manual testing.

_Note Azure Functions is added as an optional connector due to the three minute limitations associated with the CCF API poller configurations.

[joshua-acklin-cyera]

Update query parameteters

[joshua-acklin-cyera]

@microsoft-github-policy-service agree company="Cyera Inc"

[joshua-acklin-cyera]

Azure Functions is added as an optional connector due to the three minute limitations associated with the CCF API poller configurations.

[v-shukore]

Hi @joshua-acklin-cyera,
Could you please confirm whether the connectors that were added are CCF connectors or FunctionApp connectors? This clarification will help us proceed with the appropriate testing steps and ensure that the folder structure is corrected based on the connector type.
Additionally, I noticed there are two ZIP files with different versions included. Since this is the initial release of the solution, please retain only the 3.0.0 ZIP file as the official solution version. You can consolidate all relevant contents into the 3.0.0 version—there is no need to maintain two separate versions at this stage.
Also, please update the release notes to reflect the correct version and ensure that only the 3.0.0 version is retained in this file.
Thank you!!

[kostiantyn-yevdiukhin-cyera]

Hi @v-shukore,
I am sorry for the delay, we tried to add missing components and allign with the guidelines.

1. We have both CCF and Azure Function connectors, to give customer more flexibility and ensure customers with a lot of data will be able to sync.
2. Per your request I have removed 3.0.3 and put the latest version in 3.0.0.
3. Same here, Release notes updated to 3.0.0.
   Thank you,
   Costya

[v-shukore]

Hi @joshua-acklin-cyera,
Please update the "Name" and "ID" fields in all files related to the CCF connector. Ensure that the Name and ID values are same across all files.
Additionally, please provide screenshots showing the Function App connector in a running state, including invocation logs, as well as the CCF connector.
Thanks!!

[paul-brettle-cyera]

Some screenshots for the Azure Function connector and the CCF one showing them operating and generating events into the tables. Please note that both connector drop the events into the same tables, so any screenshots of the events in the tables are common for both connectors.

[dj-friedman]

Hi @joshua-acklin-cyera, Please update the "Name" and "ID" fields in all files related to the CCF connector. Ensure that the Name and ID values are same across all files. Additionally, please provide screenshots showing the Function App connector in a running state, including invocation logs, as well as the CCF connector. Thanks!!

@v-shukore, which files are you referring to specifically with regard to Name and ID values?

Cc @kostiantyn-yevdiukhin-cyera

[v-shukore]

Hi @davidjfriedman @joshua-acklin-cyera, In the following CCF connector files "CyraDSPM_connectordefinition, CyeraDSPM_ConnectorDefinitionFunctions.json, DCR, and pollinconfig" some attributes such as name, ID, location, kind, and title are missing. These need to be updated accordingly. Here is an example screenshot below.

Thanks!

[kostiantyn-yevdiukhin-cyera]

@v-shukore thank you for pointing to the exact location. Please clarify if it's ok to keep those name generation mechanism inside the mainTemplate.json? Thank you.

[v-shukore]

Hi @kostiantyn-yevdiukhin-cyera,
once you update those items in all the files and repackage the solution using the V3 tool, it will automatically update the maintemplate.json file, so there's no need to do it manually.

Additionally, please review the following points:

The path in the data file is listed as "Data Connectors/CyeraDSPM_CCF/CCFAppDC.json", but the CCFAppDC.json file does not exist in this solution. Instead, include the CyeraDSPM_ConnectorDefinitionCCF.json file. Also, correct version of data file to 3.0.0.

The CyeraDSPM_ConnectorDefinitionCCF.json file contains both the dataConnectorDefinition and metadata. However, the connector metadata lists Microsoft as both the author and support contact (as shown in the screenshot), whereas the SolutionMetadata file lists the support contact as Partner.

Once all corrections are complete, please repackage the solution and commit the changes.

Thanks!

[kostiantyn-yevdiukhin-cyera]

Hi team, I believe secrets scanner Gtihub action has some issues with disk space. Can you please take a look?

[v-shukore]

Hi @joshua-acklin-cyera, we are checking the issue once resolve it will update here. Thanks!!