-
Notifications
You must be signed in to change notification settings - Fork 2.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Created a new tool for creating Incidents with email #6409
Conversation
@v-mchatla - Request your help for the approval. |
@rushriva : Please have a look and provide an update. Thanks! |
2 similar comments
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
8 similar comments
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
@rushriva : Please have a look and provide an update. Thanks! |
Hi @samikroy - Thank you for this content. Based on the functionality I see this is automation playbook and can we move this to Playbook folder, so that we can get into Content hub subsequently. While moving, can you please add following elements, so that it will be ready for content hub
|
@samikroy : Please address the @anki-narravula comments. |
@anki-narravula @v-spadarthi - Please have a look at the updated code and share your reviews ! |
Hi @manishkumar1991, @samikroy has responded on your comments please check and respond accordingly. Thanks. |
Hi @manishkumar1991, please provide your feedback. Thanks. |
Hi @manishkumar1991, @samikroy has responded on your comments please check and respond accordingly. Thanks. |
checking |
Please address comments given by @anki-narravula regarding the use of "managed service identity " while making azure sentinel connection in playbook . @v-atulyadav : Readme file changes has been taken care with minor correction needed, but first comments mentioned by anki is still not addressed . |
@samikroy These comments still not addressed, can you please make the changes |
Hi @samikroy, please addressed comments above. Thanks |
Hi @samikroy, could you please take a look at the above comments. Thanks |
Hi @samikroy, I would appreciate if you could take a look at the above comments Thanks. |
@v-atulyadav & @manishkumar1991 - Have fixed the mentioned ones. |
"properties": { | ||
"displayName": "[variables('AzureSentinelConnection')]", | ||
"customParameterValues": {}, | ||
"api": { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Deployment is failing due to missing entry mentioned below:
After custom Parameters:
Kindly add.
"parameterValueType": "Alternative",
this will enable the deployment to install workflow as managed by service identity.
Note: Before submitting the PR, kindly test the deployment in your environment.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@samikroy is this done? Please confirm
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hello ,
after line number 58 you need to make the changes, you didn't get lost, that why I marked the comment at line 58.
Changes mentioned above are needs to be added in Microsoft.Web/connections of sentinel connection not in office 365 connection.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@v-atulyadav Waiting for @samikroy to complete the changes properly
@samikroy :As PR approver, We can only suggest you good practice, so that good quality content gets merged in our branch. I see that if you can scroll up and see that Anki from our team, has already told you on the first day of the PR itself, and mentioned what needs to be changed. If proper action has been taken at that time, we could not have gone back and forth too much.
Thanks |
Hi @samikroy, please respond on remaining fixes suggested by Anki. Thanks |
@v-atulyadav - Have address the comments. Please let me know for any further changes . |
Hi @manishkumar1991, @samikroy has responded to comments please check. Thanks |
@samikroy , , Changes are not done, as asked . |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
approved
@manishkumar1991 , @v-atulyadav , @v-dvedak - Thank you for the your time throughout the PR timeline with the detailed reviews till the approval & merge. |
commit 27f02d17c5516dab768afda28edd82e6ab25d215 Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com> Date: Tue Mar 14 20:15:52 2023 -0700 Squashed commit of the following: commit 137d60b0108b297faa722982fc587bb241b1012c Merge: c8c8b6d82 7e13ac1fc Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com> Date: Tue Mar 14 07:47:14 2023 -0700 Merge branch 'Azure:master' into master commit 7e13ac1fcb778f2c3c3b2fdc3753a7e3aa11151d Merge: ce8280925 7cea6315b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 18:31:01 2023 +0530 Merge pull request #7549 from Azure/v-rbajaj/ciscouscciscomeraki Updating CiscoUCS and Cisco Meraki commit ce8280925c2b9ab93c0e675c17a46778bdc97498 Merge: efe120329 46bbf1324 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 17:24:47 2023 +0530 Merge pull request #7546 from Azure/v-rbajaj/azureactivedirectorysolution Repackaging Azure Active Directory commit efe12032972be7a40463e8a2d4e3d87c14946d65 Merge: ee655784a fb0ebb098 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 16:56:13 2023 +0530 Merge pull request #7441 from Azure/v-rbajaj/ISCBind Update in data connector and parser commit 46bbf1324b1a0c6c71357548afea99478e214156 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 16:44:48 2023 +0530 repackaged with changes in data connector commit 7cea6315be9f72785888bcecbb98709ab55e2531 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 16:19:11 2023 +0530 Fixing UI changes commit ee655784a87594ae3fc688d37ff7ee6126a5a3b3 Merge: 78ef61068 60011ccf9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 16:05:06 2023 +0530 Merge pull request #7552 from Azure/v-vdixit/parsers-update-solutions Updating UI for Blackberry CylancePROTECT Solution commit 78ef61068a07390604612c8d38202a5b09a7d613 Merge: 7955d224b 9bfc71d94 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 15:48:37 2023 +0530 Merge pull request #7285 from Azure/v-vdixit/KQLvalidationsMultipleSolutions Hunting Queries KQL validations for Multiple Solutions commit 7955d224b1722197786493f4399b22976871410d Merge: 066e04543 36990e71f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 15:47:32 2023 +0530 Merge pull request #7536 from BenjiSec/AutomationHealthv2 Automation Health workbook update commit 60011ccf917cb1f23f98a16df0cdb82a6b369f4b Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 14 15:09:34 2023 +0530 Updating UI for BlackberryCyclaneProtect commit 066e04543942bee44141f0915ec5d18b7a17ad52 Merge: fa775f897 05859e0d1 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 14:51:08 2023 +0530 Merge pull request #7517 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.2 Adding eventGroupingSettings to Analytic Rules commit fa775f8975ff22f838cdf92432c4973a38eafdf6 Merge: 5e67ce911 0096bcf65 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Tue Mar 14 14:40:36 2023 +0530 Merge pull request #7481 from Azure/v-sabiraj-TemplatespecsolutionforGCPBigquery Solution creation for GCP big query commit 9bfc71d94933e7e26cbb081dcdb7a313eac2bb64 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 14:35:52 2023 +0530 updating skipvalidations commit 39e68c9759a48e594d00a8301cb566a2b7788d5a Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 14:17:59 2023 +0530 Fixing Cisco Meraki createui commit cd9dde7a137a42d4ee1c2ab5a4c879122a134907 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 14:17:23 2023 +0530 Updating SkipValidationsTemplates.json commit c94056df6b38e12e70c1b16fced5522ebae7d48a Merge: e2ce52b9f 5e67ce911 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 13:58:40 2023 +0530 Merge branch 'master' into v-vdixit/KQLvalidationsMultipleSolutions commit 5e67ce9115f3ffd959fdcc87e44a1f7f18d00c66 Merge: 6221850ff 5d54f6a3d Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 12:39:16 2023 +0530 Merge pull request #6409 from samikroy/patch-32 Created a new tool for creating Incidents with email commit 0376a9db312494eb9cd019859ea4bbf8f75d83ac Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 11:52:44 2023 +0530 Updating CiscoUCS and Cisco Meraki commit 5d54f6a3d217cf084f47f2b1d2cec3de203fce3e Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Tue Mar 14 11:45:49 2023 +0530 Update azuredeploy.json commit e2ce52b9f4cd038ef16af2341f3519f3362c892a Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 11:36:23 2023 +0530 Update UseragentExploitPentest.yaml commit 28d41367f87e6082fc468fb0308fd6e122878759 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 11:27:41 2023 +0530 Update GCPDNSRareErrors.yaml commit 7690d7814e1d7e7d3d102a350ad5f3bb2e11d220 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 11:27:02 2023 +0530 Update GCPDNSRareDomains.yaml commit 6221850ffa51ac38ec68b4c7cfd0ce6034b4280e Merge: ce0557ac6 dcfba6b67 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 11:01:45 2023 +0530 Merge pull request #7288 from Azure/v-vdixit/kql-validation-tests-for-hunting-queries Fixed failing KQL validations for Hunting Queries commit 5ee092c3ca1506e5f81a23e176d15f8d67368d44 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 14 10:51:36 2023 +0530 updating hunting queries commit dcf74d8e1c23ad55db1c4afc39b075eeb3144c75 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Mon Mar 13 16:05:28 2023 +0530 Repackaging Azure Active Directory commit ce0557ac60726ac30e189bc0146640723984f3b1 Merge: 5c9360596 4059a2c34 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 13 15:34:47 2023 +0530 Merge pull request #7523 from Azure/v-vdixit/parsers-update-solutions Repackaging Solutions with Parser instructions Update commit 5c93605969b1dd18337f00806563d2ed0b69c171 Merge: e968e5f22 bada46d1a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 13 15:31:22 2023 +0530 Merge pull request #7521 from Azure/v-rbajaj/RepackagingSolutions Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki commit bada46d1a3f187e985d38c13ca456d963eba6f36 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Mon Mar 13 14:46:55 2023 +0530 Rolled back changes in main template commit e968e5f22301f00bbd9c6abcd85e130b65f5ea10 Merge: 35058f509 6cca7e5eb Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 13 12:26:24 2023 +0530 Merge pull request #7354 from Azure/v-vdixit/Data-connector-Updates Data Connector and Parser Update commit 6cca7e5ebcb2b3feef74c182a1f192f5253145c1 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 13 10:58:58 2023 +0530 updating createUI commit 35058f5091c83da4fecf65354c70ff35a8783909 Author: danielohfeld <98688758+danielohfeld@users.noreply.github.com> Date: Sun Mar 12 17:42:11 2023 +0200 Feature/danielohfeld/add readme to gcp terraform (#7541) * add support for cloudwatch * add readme for GCP connector scripts * minor fixes commit 14a610b53d79bdc9d682b83c3b19f719a3561b54 Merge: db2e74dbe 1e52eb46a Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Sun Mar 12 10:54:07 2023 +0200 Merge pull request #7540 from Azure/asim/update-pa-web-parser asim/update-pa-web-parser commit 1e52eb46ad8cc2ca884c203b5935cb90947a4981 Author: github-actions[bot] <> Date: Sun Mar 12 08:38:48 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit aec60f35687f112559737bc8dc7004a12abecf0b Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Sun Mar 12 10:35:35 2023 +0200 asim/update-pa-web-parser commit c8c8b6d826999051728f3a2efde3c3b528f990a0 Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com> Date: Sat Mar 11 00:04:13 2023 +0530 Rubrik sentinel playbook update (#8) * Updated readme file by adding prerequisite about to deploy dependent playbook first. * Fixed the inline comments suggested by Reviewer. * Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1 --------- Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> commit 655ee3cf22b59fd5bfa0f9d47e719edc7ab372d7 Merge: 4faee01b9 d2161119e Author: Ben Meadowcroft <ben@benmeadowcroft.com> Date: Fri Mar 10 10:31:17 2023 -0800 Merge branch 'master' of https://github.com/rubrikinc/Azure-Sentinel commit 4faee01b9aa034e953fc59afaf510fd50ad2bd3e Author: Ben Meadowcroft <ben@benmeadowcroft.com> Date: Fri Mar 10 10:27:52 2023 -0800 Squashed commit of the following: commit 2d1031699e5718207b83fcd80e8ec654a758fdbb Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> Date: Fri Mar 10 13:39:24 2023 +0530 Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1 commit 4183453f81478807876d7363254517c1ddb0e1fc Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> Date: Fri Mar 3 21:55:44 2023 +0530 Fixed the inline comments suggested by Reviewer. commit fe95a41a4843e89659691e5a6970648467a25f5f Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> Date: Tue Feb 28 12:24:11 2023 +0530 Updated readme file by adding prerequisite about to deploy dependent playbook first. commit d2161119e3d333f1885053b5712d536ede41d025 Merge: ad957cce6 db2e74dbe Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com> Date: Fri Mar 10 10:04:56 2023 -0800 Merge remote-tracking branch 'upstream/master' commit db2e74dbe16108af7e366b6afcd5a42f5cc468c2 Merge: 562c13712 c8b59da62 Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Fri Mar 10 19:16:09 2023 +0530 Merge pull request #7530 from Azure/v-sabiraj-fixingWorkbooksbugs Fixing Bugs for Workbooks commit 36990e71f65c488335f39fe937e6c03b51b57c15 Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com> Date: Fri Mar 10 12:15:57 2023 +0000 update to automationheatlth.json removing link localization commit f03026b51f95480f0d8fa65dba80c31daa78e886 Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com> Date: Fri Mar 10 11:54:37 2023 +0000 Automation Health workbook update commit 562c137120dabe36243fd15e08db200bd2c06d84 Merge: 4fe9115e1 fa6c5025e Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 10 17:20:27 2023 +0530 Merge pull request #7516 from Azure/v-rbajaj/virustotalsolution Repackaging VirusTotal commit c8b59da628ef3816369d9bf511ac9636e6907b46 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 10 16:42:40 2023 +0530 Updating maintempate and UI for workbook commit 61964eb1494ae39797814f87e2a7f79517195ec4 Merge: be0b737d9 4fe9115e1 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 10 16:29:38 2023 +0530 Merge branch 'master' into v-sabiraj-fixingWorkbooksbugs commit fa6c5025e21bbecaecbdaefeb5b759483389c3e0 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Fri Mar 10 13:43:02 2023 +0530 updated zip commit 4fe9115e1e913ef3388b3fc86a418a767f71fd88 Merge: a90f55966 147d26cd5 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Fri Mar 10 12:06:18 2023 +0530 Merge pull request #7341 from tduarte14/patch-1 Show the actual Role and Fix InitiatingUser commit a90f559669869d4d958af14f97cc07252aad068b Merge: 1fda18445 78dba38e9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 10 11:27:56 2023 +0530 Merge pull request #7430 from danymello/vectra_detect_analytics_fix fix typo and remove URL mapping commit 4059a2c3476388cebc9a5902b9cadedd384c822d Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Fri Mar 10 10:45:44 2023 +0530 updating connector desciption commit d14f7604518fd503a148b379bff90b7b4cb67cf8 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Fri Mar 10 10:32:30 2023 +0530 Updated data connector description commit 1fda184457f19e9269d028390c0d37628c24dcc1 Merge: 1817a14a8 8bbe8fd03 Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 12:49:54 2023 -0800 Merge pull request #7531 from Azure/pebryan/3_9_2023_AiTMDetection Added new AiTM detection commit 8bbe8fd0335ffd3b739588740f6c6325ca526ffb Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 12:30:03 2023 -0800 Added extra data connector commit 40ff5715ecca2c0b98ad00a70449d541ac2763ac Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:37:34 2023 -0800 Added exclusion for unknown ASIM parameter commit 73aa25e03620d2f626bebf66f570d956880aeedb Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:15:11 2023 -0800 Updated alert desc format commit 72f1018cbdf89c7487665424a4f39ec2da7ee0f2 Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:02:00 2023 -0800 Added new AiTM detection commit 1817a14a86c15cb0b3a2177c528dcab872524a59 Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:00:43 2023 -0800 Remove file accidently pushed to master commit ca7b27fa1ac55a2e2c0342e40323e1da7acc65ac Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 10:53:55 2023 -0800 Added new AiTM detection commit be0b737d9bcc9ef9a90c29501818e8a4ed3d44c3 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Thu Mar 9 23:38:25 2023 +0530 Fixing Bugs for Workbooks commit a02ce85c96f162de6f8cc06f07a53b6525f0ff7f Merge: 156b3e8bb 7587e5653 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Thu Mar 9 18:25:22 2023 +0200 Merge pull request #7526 from Azure/asim/add-registry-generation Update convertKqlFunctionYamlToArmTemplate.yaml commit 7587e5653d71c287acd784443c68498e5896736d Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Thu Mar 9 17:15:23 2023 +0200 Update convertKqlFunctionYamlToArmTemplate.yaml commit fb0ebb098e6929bb4eeca308d461032de4b623b5 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 17:22:19 2023 +0530 Updated CreateUI and repackaged commit 8a1ca5661878578ef6309ced0870eb2734ab7a58 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 9 15:33:29 2023 +0530 Repackaging Solutions with Parser instructions update commit 0dfa042269ebb7389bcddb6257f9178dc644c9e3 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 15:18:37 2023 +0530 validation fixes and necessary changes commit 5714200c8ce499f47d9cabfce271712c44f06a78 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 14:08:59 2023 +0530 fixing validations and discarding createui changes commit f3113391c3eb033119d9ad5e79652b4542006a06 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 12:55:59 2023 +0530 Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki commit 156b3e8bb2abdcc554f0cf7df205c93aa3e8fb8f Merge: b49fa6474 8d7e5d6ec Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 9 12:35:52 2023 +0530 Merge pull request #7519 from Azure/Fixingworkspacedetection Fixingworkspacedetection commit 2bc53fda6699c7b3405af9619ceb274b29609b45 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 9 12:16:42 2023 +0530 Updating workbooks text commit 78f7d5392a8fcb8a35ded57ba1b701a460ccf618 Merge: 4fd02df11 79308d0fe Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 9 12:02:48 2023 +0530 Merge branch 'master' into v-vdixit/Data-connector-Updates commit b49fa6474962a5968ecc62f17058846e98e991d6 Author: treyperrone <trey.perrone@gmail.com> Date: Thu Mar 9 01:20:42 2023 -0500 Update MaliciousOAuthApp_O365AttackToolkit.yaml (#7397) * Update MaliciousOAuthApp_O365AttackToolkit.yaml Current rule uses an older defaults for `Consent.Full` that was deprecated from the file: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/2231565f576e2d655cb9444ffed7309374c454a5/static/index.html#L29 The NEW defaults generated in Nov 2020 are here: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/master/template.conf old values to match on: `"offline_access","contacts.read","user.read","mail.read","notes.read.all","mailboxsettings.readwrite","Files.ReadWrite.All"` NEW values to match on: `"offline_access contacts.read user.read mail.read mail.send files.readWrite.all files.read files.read.all openid profile"` The current detection relies on finding `mailboxsettings` in LN32 https://github.com/Azure/Azure-Sentinel/blob/c6dce9c3aa4d4b4d02423ac4eb5a6b677a39e432/Solutions/Azure%20Active%20Directory/Analytic%20Rules/MaliciousOAuthApp_O365AttackToolkit.yaml#L32 which means anyone that downloads the current O365 attack toolkit and runs it with the defaults settings will NOT trigger the alert (this drove us crazy for a few hours testing). * move dynamic array to single array and match on has_any. remove search for single value * update description verbiage * updates from github conversation with join and new entity with appdisplayname for investigation graph * remove orphaned csv of app list, since its embedded in the KQL now. this is better for versioning as well; changes to CSV currently dont prompt a new version on customer side * put feeds knownapps.csv back, add in analrule, mv-aply consentFull * bump version 1.0.1 --> 1.1.0 per @devikamehra --------- Co-authored-by: Meena Kumari Chatla <v-mchatla@microsoft.com> commit 79308d0fef99fb3f054b0f7b521bc600ee709189 Author: v-amolpatil <107389644+v-amolpatil@users.noreply.github.com> Date: Thu Mar 9 11:02:51 2023 +0530 Get-GeoFromIpAndTagIncident Playbook Issue fix (#7513) * updated code * updated code as per review comment commit 87e64dda6408ba6329b1f9bb9df7eb7684a2df6f Author: v-rbajaj <120547590+v-rbajaj@users.noreply.github.com> Date: Wed Mar 8 17:30:20 2023 +0530 Repackaging Microsoft 365 (#7515) * Repackaging Microsoft 365 * Updated zip file * updated data connector description * Updated zip commit 05859e0d14b2defc50dc4c4015d3ce352fe4cba9 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 8 11:55:47 2023 +0100 Adding eventGroupingSettings to Analytic Rules commit 0096bcf653a17a64e2da284a2fb1c0b248ebf7b5 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 8 15:55:42 2023 +0530 Updated UI description commit f525e87aa8bfda8c44520b4b81a111642a2673db Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 8 15:38:21 2023 +0530 Repacking VirusTotal commit 13a9298f0425bc7e71d3ffa6fdae49320a49a212 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 8 14:59:08 2023 +0530 Updating package by adding variables for connector commit 1eb52deee6fb3e22b95bb9abeabd2486210ea6c9 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Wed Mar 8 14:47:18 2023 +0530 Fixing bugs for Recorded future workbook (#7511) commit 6125f4ece5d0604bda40725b03dfc7df0271bc03 Merge: 50804e482 7498bb905 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 8 09:56:58 2023 +0200 Merge pull request #7514 from TristankMS/patch-3 Update vimAuthenticationEmpty.yaml commit 62e232e7ced3df4265d7b6b9a0ce8152aa532cae Merge: b21194605 330f50fc2 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 8 12:21:53 2023 +0530 Merge branch 'master' into v-sabiraj-TemplatespecsolutionforGCPBigquery commit 50804e482c0ebc426966cca1821ab66951914f4f Author: Shain <45466083+shainw@users.noreply.github.com> Date: Tue Mar 7 22:29:10 2023 -0800 Update SharePoint_Downloads_byNewUserAgent.yaml (#7509) * Update SharePoint_Downloads_byNewUserAgent.yaml Adjusted to 8d due to perf considerations and doing 8d as query should be comparing the last day to the previous 7 days to the last day, otherwise it will miss like actions for the same day one week ago, Change order of operation for checking time, do not need to summarize the min/max time in the RecentActivity portion of the query as it is timebound to the last day, do not need to check the time frame of the results as again it is already time bound to last day after the join back to get full details of identified events, removing old entity mapping rows, bringing through proper account entity fields * Update SharePoint_Downloads_byNewUserAgent.yaml change to make_set commit 330f50fc2d6f70704573695830408e2a8ccfbbb0 Author: René Ammerlaan <78021472+rene-ammerlaan@users.noreply.github.com> Date: Wed Mar 8 06:53:27 2023 +0100 Rename Auth0 custom table to match documentation (#7319) * Rename Auth0 custom table to match documentation * Update Auth0Connector zip file * Add union to Auth0 KQL parser file commit 7498bb90581ab1ff9d88adee33456f7bf3a71ade Author: Tristan Kington <TristankMS@users.noreply.github.com> Date: Wed Mar 8 16:47:41 2023 +1100 Update vimAuthenticationEmpty.yaml And convert to more standard datatable syntax commit ef907ed8296d6281c2eb19a2020c2a4723bb5caa Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com> Date: Wed Mar 8 04:52:52 2023 +0000 Fixed deprecated command columnifexists (#7402) Replaced deprecated columnifexists with column_ifexists Replaced make_set(<<FIELD>>) with make_set(<<FIELD>>,200), so the max items is defined as it's recommended. commit 01b5cd6e77860d3aeba51472002b33b09eaf5006 Author: v-prasadboke <117061676+v-prasadboke@users.noreply.github.com> Date: Tue Mar 7 18:34:10 2023 +0530 Microsoft 365 Defender Repackaging (#7487) commit 6219ee4b02aed5a94cdfd90ae41ab7ae6cac071c Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Tue Mar 7 18:30:50 2023 +0530 Repackage Checkpoint (#7510) commit 9e510072288231b5c456be7db18478c7e2973665 Author: Samik Roy <samik.n.roy@gmail.com> Date: Tue Mar 7 17:53:10 2023 +0530 Update azuredeploy.json commit 8ac6c8ea08b314fa6ae70007ac78bef6530f67e1 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 7 17:23:50 2023 +0530 Updating solarwindsInventory commit e790f566351ec95cb2c8f6a1492ecec08f534f28 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 7 16:53:37 2023 +0530 Updated Dataconnector description commit 3865112a4c604b59b74dccc6397403dac8b4048e Merge: 7e250a338 9a6ae5c88 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Tue Mar 7 15:59:42 2023 +0530 Merge pull request #7446 from Azure/v-vdixit/Palo-alto-logo-update Palo Alto Solutions Logo update commit 9a6ae5c88286b6a34536068454c8eeb6b5f103ae Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Mar 7 15:43:04 2023 +0530 Revert "Update PaloAltoNetworks.json" This reverts commit 41ef2bf2448a63efdea35c671f750c797443e56a. commit 41ef2bf2448a63efdea35c671f750c797443e56a Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Mar 7 15:42:14 2023 +0530 Update PaloAltoNetworks.json commit 2e11f3da21087243f4e57d7c0b8bda7f3194646c Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 13:52:17 2023 +0530 updating logo commit 4fd02df11117cada5f2345cdb4351b4696efffc0 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 13:03:20 2023 +0530 updating whitespace commit 7e250a338b2c9a67914547b4991de4d731bb1f3f Author: Meena Kumari Chatla <108806639+v-mchatla@users.noreply.github.com> Date: Tue Mar 7 12:12:43 2023 +0530 Rapid7InsightVM IcM(370102413) Fix (#7508) * Last Scan Details Fix Last Scan Details Fix * Fixed keyError for last_scan_date attribute * Added log to print recieved event * Removed the logging Removed the logging --------- Co-authored-by: v-rucdu <v-rucdu@microsoft.com> commit c2f74b070315b32f8745195984df6a625d754a23 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 11:04:41 2023 +0530 updating alignment commit 84be7b8805a856c45415573e20b219eb306c30c2 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 10:42:28 2023 +0530 updating note commit 44196df0f6ee93c7ab3c43524bd585a00b0d9d79 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 7 10:31:33 2023 +0530 Updating OCIdestinations commit df6b93c3927babc6225b6239c05615d73491c0ea Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 10:27:47 2023 +0530 update2.0.2 zip commit b07ee23f81b1d2d7f51cfb77b730c1396a0a3072 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 10:27:07 2023 +0530 updating connector description commit 8c6e1afb5ac713a33509ad30cd80e60e6aea3f5c Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 7 10:25:01 2023 +0530 Updating OracleDBAudit commit 415b148a1495d240e1cecbfc44f5637b0ac85e3d Merge: 4fa7945e3 0c6e3462e Author: Shain <45466083+shainw@users.noreply.github.com> Date: Mon Mar 6 18:08:31 2023 -0800 Merge pull request #7494 from Azure/shainw-FixMessageParse Update ssh_potentialBruteForce.yaml commit 0c6e3462e3984aa10d16b455883e03e1fd640bdf Author: Shain <45466083+shainw@users.noreply.github.com> Date: Mon Mar 6 17:39:54 2023 -0800 Update ssh_potentialBruteForce.yaml Updating description to explain how we are attempting to bring through single valued arrays for use in entity mappings. commit 33fb191f9638f9fe948a7d690476e4f34d31b1c2 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 6 23:28:57 2023 +0530 updating description of connector commit 0d025d55539c660d04cdac19de7150b61e3af028 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 6 17:28:52 2023 +0530 updating version commit 2d80a8c821bb2085897144daae50460b724ee997 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 6 17:02:28 2023 +0530 updating connector commit 4fa7945e3a48d1eba3d293ca6811b07e5b7b85da Merge: b6824cad6 3d674c9fa Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 15:17:12 2023 +0530 Merge pull request #7363 from Azure/v-vdixit/file-path-update Detections files path update commit 8d7e5d6ecd89ae8db70a12fdfbc30bc591942718 Merge: 180f25a8a c5387e48f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 15:03:32 2023 +0530 Merge pull request #7432 from treyperrone/patch-3 Update to add `where` IP find/search commit b6824cad6fefa2c99ae55c1bb0472e71fd77498a Merge: 880c2e932 2cb1f93a1 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 14:32:10 2023 +0530 Merge pull request #7343 from daspiker/IslandSentinelSolution Island sentinel solution commit 880c2e9321d86b66955c9e86a450d9d854583904 Merge: 96e7babc5 3b16a888a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 14:10:53 2023 +0530 Merge pull request #7498 from Azure/v-sabiraj-updatingflaresolution Updating package for Flare commit 3b16a888ab45b5da8dcb1a1968739d1edd358e58 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Mon Mar 6 11:27:23 2023 +0530 Updating version commit 139c54cf65df9a31496f3a47330f3dd49a86892b Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Mon Mar 6 11:16:25 2023 +0530 Updating package for Flare commit 96e7babc572e0d9225fb8efd35f6781fcb599a30 Merge: b4e21be1d e4b232cd2 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 11:11:54 2023 +0530 Merge pull request #7497 from Azure/origins/rahul/EntityPlaybooks Entity Playbooks commit 73ea96dd186906dd4408d0b745456fc5b594d013 Author: Samik Roy <samik.n.roy@gmail.com> Date: Mon Mar 6 10:54:26 2023 +0530 Update azuredeploy.json commit b4e21be1d7fb0b83cb76556f5fbcfade4a4fdf0d Merge: 0d1b98bf7 04546475b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 10:48:21 2023 +0530 Merge pull request #7476 from nickt444/tvm hide table only available to private preview commit 0d1b98bf7b250ba44261e1f1f416dad7caa28be3 Merge: bc84294cd fdd23459a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 10:47:29 2023 +0530 Merge pull request #7436 from syed-loginsoft/cybersixgill-aa-offerid-update Cybersixgill Actionable Alerts offerid update commit 04546475be17994bdb22fc8795ac079b3325b235 Author: Nick Torkington <nicktork@microsoft.com> Date: Mon Mar 6 15:07:01 2023 +1100 reverting version to 1.0.0 commit bc84294cded4ff5c20ea3588c9ed2a378615dd16 Merge: 1086aa87b 2d4e0266b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 09:04:28 2023 +0530 Merge pull request #7420 from Flared/v-sabiraj-AddingAnalyticRuleforFlare V sabiraj adding analytic rulefor flare commit 1086aa87b2305d91ab07bcdb0910ee01bf00e326 Merge: 6bfcebb28 53f5f98a5 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Sun Mar 5 23:35:46 2023 +0200 Merge pull request #7495 from Azure/asim/fix-auth-deploy asim/fix-auth-deploy commit 53f5f98a5a677f87f87337e63112c114070f4b27 Author: github-actions[bot] <> Date: Sun Mar 5 21:12:58 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit 79c3388ed0cad6fc918ff9d55592f2135c88dd69 Author: Ofer Shezaf <github@shezaf.com> Date: Sun Mar 5 23:09:48 2023 +0200 Update getModifiedASimSchemas.ps1 commit 004ebb6dfed43834715bf5ea2828a01d5b97cbf4 Author: Ofer Shezaf <github@shezaf.com> Date: Sun Mar 5 22:26:21 2023 +0200 asim/fix-auth-deploy commit 526c66810149b9d8f7c875958535ad56ed76edb5 Author: Shain <45466083+shainw@users.noreply.github.com> Date: Sat Mar 4 14:29:49 2023 -0800 Update ssh_potentialBruteForce.yaml adding resourceid commit 36374313d6eebaa3ca86c29e906bf5911607f578 Author: Shain <45466083+shainw@users.noreply.github.com> Date: Sat Mar 4 14:14:18 2023 -0800 Update ssh_potentialBruteForce.yaml high alert counts in some situations and fixing the regex to properly grab the fields when SyslogMessage ends with characters right after ssh2 commit c5387e48f233e5c5ddc19ac3647610199672681e Author: treyperrone <trey.perrone@gmail.com> Date: Fri Mar 3 22:58:39 2023 -0500 add new entity of deleted resource for analyst view commit d2cbca01fd651e210be81eeea59e57063d2934a9 Author: treyperrone <trey.perrone@gmail.com> Date: Fri Mar 3 22:49:21 2023 -0500 swap slicker dynamic expansion from @v-atulyadav, bump version from 1.0.5 --> 1.0.6 commit ad957cce63699d6f3d6b7080bb4dbd249db0105a Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com> Date: Fri Mar 3 22:37:48 2023 +0530 Rubrik sentinel playbook update (#7) * Updated readme file by adding prerequisite about to deploy dependent playbook first. * Fixed the inline comments suggested by Reviewer. --------- Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> commit 3d674c9fac6a914596a04d708593a0aa63f4beb4 Merge: 7f7f9a0e4 6bfcebb28 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Fri Mar 3 20:06:07 2023 +0530 Merge branch 'master' into v-vdixit/file-path-update commit 7f7f9a0e43e63318cee55824442a36d538afecb3 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Fri Mar 3 20:01:00 2023 +0530 Updating AWS_CredentialHijack.yaml commit 6bfcebb289dd7400ff910f60662d6bad9e23e255 Merge: 0ea15f6a4 cf9031e24 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 16:37:07 2023 +0530 Merge pull request #7468 from Azure/v-rbajaj/AzureActiveeDirectory Repackaging Azure Active Directory commit 0ea15f6a4ceb70ceb2ebcabfc6f2f0b04607c3f1 Merge: cc977d5ab cd867f54b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 16:28:29 2023 +0530 Merge pull request #7464 from Azure/v-prasadboke-mongodb MongoDB Repackaging commit cf9031e24e9950b0f099d0af2306d089291595be Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 3 16:20:44 2023 +0530 Update 2.0.8.zip commit cd867f54bb93420ffb7f81d2924f98bd37351a1e Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 3 16:13:04 2023 +0530 Update 2.0.2.zip commit cc977d5abb9ecb6be59945778ed676b8802943fe Merge: 2b74991d0 695900736 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 15:59:53 2023 +0530 Merge pull request #7450 from Azure/v-rbajaj/VirusTotal Repackaging VirusTotal commit d4c9545c3e84f2ce4331f2047318446106a3910c Author: Samik Roy <samik.n.roy@gmail.com> Date: Fri Mar 3 15:37:45 2023 +0530 Update azuredeploy.json commit 67261aac41bd24a03102071733bd4495b35c3dd7 Author: Samik Roy <samik.n.roy@gmail.com> Date: Fri Mar 3 15:31:56 2023 +0530 Update Readme.md commit 2b74991d0dbbb9e765a6baea9359b2eef7ceef92 Merge: 0ef04dce3 2f87b2293 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 14:37:20 2023 +0530 Merge pull request #7463 from Azure/v-prasadboke-marklogic Marklogic Repackaging commit 147d26cd5021f711908d586b092a961c677e1f5b Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com> Date: Fri Mar 3 08:44:44 2023 +0000 Removed "| where TimeGenerated >= ago(2h)" Reverted the change of using 2h for supposed loopback issue as requested by reviewer. commit 0ef04dce3c14b142022e3775325fef3bb5db120f Merge: 2f0ce42e2 388d35226 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 13:51:14 2023 +0530 Merge pull request #7489 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.1 Updates to 2.1.1 solution package commit 388d352268f869a623c214ae5ff1c17454405ec6 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Fri Mar 3 08:59:36 2023 +0100 Updates to 2.1.1 solution package In the 2.1.1. package, older archives were included. Removed those. commit 2f0ce42e2bfe669f700b1ee5955a466e29e7bd91 Merge: 86a9c70dc 2ace3d8f4 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 12:47:51 2023 +0530 Merge pull request #7406 from Azure/v-vdixit/file-path-update2 File path update for detections commit 86a9c70dcd66d63a7f171f654a8021abfd7308cb Merge: 998b567c0 b5c8ed537 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 12:25:49 2023 +0530 Merge pull request #7398 from yangsa666/patch-1 Adding hint.strategy=native to support more partitions commit 998b567c0df55a2c4300cc1eec7e054a1deeba48 Merge: 076f67032 180f25a8a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 12:24:22 2023 +0530 Merge pull request #7360 from Azure/Fixingworkspacedetection Update to Workspace deletion attempt from an infected device commit 076f67032e67f6eb6cf64f28efcff971da693ff7 Merge: 0d2bb23a6 437d79f0c Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 11:27:19 2023 +0530 Merge pull request #7479 from pensivepaddle/patch-4 Update AcscEssential8.json commit 4e64cfa9fce05564a574b35bf9b59a961560247c Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 15:25:07 2023 +1100 added conditional display of parameters commit bca15f16d9e28bae2e87dc0217594314b2d6f2f0 Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 10:11:39 2023 +1100 update version number commit ba6b41ef940fcb3bee4c78fe06e09af360256248 Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 08:27:54 2023 +1100 including fix from PR #7479 commit 08bc20f2e1ef884e3ae9cbbc0a6a0d8d0ea7fab0 Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 08:22:10 2023 +1100 reverting fromTemplateId commit 0d2bb23a6e0dc2d8c237845fe9ed14df43ebd9bf Merge: 401a4603e 3dc17e1c8 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 17:47:59 2023 +0530 Merge pull request #7458 from Azure/v-sabiraj-MicrosoftDefenderforEndpoint Adding playbooks to MDE Solution commit 3dc17e1c85962647767e47f46620addb4573d28b Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Thu Mar 2 17:28:14 2023 +0530 Updated data connector description commit b21194605446cdc67dfc5002d5ba2b1bb5119ab7 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Thu Mar 2 16:02:02 2023 +0530 SOlution cfreation for GCP big query commit 219c86db6b3976cf202083a26f20b3dcc8f43ee4 Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 21:23:33 2023 +1100 updated version number (again) commit 401a4603e70040e1d37bfe864bf2c822af88442b Merge: e6e492dce 481f8462f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 15:38:44 2023 +0530 Merge pull request #7405 from Azure/v-vdixit/file-path-update1 File Path update for detections Files commit e6e492dce2aa075f14f9005f21b206f5ab843c68 Merge: cffb8bd70 97f4f1194 Author: tamirkopitz <91939884+tamirkopitz@users.noreply.github.com> Date: Thu Mar 2 12:08:11 2023 +0200 Merge pull request #7478 from Azure/dvir-ms-patch-1 add SENTINEL_AGENT_GUID commit 437d79f0c362fc9702dd27e4b7871b006d891eca Author: pensivepaddle <104833713+pensivepaddle@users.noreply.github.com> Date: Thu Mar 2 11:00:42 2023 +0100 Update AcscEssential8.json Mix up between two queries/titles, "Restrict Admin Privileges" vs "Multi-factor Authentication" commit 97f4f11941bc95110c3a698eff1c7fdd38cac656 Author: Dvir Naim <106969883+dvir-ms@users.noreply.github.com> Date: Thu Mar 2 11:52:44 2023 +0200 add SENTINEL_AGENT_GUID commit 11ce471fe6cc30e06b680c46e49994a9e014a594 Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 20:13:01 2023 +1100 updated workbook version number commit cffb8bd70ba73966b5ff90d32bcf08c6027e58ea Merge: 140ae0546 aa6f3500b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 14:21:24 2023 +0530 Merge pull request #7376 from Azure/v-sabiraj-SolutionUpdateforShodan Template Spec Solution for Shodan commit 140ae05464972ceba27485b0cfa92a6e94401a55 Merge: b8887b568 20b10d524 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 14:20:51 2023 +0530 Merge pull request #7364 from Azure/v-prasadboke-AtlassianJiraAudit-DataConnector Atalassian jira audit repackaging commit b8887b568612d12f32e2fc5ae93a56bf21676556 Merge: 6b61a8de1 695b59d91 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Thu Mar 2 13:11:09 2023 +0530 Merge pull request #7477 from Azure/v-atulyadav/dynamic365 Repackage Dynamic 365 commit 20b10d52435b88c2f9af7077b38f97bf9245c74e Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Thu Mar 2 12:52:35 2023 +0530 Update 2.0.3.zip commit 079ac1880d0d5a8aea67016dde696d919e046feb Merge: 979bd03d8 6b61a8de1 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 2 12:46:17 2023 +0530 Merge branch 'master' into v-vdixit/Palo-alto-logo-update commit 695b59d91d608a76413daafcbb5557f0f7ed437c Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Thu Mar 2 12:45:50 2023 +0530 Repackage Dynamic 365 commit 8c6835d9ba2abf8b49f7bbbea066cb8931b7bcef Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 17:58:16 2023 +1100 updated version number commit 94bc711c3f91f977eb14ff334b2c7128f63fb0cc Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 17:34:05 2023 +1100 updated fromTemplateId commit 6b61a8de18aec450e2e40d09f0fd09ca559612bc Merge: 57c8e8a80 bd66e5508 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 11:36:38 2023 +0530 Merge pull request #7448 from Azure/entrustidentity [SOAR] New Solution Entrust commit e60da2809733972966ac56d3532118720d0ea8b9 Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 16:59:00 2023 +1100 hide table only available to private preview commit 979bd03d887b0cbfaaace74826cc183f0e01b881 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 2 10:29:38 2023 +0530 update 2.0.4 zip commit 57c8e8a80ccc76d33a01f771b10e2c29723e40a5 Merge: 7e4a93b42 83d09eadb Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Thu Mar 2 10:16:42 2023 +0530 Merge pull request #7473 from Azure/v-vdixit/logo-update Package Update for Google Solution commit 7e4a93b425391bc34957fa9cfb40b2d90dd390f7 Merge: a75b98838 0f2c9966b Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Thu Mar 2 09:35:11 2023 +0530 Merge pull request #7457 from cwatson-cat/patch-20 Update Dynamics 365 md desc to add Docs link commit 83d09eadb85d36c1682466a5d36f2781954142d6 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 2 00:24:47 2023 +0530 Package Update for Google Solution commit a75b98838ac3dfc719939a13fe4343c32d9a837a Merge: cb984b00c 63fe5ba59 Author: Shain <45466083+shainw@users.noreply.github.com> Date: Wed Mar 1 08:34:24 2023 -0800 Merge pull request #7461 from Azure/shainw-ReduceResults Update gte_6_FailedLogons_10m.yaml commit cb984b00cd513e0f944a11f1c3a5e5b9c60c24d6 Merge: cf19c76a6 0410a5375 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 17:57:32 2023 +0200 Merge pull request #7472 from Azure/asim/periodical-fixes-Mar-1-23 Periodical parser updates, Mar 1st 2023 commit 0410a537583eff0b20c2e423b6d4e44641e4d567 Author: github-actions[bot] <> Date: Wed Mar 1 15:41:25 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit 28698d2c7b5bc58f4fb95668f4e104f7dbbeccfa Merge: fa1e9c60d cf19c76a6 Author: github-actions[bot] <> Date: Wed Mar 1 15:41:19 2023 +0000 Merge remote-tracking branch 'origin/master' into asim/periodical-fixes-Mar-1-23 commit cf19c76a601bc00168433f93083c328062d840f2 Merge: dcfc519c9 0159db782 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 17:35:05 2023 +0200 Merge pull request #7471 from Azure/ASimDnsActivityLogs-CustomTable-Adding-Fields adding fields that were recently added to ASimDnsActivityLogs table schema commit 0159db7821c4c4b046617dcc6e69c3c10621559d Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 20:32:31 2023 +0530 adding fields that were recently added to ASimDnsActivityLogs table schema commit dcfc519c9f07f1a646736673e4948ca2631cab53 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 16:48:58 2023 +0200 Update ASimDnsNative.yaml commit 01d0abfd0891c5d3749e402c0b39a32d063123b8 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 16:48:39 2023 +0200 Update vimDnsNative.yaml commit fa1e9c60dea9497588fd72e3f92d5a522faa0b41 Author: Ofer Shezaf <github@shezaf.com> Date: Wed Mar 1 16:46:45 2023 +0200 NetworkSessionMicrosoftWindowsEventFirewall commit 25c15c6a55a108f81aea4d6cb3e9d0718033f858 Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Wed Mar 1 18:52:50 2023 +0530 Update stats.md (#7451) commit 886c5469c01638e83221e4e1fadff410d9762f81 Merge: d38456d91 fb51c392c Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 18:39:53 2023 +0530 Merge pull request #7419 from txhaflaire/master Jamf Protect for Microsoft Sentinel - v2.1.1 commit cf2be34436a6bfe71325b11f5667a62836f9e8cc Merge: 48b2623b6 d38456d91 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 18:25:48 2023 +0530 Merge branch 'master' into v-rbajaj/AzureActiveeDirectory commit fb51c392c8e18851576a7c94af3a8fc8735be243 Merge: 5d09db59a d38456d91 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 13:53:35 2023 +0100 Merge branch 'Azure:master' into master commit d38456d91683b98392e125cd5ca923bc50388230 Merge: 0d1754cf1 775998089 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 18:16:43 2023 +0530 Merge pull request #7445 from Azure/PhishingwithCSLandNetworkSession Detecting potential phishing in correlation with CSL & Network Session logs commit aa6f3500b3b7a07137f777796d7e0838236e6a0b Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 18:15:23 2023 +0530 Updating description and entities commit 0d1754cf154cd728b1ae47b825bb5cf04ff02e64 Merge: 830230a5a 412e0667e Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 18:07:59 2023 +0530 Merge pull request #7469 from Azure/arm-ttk-failing-when-solutionname-has-space Fixed Arm-ttk issue when solution name has space commit 5d09db59a3561eebda22ccea3ccc5474c006ea0e Merge: c1043379b 830230a5a Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 13:17:24 2023 +0100 Merge branch 'Azure:master' into master commit 2ace3d8f45d06a29587eb609335a12672094244b Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 17:36:16 2023 +0530 version update commit 412e0667ec85ea2280eac4d5886023d995cf2e34 Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Wed Mar 1 17:16:39 2023 +0530 fixed issue on space in solution name commit 830230a5a5faf976be72d703366ff0c4b7949325 Merge: ec2492fbf ce5d3c9fd Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 13:05:50 2023 +0200 Merge pull request #7462 from Azure/ASimDnsActivityLogs-parser-bug-fix Duplicate column error fixed - DvcScopeId commit 124aa72e59f7f4b429df341d23d80e1118673111 Merge: 9a009669b 8347232f9 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 16:33:27 2023 +0530 Merge branch 'master' into v-sabiraj-SolutionUpdateforShodan commit 48b2623b6060ecde9ae4a330086bd3f62a6c72d7 Merge: f960cf697 ec2492fbf Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 16:21:37 2023 +0530 Merge branch 'master' into v-rbajaj/AzureActiveeDirectory commit f960cf697dd4ddbdffeb9b93e700a45199c9d564 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 16:17:48 2023 +0530 Repackaging Azure Active Directory commit ec2492fbf8917cdda1e96386a88f405a893b580d Merge: 7e5fcbdd4 270f7dcf9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 16:16:20 2023 +0530 Merge pull request #7425 from Azure/v-vdixit/logo-update Google Cloud Solutions Logo Update commit 7e5fcbdd4df667131778ac5be580803166d4804e Merge: 76813497b a827835a1 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 16:13:32 2023 +0530 Merge pull request #7453 from Azure/v-sabiraj-fixingsocplaybook Updating Soc Process package to fix bug commit c1043379b72765da69124e5a24c99ad357e4a289 Merge: ccd10f67f 49aeb72a7 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 11:28:34 2023 +0100 Merge branch 'master' of https://github.com/txhaflaire/Azure-Sentinel commit ccd10f67f2c11314948c1f4601044b2c0b48fbc2 Merge: 30d3368dd 76813497b Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 11:28:22 2023 +0100 Merge remote-tracking branch 'upstream/master' commit 49aeb72a742ff998db913fc539408b760a8959c8 Merge: 0d57ec6e2 76813497b Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 11:05:31 2023 +0100 Merge branch 'Azure:master' into master commit 76813497ba5fab84d2ad4be0f9733a09268f5c8c Merge: 8347232f9 25c804a39 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 15:32:17 2023 +0530 Merge pull request #7465 from Azure/v-sabiraj-UpdatingMetadataforbugs Updating Workbook Metadata to fix gallery bugs commit 0d57ec6e258c7dbf78f26af2f1c120f6813c1067 Merge: 9c633f503 8347232f9 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 10:50:48 2023 +0100 Merge branch 'Azure:master' into master commit 25c804a39c842be4e74aba5fca7acf90a8c4d4c6 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 15:17:50 2023 +0530 Updating Workbook Metadata to fix gallery bugs commit 8347232f97f00439e3ab67d392548a9bea53c0c4 Merge: da1cf1041 377fc2478 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 15:02:51 2023 +0530 Merge pull request #7413 from Azure/v-vdixit/file-path-update3 File path update for hunting queries commit 481f8462f0d73c9a59717fe8684b9921e5d4dbe5 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 14:59:54 2023 +0530 Version updates commit f3a462bef7ae545de0bc987d8adce3e4300073af Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 14:59:38 2023 +0530 MongoDB Repackaging commit 695900736431b3a799ef5565746716aa4562bc19 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 14:43:11 2023 +0530 Updated the 2.0.3 zip commit d613fb75da68e31787962aa88b292466854f39f4 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 14:42:57 2023 +0530 updating Version commit 377fc2478efc1ab4fddb2f22eee9c5fb65e1ffc3 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 13:55:05 2023 +0530 updating path1 commit aa8d29521c578568b4408ac98e95cd696d1502f9 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 13:50:52 2023 +0530 updating AzureVirtualNetworkSubnets commit f65038e41184f5bb13c679842dcf5fadf2654d78 Merge: 7052b594f da1cf1041 Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 13:39:11 2023 +0530 Merge branch 'master' into v-prasadboke-AtlassianJiraAudit-DataConnector commit a827835a10539e698e9aa79d9338e538c706d555 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 13:24:24 2023 +0530 Update azuredeploy.json commit 50f8752d3fa6e3be7030635a25e21f2468662440 Merge: bd419b31f da1cf1041 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 13:24:16 2023 +0530 Merge branch 'master' into v-sabiraj-fixingsocplaybook commit ce5d3c9fde86ad1164452558829843280922d9ce Merge: cdb47b58e ac2f6b0b5 Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 13:22:56 2023 +0530 Merge branch 'ASimDnsActivityLogs-parser-bug-fix' of https://github.com/Azure/Azure-Sentinel into ASimDnsActivityLogs-parser-bug-fix commit cdb47b58e46b4c5db2a97e4fdd520624b319d1d4 Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 13:22:49 2023 +0530 added DvcScopeId to the table schema commit 9c633f503f6085d5e597be7667705ec092541503 Merge: 30d3368dd da1cf1041 Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Wed Mar 1 13:21:53 2023 +0530 Merge branch 'master' into pr/7419 commit 2f87b2293ff173dae30dac4c7364efa0a28f48db Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 13:13:23 2023 +0530 Marklogic Repackaging commit 7052b594f65b43b138c1898f881c8ee4a35ebe86 Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 12:32:40 2023 +0530 Update SkipValidationsTemplates.json commit da1cf1041bdb21a5aaa1c417f52ffe869f241377 Merge: 990ced0af 0b848f0d6 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 12:32:20 2023 +0530 Merge pull request #7282 from Azure/v-vdixit/KQL-validation-fix-for-Multiple-solutions KQL validations for Hunting Queries for multiple solutions commit 4bae5b91ad091217a2fe458d32fd2835c676d8ec Merge: fbb7d0292 990ced0af Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 12:31:02 2023 +0530 Merge branch 'master' into v-rbajaj/VirusTotal commit ac2f6b0b574fc6467f328bbc6e39a6baff9bafcf Author: github-actions[bot] <> Date: Wed Mar 1 06:54:15 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit c216ee722f88074679a8057ee8c1f80692a8bccd Merge: 0199a1662 990ced0af Author: github-actions[bot] <> Date: Wed Mar 1 06:54:03 2023 +0000 Merge remote-tracking branch 'origin/master' into ASimDnsActivityLogs-parser-bug-fix commit 0199a16622d35eb1a74e3c72f303f5a86068c246 Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 12:20:50 2023 +0530 Updated Parser Version and Date commit e7da9fef44a2c45356a8fd934db3908612db7f6d Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 12:15:14 2023 +0530 Duplicate column error fixed - DvcScopeId commit a1d177f6022d0a30b74f72b4157a7e004f74aaf9 Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 12:15:00 2023 +0530 Update SkipValidationsTemplates.json commit 990ced0af085cde6851121ce0b87f2cf82daefca Merge: 3286c9d6b 94e2d842e Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 12:13:56 2023 +0530 Merge pull request #7427 from Azure/origin/users/rahul/gcp-bigquery GCP BigQuery Solution - Initial commit of solution commit 3286c9d6b1adc0f6b898dfc8db9d304cd1e23170 Merge: be6b439e8 755249e24 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 12:12:32 2023 +0530 Merge pull request #7294 from Azure/v-ntripathi/MaturityModelWorkbookFixIcM361952128 Fixing workbook query regarding IcM and repackaging commit fbb7d0292348703f1432812fd6ddc9b573bcea91 Merge: 21c4bed62 be6b439e8 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 11:23:56 2023 +0530 Merge branch 'master' into v-rbajaj/VirusTotal commit be6b439e8e818d30b4cfb1fdd30ed06b2623304a Merge: c74e7d817 0407141d9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:43:37 2023 +0530 Merge pull request #6925 from referefref/patch-1 Update AWSBucketAPILogs-SuspiciousDataAccessToS3BucketsfromUnknownIP.… commit c74e7d8174da6482f81e22d73ea20c8dfce4be5d Merge: 5d7077c80 3391ffcaf Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:38:08 2023 +0530 Merge pull request #7035 from ep3p/patch-6 Fix fields in Solution/Analytic Rule AzureADRoleManagementPermissionGrant.yaml commit 755249e24ac7dec840264a1b527c70e90464402e Merge: 4460ad5b2 ce1b0e7e2 Author: Meena Kumari Chatla <v-mchatla@microsoft.com> Date: Wed Mar 1 10:31:27 2023 +0530 Merge branch 'master' into v-ntripathi/MaturityModelWorkbookFixIcM361952128 commit 5d7077c805af8ccd6b1b364e4dad95eba89390ea Merge: ce1b0e7e2 1757d5974 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:30:45 2023 +0530 Merge pull request #7456 from Azure/arm-ttk-issue-fix Arm ttk issue fix commit 427a8a26d9c17a24a5d097d17ad1419223f20731 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 10:28:56 2023 +0530 Update IPEntity_DuoSecurity.yaml commit 89bc51c158b9996b8225c184d2e0dd4f20904de6 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 10:28:01 2023 +0530 Updating AdFind_Usage.yaml commit 63fe5ba5903964d432fc97940bf77add1e24b67a Author: Shain <45466083+shainw@users.noreply.github.com> Date: Tue Feb 28 20:34:53 2023 -0800 Update gte_6_FailedLogons_10m.yaml commit ce1b0e7e2889918b66533a1333f1a47b1aaf14d1 Merge: 3af5f111d 3101d404a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:03:43 2023 +0530 Merge pull request #7431 from briandelmsft/ii_wb_patch Investigation Insights - ASIM Support commit bd66e550853991f9681d826e8ac528abcd33b827 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Wed Mar 1 09:04:33 2023 +0530 Update azuredeploy.json commit 6f3d5a72da513412e73a218d98d45359aee64666 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Wed Mar 1 09:01:46 2023 +0530 Update readme.md commit 775998089da2b6925873939014e57a34abf8496e Author: gitj121 <jekurien@microsoft.com> Date: Tue Feb 28 13:16:07 2023 -0800 Description changes commit 37428ea2fffae391739b7910cc04c3c8ab010d50 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 00:14:23 2023 +0530 version update commit 04ad400e02cc6a3b158b67f417885671d68b2101 Author: gitj121 <jekurien@microsoft.com> Date: Tue Feb 28 10:41:11 2023 -0800 Adding with changes commit a074d314c8b6bfab71c17afd61d68ab79da0dfa1 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 00:06:08 2023 +0530 version update commit 3c519a323bae6df8ad7ae41ee83f09393f518dd4 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Feb 28 23:39:59 2023 +0530 Adding playbooks to MDE Solution commit 0f2c9966b5db3e22e2edc7455fc20b74dedf75df Author: Catherine Watson <cwatson@microsoft.com> Date: Tue Feb 28 08:38:50 2023 -0800 Update Dynamics 365 md desc to add Docs link @prtanej commit 187ec26e2b36bcc1cae47ff4c684bcf4ac326b55 Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com> Date: Tue Feb 28 22:00:59 2023 +0530 Updated readme file by adding prerequisite about to deploy dependent playbook first. (#6) Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> commit 1757d5974db4a74761e73a0672b74d9a802bc132 Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Tue Feb 28 21:55:35 2023 +0530 Update arm-ttk-validations.yaml commit f34c5e317318410318bbf548945bc4bece3a4f2c Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Tue Feb 28 21:45:23 2023 +0530 updated code commit 3af5f111d58b65d8bb8293f4aacc97776b617bc8 Merge: 68516975f 95df0ea8f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Feb 28 20:02:16 2023 +0530 Merge pull request #7240 from Azure/v-atulyadav/Windows-Security-Events Repackage Windows Security Events commit bd9ad173269557a88012a581d698d39b829c9deb Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Tue Feb 28 19:50:49 2023 +0530 updated code to fix commit 0277f7811b1193e424d656315b07bcc75db350a7 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Feb 28 19:31:27 2023 +0530 updating whitespaces commit bd419b31f0ebd30e32bc11bc96053b162b396c73 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Feb 28 19:14:27 2023 +0530 Update azuredeploy.json commit c1061631e5fb01469ff8ab3e771573f1baa7bb9f Merge: debfbfb03 68516975f Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:54:19 2023 +0530 Merge branch 'master' into v-vdixit/file-path-update3 commit debfbfb03103d7006097b1f4eb8f8278e7de7357 Merge: cf4145086 adf2433a8 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Feb 28 18:46:12 2023 +0530 Updating description commit cf414508699f640f8ba5dbe174538e1fe100715f Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Feb 28 18:37:37 2023 +0530 updating quotes commit fdd23459a6420076e93c300c1683b9e1ae401cbb Author: syed-loginsoft <sdawood@loginsoft.com> Date: Tue Feb 28 18:19:56 2023 +0530 Updated version from 2.0.0 to 2.0.1 commit adf2433a8d963bdd1765c714c8f64e11c97a250c Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:03:56 2023 +0530 Updating ProofpointPODHighScoreAdultValue.yaml commit d9c8af19ebadb591c6cabc46acceba17fdd6cfe9 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:02:53 2023 +0530 Updating UseragentExploitPentest commit 76dac88a9155c3e2287ea44b4dcb4d283e71750b Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:01:57 2023 +0530 Updating quotes commit 491992bb8f26ec824b69297d7225cc0ab633ea1f Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:01:32 2023 +0530 updating quotes commit 99a4f75d27c6ba71193083d1bc3cfb40a634e3bf Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 17:59:55 2023 +0530…
commit 137d60b0108b297faa722982fc587bb241b1012c Merge: c8c8b6d82 7e13ac1fc Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com> Date: Tue Mar 14 07:47:14 2023 -0700 Merge branch 'Azure:master' into master commit 7e13ac1fcb778f2c3c3b2fdc3753a7e3aa11151d Merge: ce8280925 7cea6315b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 18:31:01 2023 +0530 Merge pull request #7549 from Azure/v-rbajaj/ciscouscciscomeraki Updating CiscoUCS and Cisco Meraki commit ce8280925c2b9ab93c0e675c17a46778bdc97498 Merge: efe120329 46bbf1324 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 17:24:47 2023 +0530 Merge pull request #7546 from Azure/v-rbajaj/azureactivedirectorysolution Repackaging Azure Active Directory commit efe12032972be7a40463e8a2d4e3d87c14946d65 Merge: ee655784a fb0ebb098 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 16:56:13 2023 +0530 Merge pull request #7441 from Azure/v-rbajaj/ISCBind Update in data connector and parser commit 46bbf1324b1a0c6c71357548afea99478e214156 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 16:44:48 2023 +0530 repackaged with changes in data connector commit 7cea6315be9f72785888bcecbb98709ab55e2531 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 16:19:11 2023 +0530 Fixing UI changes commit ee655784a87594ae3fc688d37ff7ee6126a5a3b3 Merge: 78ef61068 60011ccf9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 16:05:06 2023 +0530 Merge pull request #7552 from Azure/v-vdixit/parsers-update-solutions Updating UI for Blackberry CylancePROTECT Solution commit 78ef61068a07390604612c8d38202a5b09a7d613 Merge: 7955d224b 9bfc71d94 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 15:48:37 2023 +0530 Merge pull request #7285 from Azure/v-vdixit/KQLvalidationsMultipleSolutions Hunting Queries KQL validations for Multiple Solutions commit 7955d224b1722197786493f4399b22976871410d Merge: 066e04543 36990e71f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 15:47:32 2023 +0530 Merge pull request #7536 from BenjiSec/AutomationHealthv2 Automation Health workbook update commit 60011ccf917cb1f23f98a16df0cdb82a6b369f4b Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 14 15:09:34 2023 +0530 Updating UI for BlackberryCyclaneProtect commit 066e04543942bee44141f0915ec5d18b7a17ad52 Merge: fa775f897 05859e0d1 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 14:51:08 2023 +0530 Merge pull request #7517 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.2 Adding eventGroupingSettings to Analytic Rules commit fa775f8975ff22f838cdf92432c4973a38eafdf6 Merge: 5e67ce911 0096bcf65 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Tue Mar 14 14:40:36 2023 +0530 Merge pull request #7481 from Azure/v-sabiraj-TemplatespecsolutionforGCPBigquery Solution creation for GCP big query commit 9bfc71d94933e7e26cbb081dcdb7a313eac2bb64 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 14:35:52 2023 +0530 updating skipvalidations commit 39e68c9759a48e594d00a8301cb566a2b7788d5a Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 14:17:59 2023 +0530 Fixing Cisco Meraki createui commit cd9dde7a137a42d4ee1c2ab5a4c879122a134907 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 14:17:23 2023 +0530 Updating SkipValidationsTemplates.json commit c94056df6b38e12e70c1b16fced5522ebae7d48a Merge: e2ce52b9f 5e67ce911 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 13:58:40 2023 +0530 Merge branch 'master' into v-vdixit/KQLvalidationsMultipleSolutions commit 5e67ce9115f3ffd959fdcc87e44a1f7f18d00c66 Merge: 6221850ff 5d54f6a3d Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 12:39:16 2023 +0530 Merge pull request #6409 from samikroy/patch-32 Created a new tool for creating Incidents with email commit 0376a9db312494eb9cd019859ea4bbf8f75d83ac Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 14 11:52:44 2023 +0530 Updating CiscoUCS and Cisco Meraki commit 5d54f6a3d217cf084f47f2b1d2cec3de203fce3e Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Tue Mar 14 11:45:49 2023 +0530 Update azuredeploy.json commit e2ce52b9f4cd038ef16af2341f3519f3362c892a Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 11:36:23 2023 +0530 Update UseragentExploitPentest.yaml commit 28d41367f87e6082fc468fb0308fd6e122878759 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 11:27:41 2023 +0530 Update GCPDNSRareErrors.yaml commit 7690d7814e1d7e7d3d102a350ad5f3bb2e11d220 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 14 11:27:02 2023 +0530 Update GCPDNSRareDomains.yaml commit 6221850ffa51ac38ec68b4c7cfd0ce6034b4280e Merge: ce0557ac6 dcfba6b67 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Mar 14 11:01:45 2023 +0530 Merge pull request #7288 from Azure/v-vdixit/kql-validation-tests-for-hunting-queries Fixed failing KQL validations for Hunting Queries commit 5ee092c3ca1506e5f81a23e176d15f8d67368d44 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 14 10:51:36 2023 +0530 updating hunting queries commit dcf74d8e1c23ad55db1c4afc39b075eeb3144c75 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Mon Mar 13 16:05:28 2023 +0530 Repackaging Azure Active Directory commit ce0557ac60726ac30e189bc0146640723984f3b1 Merge: 5c9360596 4059a2c34 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 13 15:34:47 2023 +0530 Merge pull request #7523 from Azure/v-vdixit/parsers-update-solutions Repackaging Solutions with Parser instructions Update commit 5c93605969b1dd18337f00806563d2ed0b69c171 Merge: e968e5f22 bada46d1a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 13 15:31:22 2023 +0530 Merge pull request #7521 from Azure/v-rbajaj/RepackagingSolutions Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki commit bada46d1a3f187e985d38c13ca456d963eba6f36 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Mon Mar 13 14:46:55 2023 +0530 Rolled back changes in main template commit e968e5f22301f00bbd9c6abcd85e130b65f5ea10 Merge: 35058f509 6cca7e5eb Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 13 12:26:24 2023 +0530 Merge pull request #7354 from Azure/v-vdixit/Data-connector-Updates Data Connector and Parser Update commit 6cca7e5ebcb2b3feef74c182a1f192f5253145c1 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 13 10:58:58 2023 +0530 updating createUI commit 35058f5091c83da4fecf65354c70ff35a8783909 Author: danielohfeld <98688758+danielohfeld@users.noreply.github.com> Date: Sun Mar 12 17:42:11 2023 +0200 Feature/danielohfeld/add readme to gcp terraform (#7541) * add support for cloudwatch * add readme for GCP connector scripts * minor fixes commit 14a610b53d79bdc9d682b83c3b19f719a3561b54 Merge: db2e74dbe 1e52eb46a Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Sun Mar 12 10:54:07 2023 +0200 Merge pull request #7540 from Azure/asim/update-pa-web-parser asim/update-pa-web-parser commit 1e52eb46ad8cc2ca884c203b5935cb90947a4981 Author: github-actions[bot] <> Date: Sun Mar 12 08:38:48 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit aec60f35687f112559737bc8dc7004a12abecf0b Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Sun Mar 12 10:35:35 2023 +0200 asim/update-pa-web-parser commit c8c8b6d826999051728f3a2efde3c3b528f990a0 Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com> Date: Sat Mar 11 00:04:13 2023 +0530 Rubrik sentinel playbook update (#8) * Updated readme file by adding prerequisite about to deploy dependent playbook first. * Fixed the inline comments suggested by Reviewer. * Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1 --------- Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> commit 655ee3cf22b59fd5bfa0f9d47e719edc7ab372d7 Merge: 4faee01b9 d2161119e Author: Ben Meadowcroft <ben@benmeadowcroft.com> Date: Fri Mar 10 10:31:17 2023 -0800 Merge branch 'master' of https://github.com/rubrikinc/Azure-Sentinel commit 4faee01b9aa034e953fc59afaf510fd50ad2bd3e Author: Ben Meadowcroft <ben@benmeadowcroft.com> Date: Fri Mar 10 10:27:52 2023 -0800 Squashed commit of the following: commit 2d1031699e5718207b83fcd80e8ec654a758fdbb Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> Date: Fri Mar 10 13:39:24 2023 +0530 Fixed the URL -> URLs related validation error in the Playbook template and make updated solution with the version 2.0.1 commit 4183453f81478807876d7363254517c1ddb0e1fc Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> Date: Fri Mar 3 21:55:44 2023 +0530 Fixed the inline comments suggested by Reviewer. commit fe95a41a4843e89659691e5a6970648467a25f5f Author: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> Date: Tue Feb 28 12:24:11 2023 +0530 Updated readme file by adding prerequisite about to deploy dependent playbook first. commit d2161119e3d333f1885053b5712d536ede41d025 Merge: ad957cce6 db2e74dbe Author: git-rubrik <120683256+git-rubrik@users.noreply.github.com> Date: Fri Mar 10 10:04:56 2023 -0800 Merge remote-tracking branch 'upstream/master' commit db2e74dbe16108af7e366b6afcd5a42f5cc468c2 Merge: 562c13712 c8b59da62 Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Fri Mar 10 19:16:09 2023 +0530 Merge pull request #7530 from Azure/v-sabiraj-fixingWorkbooksbugs Fixing Bugs for Workbooks commit 36990e71f65c488335f39fe937e6c03b51b57c15 Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com> Date: Fri Mar 10 12:15:57 2023 +0000 update to automationheatlth.json removing link localization commit f03026b51f95480f0d8fa65dba80c31daa78e886 Author: Benjamin Kovacevic <61513156+BenjiSec@users.noreply.github.com> Date: Fri Mar 10 11:54:37 2023 +0000 Automation Health workbook update commit 562c137120dabe36243fd15e08db200bd2c06d84 Merge: 4fe9115e1 fa6c5025e Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 10 17:20:27 2023 +0530 Merge pull request #7516 from Azure/v-rbajaj/virustotalsolution Repackaging VirusTotal commit c8b59da628ef3816369d9bf511ac9636e6907b46 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 10 16:42:40 2023 +0530 Updating maintempate and UI for workbook commit 61964eb1494ae39797814f87e2a7f79517195ec4 Merge: be0b737d9 4fe9115e1 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 10 16:29:38 2023 +0530 Merge branch 'master' into v-sabiraj-fixingWorkbooksbugs commit fa6c5025e21bbecaecbdaefeb5b759483389c3e0 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Fri Mar 10 13:43:02 2023 +0530 updated zip commit 4fe9115e1e913ef3388b3fc86a418a767f71fd88 Merge: a90f55966 147d26cd5 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Fri Mar 10 12:06:18 2023 +0530 Merge pull request #7341 from tduarte14/patch-1 Show the actual Role and Fix InitiatingUser commit a90f559669869d4d958af14f97cc07252aad068b Merge: 1fda18445 78dba38e9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 10 11:27:56 2023 +0530 Merge pull request #7430 from danymello/vectra_detect_analytics_fix fix typo and remove URL mapping commit 4059a2c3476388cebc9a5902b9cadedd384c822d Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Fri Mar 10 10:45:44 2023 +0530 updating connector desciption commit d14f7604518fd503a148b379bff90b7b4cb67cf8 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Fri Mar 10 10:32:30 2023 +0530 Updated data connector description commit 1fda184457f19e9269d028390c0d37628c24dcc1 Merge: 1817a14a8 8bbe8fd03 Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 12:49:54 2023 -0800 Merge pull request #7531 from Azure/pebryan/3_9_2023_AiTMDetection Added new AiTM detection commit 8bbe8fd0335ffd3b739588740f6c6325ca526ffb Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 12:30:03 2023 -0800 Added extra data connector commit 40ff5715ecca2c0b98ad00a70449d541ac2763ac Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:37:34 2023 -0800 Added exclusion for unknown ASIM parameter commit 73aa25e03620d2f626bebf66f570d956880aeedb Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:15:11 2023 -0800 Updated alert desc format commit 72f1018cbdf89c7487665424a4f39ec2da7ee0f2 Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:02:00 2023 -0800 Added new AiTM detection commit 1817a14a86c15cb0b3a2177c528dcab872524a59 Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 11:00:43 2023 -0800 Remove file accidently pushed to master commit ca7b27fa1ac55a2e2c0342e40323e1da7acc65ac Author: Pete Bryan <peter.bryan@microsoft.com> Date: Thu Mar 9 10:53:55 2023 -0800 Added new AiTM detection commit be0b737d9bcc9ef9a90c29501818e8a4ed3d44c3 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Thu Mar 9 23:38:25 2023 +0530 Fixing Bugs for Workbooks commit a02ce85c96f162de6f8cc06f07a53b6525f0ff7f Merge: 156b3e8bb 7587e5653 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Thu Mar 9 18:25:22 2023 +0200 Merge pull request #7526 from Azure/asim/add-registry-generation Update convertKqlFunctionYamlToArmTemplate.yaml commit 7587e5653d71c287acd784443c68498e5896736d Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Thu Mar 9 17:15:23 2023 +0200 Update convertKqlFunctionYamlToArmTemplate.yaml commit fb0ebb098e6929bb4eeca308d461032de4b623b5 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 17:22:19 2023 +0530 Updated CreateUI and repackaged commit 8a1ca5661878578ef6309ced0870eb2734ab7a58 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 9 15:33:29 2023 +0530 Repackaging Solutions with Parser instructions update commit 0dfa042269ebb7389bcddb6257f9178dc644c9e3 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 15:18:37 2023 +0530 validation fixes and necessary changes commit 5714200c8ce499f47d9cabfce271712c44f06a78 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 14:08:59 2023 +0530 fixing validations and discarding createui changes commit f3113391c3eb033119d9ad5e79652b4542006a06 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Thu Mar 9 12:55:59 2023 +0530 Repackaging BroadcomSymantecDLP, Cisco UCS, CiscoMeraki commit 156b3e8bb2abdcc554f0cf7df205c93aa3e8fb8f Merge: b49fa6474 8d7e5d6ec Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 9 12:35:52 2023 +0530 Merge pull request #7519 from Azure/Fixingworkspacedetection Fixingworkspacedetection commit 2bc53fda6699c7b3405af9619ceb274b29609b45 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 9 12:16:42 2023 +0530 Updating workbooks text commit 78f7d5392a8fcb8a35ded57ba1b701a460ccf618 Merge: 4fd02df11 79308d0fe Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 9 12:02:48 2023 +0530 Merge branch 'master' into v-vdixit/Data-connector-Updates commit b49fa6474962a5968ecc62f17058846e98e991d6 Author: treyperrone <trey.perrone@gmail.com> Date: Thu Mar 9 01:20:42 2023 -0500 Update MaliciousOAuthApp_O365AttackToolkit.yaml (#7397) * Update MaliciousOAuthApp_O365AttackToolkit.yaml Current rule uses an older defaults for `Consent.Full` that was deprecated from the file: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/2231565f576e2d655cb9444ffed7309374c454a5/static/index.html#L29 The NEW defaults generated in Nov 2020 are here: https://github.com/mdsecactivebreach/o365-attack-toolkit/blob/master/template.conf old values to match on: `"offline_access","contacts.read","user.read","mail.read","notes.read.all","mailboxsettings.readwrite","Files.ReadWrite.All"` NEW values to match on: `"offline_access contacts.read user.read mail.read mail.send files.readWrite.all files.read files.read.all openid profile"` The current detection relies on finding `mailboxsettings` in LN32 https://github.com/Azure/Azure-Sentinel/blob/c6dce9c3aa4d4b4d02423ac4eb5a6b677a39e432/Solutions/Azure%20Active%20Directory/Analytic%20Rules/MaliciousOAuthApp_O365AttackToolkit.yaml#L32 which means anyone that downloads the current O365 attack toolkit and runs it with the defaults settings will NOT trigger the alert (this drove us crazy for a few hours testing). * move dynamic array to single array and match on has_any. remove search for single value * update description verbiage * updates from github conversation with join and new entity with appdisplayname for investigation graph * remove orphaned csv of app list, since its embedded in the KQL now. this is better for versioning as well; changes to CSV currently dont prompt a new version on customer side * put feeds knownapps.csv back, add in analrule, mv-aply consentFull * bump version 1.0.1 --> 1.1.0 per @devikamehra --------- Co-authored-by: Meena Kumari Chatla <v-mchatla@microsoft.com> commit 79308d0fef99fb3f054b0f7b521bc600ee709189 Author: v-amolpatil <107389644+v-amolpatil@users.noreply.github.com> Date: Thu Mar 9 11:02:51 2023 +0530 Get-GeoFromIpAndTagIncident Playbook Issue fix (#7513) * updated code * updated code as per review comment commit 87e64dda6408ba6329b1f9bb9df7eb7684a2df6f Author: v-rbajaj <120547590+v-rbajaj@users.noreply.github.com> Date: Wed Mar 8 17:30:20 2023 +0530 Repackaging Microsoft 365 (#7515) * Repackaging Microsoft 365 * Updated zip file * updated data connector description * Updated zip commit 05859e0d14b2defc50dc4c4015d3ce352fe4cba9 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 8 11:55:47 2023 +0100 Adding eventGroupingSettings to Analytic Rules commit 0096bcf653a17a64e2da284a2fb1c0b248ebf7b5 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 8 15:55:42 2023 +0530 Updated UI description commit f525e87aa8bfda8c44520b4b81a111642a2673db Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 8 15:38:21 2023 +0530 Repacking VirusTotal commit 13a9298f0425bc7e71d3ffa6fdae49320a49a212 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 8 14:59:08 2023 +0530 Updating package by adding variables for connector commit 1eb52deee6fb3e22b95bb9abeabd2486210ea6c9 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Wed Mar 8 14:47:18 2023 +0530 Fixing bugs for Recorded future workbook (#7511) commit 6125f4ece5d0604bda40725b03dfc7df0271bc03 Merge: 50804e482 7498bb905 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 8 09:56:58 2023 +0200 Merge pull request #7514 from TristankMS/patch-3 Update vimAuthenticationEmpty.yaml commit 62e232e7ced3df4265d7b6b9a0ce8152aa532cae Merge: b21194605 330f50fc2 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 8 12:21:53 2023 +0530 Merge branch 'master' into v-sabiraj-TemplatespecsolutionforGCPBigquery commit 50804e482c0ebc426966cca1821ab66951914f4f Author: Shain <45466083+shainw@users.noreply.github.com> Date: Tue Mar 7 22:29:10 2023 -0800 Update SharePoint_Downloads_byNewUserAgent.yaml (#7509) * Update SharePoint_Downloads_byNewUserAgent.yaml Adjusted to 8d due to perf considerations and doing 8d as query should be comparing the last day to the previous 7 days to the last day, otherwise it will miss like actions for the same day one week ago, Change order of operation for checking time, do not need to summarize the min/max time in the RecentActivity portion of the query as it is timebound to the last day, do not need to check the time frame of the results as again it is already time bound to last day after the join back to get full details of identified events, removing old entity mapping rows, bringing through proper account entity fields * Update SharePoint_Downloads_byNewUserAgent.yaml change to make_set commit 330f50fc2d6f70704573695830408e2a8ccfbbb0 Author: René Ammerlaan <78021472+rene-ammerlaan@users.noreply.github.com> Date: Wed Mar 8 06:53:27 2023 +0100 Rename Auth0 custom table to match documentation (#7319) * Rename Auth0 custom table to match documentation * Update Auth0Connector zip file * Add union to Auth0 KQL parser file commit 7498bb90581ab1ff9d88adee33456f7bf3a71ade Author: Tristan Kington <TristankMS@users.noreply.github.com> Date: Wed Mar 8 16:47:41 2023 +1100 Update vimAuthenticationEmpty.yaml And convert to more standard datatable syntax commit ef907ed8296d6281c2eb19a2020c2a4723bb5caa Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com> Date: Wed Mar 8 04:52:52 2023 +0000 Fixed deprecated command columnifexists (#7402) Replaced deprecated columnifexists with column_ifexists Replaced make_set(<<FIELD>>) with make_set(<<FIELD>>,200), so the max items is defined as it's recommended. commit 01b5cd6e77860d3aeba51472002b33b09eaf5006 Author: v-prasadboke <117061676+v-prasadboke@users.noreply.github.com> Date: Tue Mar 7 18:34:10 2023 +0530 Microsoft 365 Defender Repackaging (#7487) commit 6219ee4b02aed5a94cdfd90ae41ab7ae6cac071c Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Tue Mar 7 18:30:50 2023 +0530 Repackage Checkpoint (#7510) commit 9e510072288231b5c456be7db18478c7e2973665 Author: Samik Roy <samik.n.roy@gmail.com> Date: Tue Mar 7 17:53:10 2023 +0530 Update azuredeploy.json commit 8ac6c8ea08b314fa6ae70007ac78bef6530f67e1 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 7 17:23:50 2023 +0530 Updating solarwindsInventory commit e790f566351ec95cb2c8f6a1492ecec08f534f28 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Mar 7 16:53:37 2023 +0530 Updated Dataconnector description commit 3865112a4c604b59b74dccc6397403dac8b4048e Merge: 7e250a338 9a6ae5c88 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Tue Mar 7 15:59:42 2023 +0530 Merge pull request #7446 from Azure/v-vdixit/Palo-alto-logo-update Palo Alto Solutions Logo update commit 9a6ae5c88286b6a34536068454c8eeb6b5f103ae Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Mar 7 15:43:04 2023 +0530 Revert "Update PaloAltoNetworks.json" This reverts commit 41ef2bf2448a63efdea35c671f750c797443e56a. commit 41ef2bf2448a63efdea35c671f750c797443e56a Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Mar 7 15:42:14 2023 +0530 Update PaloAltoNetworks.json commit 2e11f3da21087243f4e57d7c0b8bda7f3194646c Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 13:52:17 2023 +0530 updating logo commit 4fd02df11117cada5f2345cdb4351b4696efffc0 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 13:03:20 2023 +0530 updating whitespace commit 7e250a338b2c9a67914547b4991de4d731bb1f3f Author: Meena Kumari Chatla <108806639+v-mchatla@users.noreply.github.com> Date: Tue Mar 7 12:12:43 2023 +0530 Rapid7InsightVM IcM(370102413) Fix (#7508) * Last Scan Details Fix Last Scan Details Fix * Fixed keyError for last_scan_date attribute * Added log to print recieved event * Removed the logging Removed the logging --------- Co-authored-by: v-rucdu <v-rucdu@microsoft.com> commit c2f74b070315b32f8745195984df6a625d754a23 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 11:04:41 2023 +0530 updating alignment commit 84be7b8805a856c45415573e20b219eb306c30c2 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 10:42:28 2023 +0530 updating note commit 44196df0f6ee93c7ab3c43524bd585a00b0d9d79 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 7 10:31:33 2023 +0530 Updating OCIdestinations commit df6b93c3927babc6225b6239c05615d73491c0ea Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 10:27:47 2023 +0530 update2.0.2 zip commit b07ee23f81b1d2d7f51cfb77b730c1396a0a3072 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Mar 7 10:27:07 2023 +0530 updating connector description commit 8c6e1afb5ac713a33509ad30cd80e60e6aea3f5c Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Mar 7 10:25:01 2023 +0530 Updating OracleDBAudit commit 415b148a1495d240e1cecbfc44f5637b0ac85e3d Merge: 4fa7945e3 0c6e3462e Author: Shain <45466083+shainw@users.noreply.github.com> Date: Mon Mar 6 18:08:31 2023 -0800 Merge pull request #7494 from Azure/shainw-FixMessageParse Update ssh_potentialBruteForce.yaml commit 0c6e3462e3984aa10d16b455883e03e1fd640bdf Author: Shain <45466083+shainw@users.noreply.github.com> Date: Mon Mar 6 17:39:54 2023 -0800 Update ssh_potentialBruteForce.yaml Updating description to explain how we are attempting to bring through single valued arrays for use in entity mappings. commit 33fb191f9638f9fe948a7d690476e4f34d31b1c2 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 6 23:28:57 2023 +0530 updating description of connector commit 0d025d55539c660d04cdac19de7150b61e3af028 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 6 17:28:52 2023 +0530 updating version commit 2d80a8c821bb2085897144daae50460b724ee997 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Mon Mar 6 17:02:28 2023 +0530 updating connector commit 4fa7945e3a48d1eba3d293ca6811b07e5b7b85da Merge: b6824cad6 3d674c9fa Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 15:17:12 2023 +0530 Merge pull request #7363 from Azure/v-vdixit/file-path-update Detections files path update commit 8d7e5d6ecd89ae8db70a12fdfbc30bc591942718 Merge: 180f25a8a c5387e48f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 15:03:32 2023 +0530 Merge pull request #7432 from treyperrone/patch-3 Update to add `where` IP find/search commit b6824cad6fefa2c99ae55c1bb0472e71fd77498a Merge: 880c2e932 2cb1f93a1 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 14:32:10 2023 +0530 Merge pull request #7343 from daspiker/IslandSentinelSolution Island sentinel solution commit 880c2e9321d86b66955c9e86a450d9d854583904 Merge: 96e7babc5 3b16a888a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 14:10:53 2023 +0530 Merge pull request #7498 from Azure/v-sabiraj-updatingflaresolution Updating package for Flare commit 3b16a888ab45b5da8dcb1a1968739d1edd358e58 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Mon Mar 6 11:27:23 2023 +0530 Updating version commit 139c54cf65df9a31496f3a47330f3dd49a86892b Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Mon Mar 6 11:16:25 2023 +0530 Updating package for Flare commit 96e7babc572e0d9225fb8efd35f6781fcb599a30 Merge: b4e21be1d e4b232cd2 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 11:11:54 2023 +0530 Merge pull request #7497 from Azure/origins/rahul/EntityPlaybooks Entity Playbooks commit 73ea96dd186906dd4408d0b745456fc5b594d013 Author: Samik Roy <samik.n.roy@gmail.com> Date: Mon Mar 6 10:54:26 2023 +0530 Update azuredeploy.json commit b4e21be1d7fb0b83cb76556f5fbcfade4a4fdf0d Merge: 0d1b98bf7 04546475b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 10:48:21 2023 +0530 Merge pull request #7476 from nickt444/tvm hide table only available to private preview commit 0d1b98bf7b250ba44261e1f1f416dad7caa28be3 Merge: bc84294cd fdd23459a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 10:47:29 2023 +0530 Merge pull request #7436 from syed-loginsoft/cybersixgill-aa-offerid-update Cybersixgill Actionable Alerts offerid update commit 04546475be17994bdb22fc8795ac079b3325b235 Author: Nick Torkington <nicktork@microsoft.com> Date: Mon Mar 6 15:07:01 2023 +1100 reverting version to 1.0.0 commit bc84294cded4ff5c20ea3588c9ed2a378615dd16 Merge: 1086aa87b 2d4e0266b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Mon Mar 6 09:04:28 2023 +0530 Merge pull request #7420 from Flared/v-sabiraj-AddingAnalyticRuleforFlare V sabiraj adding analytic rulefor flare commit 1086aa87b2305d91ab07bcdb0910ee01bf00e326 Merge: 6bfcebb28 53f5f98a5 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Sun Mar 5 23:35:46 2023 +0200 Merge pull request #7495 from Azure/asim/fix-auth-deploy asim/fix-auth-deploy commit 53f5f98a5a677f87f87337e63112c114070f4b27 Author: github-actions[bot] <> Date: Sun Mar 5 21:12:58 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit 79c3388ed0cad6fc918ff9d55592f2135c88dd69 Author: Ofer Shezaf <github@shezaf.com> Date: Sun Mar 5 23:09:48 2023 +0200 Update getModifiedASimSchemas.ps1 commit 004ebb6dfed43834715bf5ea2828a01d5b97cbf4 Author: Ofer Shezaf <github@shezaf.com> Date: Sun Mar 5 22:26:21 2023 +0200 asim/fix-auth-deploy commit 526c66810149b9d8f7c875958535ad56ed76edb5 Author: Shain <45466083+shainw@users.noreply.github.com> Date: Sat Mar 4 14:29:49 2023 -0800 Update ssh_potentialBruteForce.yaml adding resourceid commit 36374313d6eebaa3ca86c29e906bf5911607f578 Author: Shain <45466083+shainw@users.noreply.github.com> Date: Sat Mar 4 14:14:18 2023 -0800 Update ssh_potentialBruteForce.yaml high alert counts in some situations and fixing the regex to properly grab the fields when SyslogMessage ends with characters right after ssh2 commit c5387e48f233e5c5ddc19ac3647610199672681e Author: treyperrone <trey.perrone@gmail.com> Date: Fri Mar 3 22:58:39 2023 -0500 add new entity of deleted resource for analyst view commit d2cbca01fd651e210be81eeea59e57063d2934a9 Author: treyperrone <trey.perrone@gmail.com> Date: Fri Mar 3 22:49:21 2023 -0500 swap slicker dynamic expansion from @v-atulyadav, bump version from 1.0.5 --> 1.0.6 commit ad957cce63699d6f3d6b7080bb4dbd249db0105a Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com> Date: Fri Mar 3 22:37:48 2023 +0530 Rubrik sentinel playbook update (#7) * Updated readme file by adding prerequisite about to deploy dependent playbook first. * Fixed the inline comments suggested by Reviewer. --------- Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> commit 3d674c9fac6a914596a04d708593a0aa63f4beb4 Merge: 7f7f9a0e4 6bfcebb28 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Fri Mar 3 20:06:07 2023 +0530 Merge branch 'master' into v-vdixit/file-path-update commit 7f7f9a0e43e63318cee55824442a36d538afecb3 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Fri Mar 3 20:01:00 2023 +0530 Updating AWS_CredentialHijack.yaml commit 6bfcebb289dd7400ff910f60662d6bad9e23e255 Merge: 0ea15f6a4 cf9031e24 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 16:37:07 2023 +0530 Merge pull request #7468 from Azure/v-rbajaj/AzureActiveeDirectory Repackaging Azure Active Directory commit 0ea15f6a4ceb70ceb2ebcabfc6f2f0b04607c3f1 Merge: cc977d5ab cd867f54b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 16:28:29 2023 +0530 Merge pull request #7464 from Azure/v-prasadboke-mongodb MongoDB Repackaging commit cf9031e24e9950b0f099d0af2306d089291595be Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 3 16:20:44 2023 +0530 Update 2.0.8.zip commit cd867f54bb93420ffb7f81d2924f98bd37351a1e Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Fri Mar 3 16:13:04 2023 +0530 Update 2.0.2.zip commit cc977d5abb9ecb6be59945778ed676b8802943fe Merge: 2b74991d0 695900736 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 15:59:53 2023 +0530 Merge pull request #7450 from Azure/v-rbajaj/VirusTotal Repackaging VirusTotal commit d4c9545c3e84f2ce4331f2047318446106a3910c Author: Samik Roy <samik.n.roy@gmail.com> Date: Fri Mar 3 15:37:45 2023 +0530 Update azuredeploy.json commit 67261aac41bd24a03102071733bd4495b35c3dd7 Author: Samik Roy <samik.n.roy@gmail.com> Date: Fri Mar 3 15:31:56 2023 +0530 Update Readme.md commit 2b74991d0dbbb9e765a6baea9359b2eef7ceef92 Merge: 0ef04dce3 2f87b2293 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 14:37:20 2023 +0530 Merge pull request #7463 from Azure/v-prasadboke-marklogic Marklogic Repackaging commit 147d26cd5021f711908d586b092a961c677e1f5b Author: Tiago Duarte <103927368+tduarte14@users.noreply.github.com> Date: Fri Mar 3 08:44:44 2023 +0000 Removed "| where TimeGenerated >= ago(2h)" Reverted the change of using 2h for supposed loopback issue as requested by reviewer. commit 0ef04dce3c14b142022e3775325fef3bb5db120f Merge: 2f0ce42e2 388d35226 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 13:51:14 2023 +0530 Merge pull request #7489 from txhaflaire/JamfProtect_for_MicrosoftSentinel_v2.1.1 Updates to 2.1.1 solution package commit 388d352268f869a623c214ae5ff1c17454405ec6 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Fri Mar 3 08:59:36 2023 +0100 Updates to 2.1.1 solution package In the 2.1.1. package, older archives were included. Removed those. commit 2f0ce42e2bfe669f700b1ee5955a466e29e7bd91 Merge: 86a9c70dc 2ace3d8f4 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 12:47:51 2023 +0530 Merge pull request #7406 from Azure/v-vdixit/file-path-update2 File path update for detections commit 86a9c70dcd66d63a7f171f654a8021abfd7308cb Merge: 998b567c0 b5c8ed537 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 12:25:49 2023 +0530 Merge pull request #7398 from yangsa666/patch-1 Adding hint.strategy=native to support more partitions commit 998b567c0df55a2c4300cc1eec7e054a1deeba48 Merge: 076f67032 180f25a8a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 12:24:22 2023 +0530 Merge pull request #7360 from Azure/Fixingworkspacedetection Update to Workspace deletion attempt from an infected device commit 076f67032e67f6eb6cf64f28efcff971da693ff7 Merge: 0d2bb23a6 437d79f0c Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Fri Mar 3 11:27:19 2023 +0530 Merge pull request #7479 from pensivepaddle/patch-4 Update AcscEssential8.json commit 4e64cfa9fce05564a574b35bf9b59a961560247c Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 15:25:07 2023 +1100 added conditional display of parameters commit bca15f16d9e28bae2e87dc0217594314b2d6f2f0 Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 10:11:39 2023 +1100 update version number commit ba6b41ef940fcb3bee4c78fe06e09af360256248 Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 08:27:54 2023 +1100 including fix from PR #7479 commit 08bc20f2e1ef884e3ae9cbbc0a6a0d8d0ea7fab0 Author: Nick Torkington <nicktork@microsoft.com> Date: Fri Mar 3 08:22:10 2023 +1100 reverting fromTemplateId commit 0d2bb23a6e0dc2d8c237845fe9ed14df43ebd9bf Merge: 401a4603e 3dc17e1c8 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 17:47:59 2023 +0530 Merge pull request #7458 from Azure/v-sabiraj-MicrosoftDefenderforEndpoint Adding playbooks to MDE Solution commit 3dc17e1c85962647767e47f46620addb4573d28b Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Thu Mar 2 17:28:14 2023 +0530 Updated data connector description commit b21194605446cdc67dfc5002d5ba2b1bb5119ab7 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Thu Mar 2 16:02:02 2023 +0530 SOlution cfreation for GCP big query commit 219c86db6b3976cf202083a26f20b3dcc8f43ee4 Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 21:23:33 2023 +1100 updated version number (again) commit 401a4603e70040e1d37bfe864bf2c822af88442b Merge: e6e492dce 481f8462f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 15:38:44 2023 +0530 Merge pull request #7405 from Azure/v-vdixit/file-path-update1 File Path update for detections Files commit e6e492dce2aa075f14f9005f21b206f5ab843c68 Merge: cffb8bd70 97f4f1194 Author: tamirkopitz <91939884+tamirkopitz@users.noreply.github.com> Date: Thu Mar 2 12:08:11 2023 +0200 Merge pull request #7478 from Azure/dvir-ms-patch-1 add SENTINEL_AGENT_GUID commit 437d79f0c362fc9702dd27e4b7871b006d891eca Author: pensivepaddle <104833713+pensivepaddle@users.noreply.github.com> Date: Thu Mar 2 11:00:42 2023 +0100 Update AcscEssential8.json Mix up between two queries/titles, "Restrict Admin Privileges" vs "Multi-factor Authentication" commit 97f4f11941bc95110c3a698eff1c7fdd38cac656 Author: Dvir Naim <106969883+dvir-ms@users.noreply.github.com> Date: Thu Mar 2 11:52:44 2023 +0200 add SENTINEL_AGENT_GUID commit 11ce471fe6cc30e06b680c46e49994a9e014a594 Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 20:13:01 2023 +1100 updated workbook version number commit cffb8bd70ba73966b5ff90d32bcf08c6027e58ea Merge: 140ae0546 aa6f3500b Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 14:21:24 2023 +0530 Merge pull request #7376 from Azure/v-sabiraj-SolutionUpdateforShodan Template Spec Solution for Shodan commit 140ae05464972ceba27485b0cfa92a6e94401a55 Merge: b8887b568 20b10d524 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 14:20:51 2023 +0530 Merge pull request #7364 from Azure/v-prasadboke-AtlassianJiraAudit-DataConnector Atalassian jira audit repackaging commit b8887b568612d12f32e2fc5ae93a56bf21676556 Merge: 6b61a8de1 695b59d91 Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Thu Mar 2 13:11:09 2023 +0530 Merge pull request #7477 from Azure/v-atulyadav/dynamic365 Repackage Dynamic 365 commit 20b10d52435b88c2f9af7077b38f97bf9245c74e Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Thu Mar 2 12:52:35 2023 +0530 Update 2.0.3.zip commit 079ac1880d0d5a8aea67016dde696d919e046feb Merge: 979bd03d8 6b61a8de1 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 2 12:46:17 2023 +0530 Merge branch 'master' into v-vdixit/Palo-alto-logo-update commit 695b59d91d608a76413daafcbb5557f0f7ed437c Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Thu Mar 2 12:45:50 2023 +0530 Repackage Dynamic 365 commit 8c6835d9ba2abf8b49f7bbbea066cb8931b7bcef Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 17:58:16 2023 +1100 updated version number commit 94bc711c3f91f977eb14ff334b2c7128f63fb0cc Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 17:34:05 2023 +1100 updated fromTemplateId commit 6b61a8de18aec450e2e40d09f0fd09ca559612bc Merge: 57c8e8a80 bd66e5508 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Thu Mar 2 11:36:38 2023 +0530 Merge pull request #7448 from Azure/entrustidentity [SOAR] New Solution Entrust commit e60da2809733972966ac56d3532118720d0ea8b9 Author: Nick Torkington <nicktork@microsoft.com> Date: Thu Mar 2 16:59:00 2023 +1100 hide table only available to private preview commit 979bd03d887b0cbfaaace74826cc183f0e01b881 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 2 10:29:38 2023 +0530 update 2.0.4 zip commit 57c8e8a80ccc76d33a01f771b10e2c29723e40a5 Merge: 7e4a93b42 83d09eadb Author: v-sabiraj <94349919+v-sabiraj@users.noreply.github.com> Date: Thu Mar 2 10:16:42 2023 +0530 Merge pull request #7473 from Azure/v-vdixit/logo-update Package Update for Google Solution commit 7e4a93b425391bc34957fa9cfb40b2d90dd390f7 Merge: a75b98838 0f2c9966b Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Thu Mar 2 09:35:11 2023 +0530 Merge pull request #7457 from cwatson-cat/patch-20 Update Dynamics 365 md desc to add Docs link commit 83d09eadb85d36c1682466a5d36f2781954142d6 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Thu Mar 2 00:24:47 2023 +0530 Package Update for Google Solution commit a75b98838ac3dfc719939a13fe4343c32d9a837a Merge: cb984b00c 63fe5ba59 Author: Shain <45466083+shainw@users.noreply.github.com> Date: Wed Mar 1 08:34:24 2023 -0800 Merge pull request #7461 from Azure/shainw-ReduceResults Update gte_6_FailedLogons_10m.yaml commit cb984b00cd513e0f944a11f1c3a5e5b9c60c24d6 Merge: cf19c76a6 0410a5375 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 17:57:32 2023 +0200 Merge pull request #7472 from Azure/asim/periodical-fixes-Mar-1-23 Periodical parser updates, Mar 1st 2023 commit 0410a537583eff0b20c2e423b6d4e44641e4d567 Author: github-actions[bot] <> Date: Wed Mar 1 15:41:25 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit 28698d2c7b5bc58f4fb95668f4e104f7dbbeccfa Merge: fa1e9c60d cf19c76a6 Author: github-actions[bot] <> Date: Wed Mar 1 15:41:19 2023 +0000 Merge remote-tracking branch 'origin/master' into asim/periodical-fixes-Mar-1-23 commit cf19c76a601bc00168433f93083c328062d840f2 Merge: dcfc519c9 0159db782 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 17:35:05 2023 +0200 Merge pull request #7471 from Azure/ASimDnsActivityLogs-CustomTable-Adding-Fields adding fields that were recently added to ASimDnsActivityLogs table schema commit 0159db7821c4c4b046617dcc6e69c3c10621559d Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 20:32:31 2023 +0530 adding fields that were recently added to ASimDnsActivityLogs table schema commit dcfc519c9f07f1a646736673e4948ca2631cab53 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 16:48:58 2023 +0200 Update ASimDnsNative.yaml commit 01d0abfd0891c5d3749e402c0b39a32d063123b8 Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 16:48:39 2023 +0200 Update vimDnsNative.yaml commit fa1e9c60dea9497588fd72e3f92d5a522faa0b41 Author: Ofer Shezaf <github@shezaf.com> Date: Wed Mar 1 16:46:45 2023 +0200 NetworkSessionMicrosoftWindowsEventFirewall commit 25c15c6a55a108f81aea4d6cb3e9d0718033f858 Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Wed Mar 1 18:52:50 2023 +0530 Update stats.md (#7451) commit 886c5469c01638e83221e4e1fadff410d9762f81 Merge: d38456d91 fb51c392c Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 18:39:53 2023 +0530 Merge pull request #7419 from txhaflaire/master Jamf Protect for Microsoft Sentinel - v2.1.1 commit cf2be34436a6bfe71325b11f5667a62836f9e8cc Merge: 48b2623b6 d38456d91 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 18:25:48 2023 +0530 Merge branch 'master' into v-rbajaj/AzureActiveeDirectory commit fb51c392c8e18851576a7c94af3a8fc8735be243 Merge: 5d09db59a d38456d91 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 13:53:35 2023 +0100 Merge branch 'Azure:master' into master commit d38456d91683b98392e125cd5ca923bc50388230 Merge: 0d1754cf1 775998089 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 18:16:43 2023 +0530 Merge pull request #7445 from Azure/PhishingwithCSLandNetworkSession Detecting potential phishing in correlation with CSL & Network Session logs commit aa6f3500b3b7a07137f777796d7e0838236e6a0b Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 18:15:23 2023 +0530 Updating description and entities commit 0d1754cf154cd728b1ae47b825bb5cf04ff02e64 Merge: 830230a5a 412e0667e Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 18:07:59 2023 +0530 Merge pull request #7469 from Azure/arm-ttk-failing-when-solutionname-has-space Fixed Arm-ttk issue when solution name has space commit 5d09db59a3561eebda22ccea3ccc5474c006ea0e Merge: c1043379b 830230a5a Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 13:17:24 2023 +0100 Merge branch 'Azure:master' into master commit 2ace3d8f45d06a29587eb609335a12672094244b Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 17:36:16 2023 +0530 version update commit 412e0667ec85ea2280eac4d5886023d995cf2e34 Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Wed Mar 1 17:16:39 2023 +0530 fixed issue on space in solution name commit 830230a5a5faf976be72d703366ff0c4b7949325 Merge: ec2492fbf ce5d3c9fd Author: Ofer Shezaf <39997089+oshezaf@users.noreply.github.com> Date: Wed Mar 1 13:05:50 2023 +0200 Merge pull request #7462 from Azure/ASimDnsActivityLogs-parser-bug-fix Duplicate column error fixed - DvcScopeId commit 124aa72e59f7f4b429df341d23d80e1118673111 Merge: 9a009669b 8347232f9 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 16:33:27 2023 +0530 Merge branch 'master' into v-sabiraj-SolutionUpdateforShodan commit 48b2623b6060ecde9ae4a330086bd3f62a6c72d7 Merge: f960cf697 ec2492fbf Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 16:21:37 2023 +0530 Merge branch 'master' into v-rbajaj/AzureActiveeDirectory commit f960cf697dd4ddbdffeb9b93e700a45199c9d564 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 16:17:48 2023 +0530 Repackaging Azure Active Directory commit ec2492fbf8917cdda1e96386a88f405a893b580d Merge: 7e5fcbdd4 270f7dcf9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 16:16:20 2023 +0530 Merge pull request #7425 from Azure/v-vdixit/logo-update Google Cloud Solutions Logo Update commit 7e5fcbdd4df667131778ac5be580803166d4804e Merge: 76813497b a827835a1 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 16:13:32 2023 +0530 Merge pull request #7453 from Azure/v-sabiraj-fixingsocplaybook Updating Soc Process package to fix bug commit c1043379b72765da69124e5a24c99ad357e4a289 Merge: ccd10f67f 49aeb72a7 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 11:28:34 2023 +0100 Merge branch 'master' of https://github.com/txhaflaire/Azure-Sentinel commit ccd10f67f2c11314948c1f4601044b2c0b48fbc2 Merge: 30d3368dd 76813497b Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 11:28:22 2023 +0100 Merge remote-tracking branch 'upstream/master' commit 49aeb72a742ff998db913fc539408b760a8959c8 Merge: 0d57ec6e2 76813497b Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 11:05:31 2023 +0100 Merge branch 'Azure:master' into master commit 76813497ba5fab84d2ad4be0f9733a09268f5c8c Merge: 8347232f9 25c804a39 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 15:32:17 2023 +0530 Merge pull request #7465 from Azure/v-sabiraj-UpdatingMetadataforbugs Updating Workbook Metadata to fix gallery bugs commit 0d57ec6e258c7dbf78f26af2f1c120f6813c1067 Merge: 9c633f503 8347232f9 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Wed Mar 1 10:50:48 2023 +0100 Merge branch 'Azure:master' into master commit 25c804a39c842be4e74aba5fca7acf90a8c4d4c6 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 15:17:50 2023 +0530 Updating Workbook Metadata to fix gallery bugs commit 8347232f97f00439e3ab67d392548a9bea53c0c4 Merge: da1cf1041 377fc2478 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 15:02:51 2023 +0530 Merge pull request #7413 from Azure/v-vdixit/file-path-update3 File path update for hunting queries commit 481f8462f0d73c9a59717fe8684b9921e5d4dbe5 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 14:59:54 2023 +0530 Version updates commit f3a462bef7ae545de0bc987d8adce3e4300073af Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 14:59:38 2023 +0530 MongoDB Repackaging commit 695900736431b3a799ef5565746716aa4562bc19 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 14:43:11 2023 +0530 Updated the 2.0.3 zip commit d613fb75da68e31787962aa88b292466854f39f4 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 14:42:57 2023 +0530 updating Version commit 377fc2478efc1ab4fddb2f22eee9c5fb65e1ffc3 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 13:55:05 2023 +0530 updating path1 commit aa8d29521c578568b4408ac98e95cd696d1502f9 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 13:50:52 2023 +0530 updating AzureVirtualNetworkSubnets commit f65038e41184f5bb13c679842dcf5fadf2654d78 Merge: 7052b594f da1cf1041 Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 13:39:11 2023 +0530 Merge branch 'master' into v-prasadboke-AtlassianJiraAudit-DataConnector commit a827835a10539e698e9aa79d9338e538c706d555 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 13:24:24 2023 +0530 Update azuredeploy.json commit 50f8752d3fa6e3be7030635a25e21f2468662440 Merge: bd419b31f da1cf1041 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 13:24:16 2023 +0530 Merge branch 'master' into v-sabiraj-fixingsocplaybook commit ce5d3c9fde86ad1164452558829843280922d9ce Merge: cdb47b58e ac2f6b0b5 Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 13:22:56 2023 +0530 Merge branch 'ASimDnsActivityLogs-parser-bug-fix' of https://github.com/Azure/Azure-Sentinel into ASimDnsActivityLogs-parser-bug-fix commit cdb47b58e46b4c5db2a97e4fdd520624b319d1d4 Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 13:22:49 2023 +0530 added DvcScopeId to the table schema commit 9c633f503f6085d5e597be7667705ec092541503 Merge: 30d3368dd da1cf1041 Author: v-atulyadav <104008048+v-atulyadav@users.noreply.github.com> Date: Wed Mar 1 13:21:53 2023 +0530 Merge branch 'master' into pr/7419 commit 2f87b2293ff173dae30dac4c7364efa0a28f48db Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 13:13:23 2023 +0530 Marklogic Repackaging commit 7052b594f65b43b138c1898f881c8ee4a35ebe86 Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 12:32:40 2023 +0530 Update SkipValidationsTemplates.json commit da1cf1041bdb21a5aaa1c417f52ffe869f241377 Merge: 990ced0af 0b848f0d6 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 12:32:20 2023 +0530 Merge pull request #7282 from Azure/v-vdixit/KQL-validation-fix-for-Multiple-solutions KQL validations for Hunting Queries for multiple solutions commit 4bae5b91ad091217a2fe458d32fd2835c676d8ec Merge: fbb7d0292 990ced0af Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Wed Mar 1 12:31:02 2023 +0530 Merge branch 'master' into v-rbajaj/VirusTotal commit ac2f6b0b574fc6467f328bbc6e39a6baff9bafcf Author: github-actions[bot] <> Date: Wed Mar 1 06:54:15 2023 +0000 [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. commit c216ee722f88074679a8057ee8c1f80692a8bccd Merge: 0199a1662 990ced0af Author: github-actions[bot] <> Date: Wed Mar 1 06:54:03 2023 +0000 Merge remote-tracking branch 'origin/master' into ASimDnsActivityLogs-parser-bug-fix commit 0199a16622d35eb1a74e3c72f303f5a86068c246 Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 12:20:50 2023 +0530 Updated Parser Version and Date commit e7da9fef44a2c45356a8fd934db3908612db7f6d Author: vakohl <97222872+vakohl@users.noreply.github.com> Date: Wed Mar 1 12:15:14 2023 +0530 Duplicate column error fixed - DvcScopeId commit a1d177f6022d0a30b74f72b4157a7e004f74aaf9 Author: PrasadBoke <v-prasadboke@microsoft.com> Date: Wed Mar 1 12:15:00 2023 +0530 Update SkipValidationsTemplates.json commit 990ced0af085cde6851121ce0b87f2cf82daefca Merge: 3286c9d6b 94e2d842e Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 12:13:56 2023 +0530 Merge pull request #7427 from Azure/origin/users/rahul/gcp-bigquery GCP BigQuery Solution - Initial commit of solution commit 3286c9d6b1adc0f6b898dfc8db9d304cd1e23170 Merge: be6b439e8 755249e24 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 12:12:32 2023 +0530 Merge pull request #7294 from Azure/v-ntripathi/MaturityModelWorkbookFixIcM361952128 Fixing workbook query regarding IcM and repackaging commit fbb7d0292348703f1432812fd6ddc9b573bcea91 Merge: 21c4bed62 be6b439e8 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Wed Mar 1 11:23:56 2023 +0530 Merge branch 'master' into v-rbajaj/VirusTotal commit be6b439e8e818d30b4cfb1fdd30ed06b2623304a Merge: c74e7d817 0407141d9 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:43:37 2023 +0530 Merge pull request #6925 from referefref/patch-1 Update AWSBucketAPILogs-SuspiciousDataAccessToS3BucketsfromUnknownIP.… commit c74e7d8174da6482f81e22d73ea20c8dfce4be5d Merge: 5d7077c80 3391ffcaf Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:38:08 2023 +0530 Merge pull request #7035 from ep3p/patch-6 Fix fields in Solution/Analytic Rule AzureADRoleManagementPermissionGrant.yaml commit 755249e24ac7dec840264a1b527c70e90464402e Merge: 4460ad5b2 ce1b0e7e2 Author: Meena Kumari Chatla <v-mchatla@microsoft.com> Date: Wed Mar 1 10:31:27 2023 +0530 Merge branch 'master' into v-ntripathi/MaturityModelWorkbookFixIcM361952128 commit 5d7077c805af8ccd6b1b364e4dad95eba89390ea Merge: ce1b0e7e2 1757d5974 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:30:45 2023 +0530 Merge pull request #7456 from Azure/arm-ttk-issue-fix Arm ttk issue fix commit 427a8a26d9c17a24a5d097d17ad1419223f20731 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 10:28:56 2023 +0530 Update IPEntity_DuoSecurity.yaml commit 89bc51c158b9996b8225c184d2e0dd4f20904de6 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 10:28:01 2023 +0530 Updating AdFind_Usage.yaml commit 63fe5ba5903964d432fc97940bf77add1e24b67a Author: Shain <45466083+shainw@users.noreply.github.com> Date: Tue Feb 28 20:34:53 2023 -0800 Update gte_6_FailedLogons_10m.yaml commit ce1b0e7e2889918b66533a1333f1a47b1aaf14d1 Merge: 3af5f111d 3101d404a Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Wed Mar 1 10:03:43 2023 +0530 Merge pull request #7431 from briandelmsft/ii_wb_patch Investigation Insights - ASIM Support commit bd66e550853991f9681d826e8ac528abcd33b827 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Wed Mar 1 09:04:33 2023 +0530 Update azuredeploy.json commit 6f3d5a72da513412e73a218d98d45359aee64666 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Wed Mar 1 09:01:46 2023 +0530 Update readme.md commit 775998089da2b6925873939014e57a34abf8496e Author: gitj121 <jekurien@microsoft.com> Date: Tue Feb 28 13:16:07 2023 -0800 Description changes commit 37428ea2fffae391739b7910cc04c3c8ab010d50 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Wed Mar 1 00:14:23 2023 +0530 version update commit 04ad400e02cc6a3b158b67f417885671d68b2101 Author: gitj121 <jekurien@microsoft.com> Date: Tue Feb 28 10:41:11 2023 -0800 Adding with changes commit a074d314c8b6bfab71c17afd61d68ab79da0dfa1 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Wed Mar 1 00:06:08 2023 +0530 version update commit 3c519a323bae6df8ad7ae41ee83f09393f518dd4 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Feb 28 23:39:59 2023 +0530 Adding playbooks to MDE Solution commit 0f2c9966b5db3e22e2edc7455fc20b74dedf75df Author: Catherine Watson <cwatson@microsoft.com> Date: Tue Feb 28 08:38:50 2023 -0800 Update Dynamics 365 md desc to add Docs link @prtanej commit 187ec26e2b36bcc1cae47ff4c684bcf4ac326b55 Author: jayeshprajapaticrest <98145046+jayeshprajapaticrest@users.noreply.github.com> Date: Tue Feb 28 22:00:59 2023 +0530 Updated readme file by adding prerequisite about to deploy dependent playbook first. (#6) Co-authored-by: jayeshssc <jayesh.prajapati@CDSYS.LOCAL> commit 1757d5974db4a74761e73a0672b74d9a802bc132 Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Tue Feb 28 21:55:35 2023 +0530 Update arm-ttk-validations.yaml commit f34c5e317318410318bbf548945bc4bece3a4f2c Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Tue Feb 28 21:45:23 2023 +0530 updated code commit 3af5f111d58b65d8bb8293f4aacc97776b617bc8 Merge: 68516975f 95df0ea8f Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Feb 28 20:02:16 2023 +0530 Merge pull request #7240 from Azure/v-atulyadav/Windows-Security-Events Repackage Windows Security Events commit bd9ad173269557a88012a581d698d39b829c9deb Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Tue Feb 28 19:50:49 2023 +0530 updated code to fix commit 0277f7811b1193e424d656315b07bcc75db350a7 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Feb 28 19:31:27 2023 +0530 updating whitespaces commit bd419b31f0ebd30e32bc11bc96053b162b396c73 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Feb 28 19:14:27 2023 +0530 Update azuredeploy.json commit c1061631e5fb01469ff8ab3e771573f1baa7bb9f Merge: debfbfb03 68516975f Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:54:19 2023 +0530 Merge branch 'master' into v-vdixit/file-path-update3 commit debfbfb03103d7006097b1f4eb8f8278e7de7357 Merge: cf4145086 adf2433a8 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Feb 28 18:46:12 2023 +0530 Updating description commit cf414508699f640f8ba5dbe174538e1fe100715f Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Feb 28 18:37:37 2023 +0530 updating quotes commit fdd23459a6420076e93c300c1683b9e1ae401cbb Author: syed-loginsoft <sdawood@loginsoft.com> Date: Tue Feb 28 18:19:56 2023 +0530 Updated version from 2.0.0 to 2.0.1 commit adf2433a8d963bdd1765c714c8f64e11c97a250c Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:03:56 2023 +0530 Updating ProofpointPODHighScoreAdultValue.yaml commit d9c8af19ebadb591c6cabc46acceba17fdd6cfe9 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:02:53 2023 +0530 Updating UseragentExploitPentest commit 76dac88a9155c3e2287ea44b4dcb4d283e71750b Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:01:57 2023 +0530 Updating quotes commit 491992bb8f26ec824b69297d7225cc0ab633ea1f Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 18:01:32 2023 +0530 updating quotes commit 99a4f75d27c6ba71193083d1bc3cfb40a634e3bf Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 17:59:55 2023 +0530 update RiskyCommandB64EncodedInUrl.yaml commit 724e15e08602762f13faed85490aaee34029a7e2 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 17:59:19 2023 +0530 Updating quotes commit 42a2b2d4e823346f6cd7a219edbe1641fb35da2c Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 17:58:45 2023 +0530 updating quotes commit 21c4bed62c6d7f3da32d804bb039da905cba8577 Merge: 862ad6676 68516975f Author: v-amolpatil <v-amolpatil@microsoft.com> Date: Tue Feb 28 17:58:44 2023 +0530 Merge branch 'master' into v-rbajaj/VirusTotal commit 68516975f376ac2afed9015a388a28ea80d262af Merge: 43be861c9 f7bdab119 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Feb 28 17:49:20 2023 +0530 Merge pull request #7404 from Azure/v-atulyadav/ciscoasa Repackage Cisco ASA commit b4f680a796a09c2399f3230dcfc917df2fc16903 Author: v-sabiraj <v-sabiraj@microsoft.com> Date: Tue Feb 28 17:33:45 2023 +0530 Updating Soc Process package to fix bug commit 43be861c9bcd458b435ee7d039c7c8ceedad9f58 Merge: acff515d5 cfb24961d Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Feb 28 16:56:14 2023 +0530 Merge pull request #7414 from Azure/v-vdixit/file-path-update4 Hunting Queries files' path update commit acff515d5c8b5b3f01444d7a3c9ae2f929516cb3 Merge: f40bc8d07 6c1bce777 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Feb 28 16:54:38 2023 +0530 Merge pull request #7283 from Azure/v-mchatla/GCPAuditLogs GCP Audit Log Packaging Changes with Data Connector commit f40bc8d07f603ba59ae60c6ae7f103a197bb48fe Merge: cdac19704 162b7f9f4 Author: v-dvedak <103933805+v-dvedak@users.noreply.github.com> Date: Tue Feb 28 16:37:22 2023 +0530 Merge pull request #7417 from aviatam/talon_solution Talon solution commit cfb24961d37a95d1af598c5e1636364b5ec6ab69 Author: v-vdixit <115772287+v-vdixit@users.noreply.github.com> Date: Tue Feb 28 16:37:12 2023 +0530 updating commas commit 862ad6676f90a3a57d1f353fc682e3ddd5e377c7 Author: v-rbajaj <v-rbajaj@microsoft.com> Date: Tue Feb 28 15:49:21 2023 +0530 Repackaging VirusTotal updated changes as per master commit a8d6ee9d8098fb9154049e22f02448db52865897 Author: DixitVedanshi <v-vdixit@microsoft.com> Date: Tue Feb 28 15:42:05 2023 +0530 updating domain Pan-OS commit 30d3368ddd6142fb02af94329135ed2df7e601a7 Author: Thijs Xhaflaire <thijsxhaflaire31@hotmail.com> Date: Tue Feb 28 10:08:49 2023 +0100 Updated Data Connector version to 2.1.1 commit a1fe1dd12101993c7f77e11e156702affd870e7c Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:36:54 2023 +0530 Update azuredeploy.json commit 07bd3f6e98fcb9fb5833364bb53bf017b71c5aef Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:36:03 2023 +0530 Update readme.md commit 22a41b4bbe6e76eccb564a5df5f136592bf1eef4 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:35:41 2023 +0530 Update readme.md commit e9be7a9f542b02e8a9352691aa4caa23eeae946e Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:34:04 2023 +0530 Update readme.md commit 944b62556967aff5bb6710e2a6e0fba7c5322413 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:32:37 2023 +0530 Update readme.md commit 9f8d2f04bb5831ee1d33617e464b246f6ef2f0e2 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:31:24 2023 +0530 Update readme.md commit b45226929fbb45f5165c459f8416c2f8064068b0 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:29:22 2023 +0530 Update readme.md commit c2d6f056ea0108d5593f898d88a0771c14a0c844 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:24:04 2023 +0530 Update readme.md commit cd76700745b961d1460e9611424c51819aab455e Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:22:54 2023 +0530 Update readme.md commit c0a38c4f8430ccdd90be1ec956dd3440656b9f0f Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:20:37 2023 +0530 Update readme.md commit 89ac311dfceee54a5c0e096c9c2ef40c8f6abef6 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:20:15 2023 +0530 Update readme.md commit fbf8f05bfb5f5cbb5525ccc5c0f44ea3fbe68a76 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:19:53 2023 +0530 Update readme.md commit cb0d1e7533fffc878e9bf9d0f7001b13a25120b3 Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:19:22 2023 +0530 Update readme.md commit e260f3b8937f26d09b3c080c0beb1a9f7faa572a Author: Manish Kumar <97503740+manishkumar1991@users.noreply.github.com> Date: Tue Feb 28 14:18:54 2023 +0530 Update readme.md commit 6d1e5a340e1c9f4a3d6efb3b660343fbf5269a4a Author: Manish Kumar <manisk…
A detailed explanation is here.
https://github.com/samikroy/Azure-Sentinel/blob/patch-32/Tools/Create%20Incidents%20with%20Email/Readme.md
This will be a part of the readme after the PR merge.