/
GetIoTSecuritySolutionsSecurityAnalytics.json
91 lines (91 loc) · 2.9 KB
/
GetIoTSecuritySolutionsSecurityAnalytics.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
{
"parameters": {
"api-version": "2019-08-01",
"subscriptionId": "20ff7fc3-e762-44dd-bd96-b71116dcdc23",
"resourceGroupName": "MyGroup",
"solutionName": "default"
},
"responses": {
"200": {
"body": {
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default",
"name": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default",
"type": "Microsoft.Security/iotSecuritySolutions/analyticsModels",
"properties": {
"metrics": {
"high": 5,
"medium": 200,
"low": 102
},
"unhealthyDeviceCount": 1200,
"devicesMetrics": [
{
"date": "2019-02-01T00:00:00Z",
"devicesMetrics": {
"high": 3,
"medium": 15,
"low": 70
}
},
{
"date": "2019-02-02T00:00:00Z",
"devicesMetrics": {
"high": 3,
"medium": 45,
"low": 65
}
}
],
"topAlertedDevices": [
{
"deviceId": "id1",
"alertsCount": 200
},
{
"deviceId": "id2",
"alertsCount": 170
},
{
"deviceId": "id3",
"alertsCount": 150
}
],
"mostPrevalentDeviceAlerts": [
{
"alertDisplayName": "Custom Alert - number of device to cloud messages in AMQP protocol is not in the allowed range",
"reportedSeverity": "Low",
"alertsCount": 200
},
{
"alertDisplayName": "Custom Alert - execution of a process that is not allowed",
"reportedSeverity": "Medium",
"alertsCount": 170
},
{
"alertDisplayName": "Successful Bruteforce",
"reportedSeverity": "Low",
"alertsCount": 150
}
],
"mostPrevalentDeviceRecommendations": [
{
"recommendationDisplayName": "Install the Azure Security of Things Agent",
"reportedSeverity": "Low",
"devicesCount": 200
},
{
"recommendationDisplayName": "High level permissions configured in Edge model twin for Edge module",
"reportedSeverity": "Low",
"devicesCount": 170
},
{
"recommendationDisplayName": "Same Authentication Credentials used by multiple devices",
"reportedSeverity": "Medium",
"devicesCount": 150
}
]
}
}
}
}
}