-
Notifications
You must be signed in to change notification settings - Fork 4.9k
/
GetEntities.json
63 lines (63 loc) · 2.73 KB
/
GetEntities.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
{
"parameters": {
"api-version": "2022-09-01-preview",
"subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
"resourceGroupName": "myRg",
"workspaceName": "myWorkspace"
},
"responses": {
"200": {
"body": {
"value": [
{
"id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/entities/e1d3d618-e11f-478b-98e3-bb381539a8e1",
"name": "e1d3d618-e11f-478b-98e3-bb381539a8e1",
"type": "Microsoft.SecurityInsights/entities",
"kind": "Account",
"properties": {
"friendlyName": "administrator",
"accountName": "administrator",
"ntDomain": "domain",
"upnSuffix": "contoso",
"sid": "S-1-5-18",
"aadTenantId": "70fbdad0-7441-4564-b2b5-2b8862d0fee0",
"aadUserId": "f7033626-2572-46b1-bba0-06646f4f95b3",
"puid": "ee3cb2d8-14ba-45ef-8009-d6f1cacfa04d",
"isDomainJoined": true,
"objectGuid": "11227b78-3c6e-436e-a2a2-02fc7662eca0"
}
},
{
"id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/entities/fed9fe89-dce8-40f2-bf44-70f23fe93b3c",
"name": "fed9fe89-dce8-40f2-bf44-70f23fe93b3c",
"type": "Microsoft.SecurityInsights/entities",
"kind": "Host",
"properties": {
"friendlyName": "vm1",
"dnsDomain": "contoso",
"ntDomain": "domain",
"hostName": "vm1",
"netBiosName": "contoso",
"azureID": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachines/vm1",
"omsAgentID": "70fbdad0-7441-4564-b2b5-2b8862d0fee0",
"osFamily": "Windows",
"osVersion": "1.0",
"isDomainJoined": true
}
},
{
"id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/entities/af378b21-b4aa-4fe7-bc70-13f8621a322f",
"name": "af378b21-b4aa-4fe7-bc70-13f8621a322f",
"type": "Microsoft.SecurityInsights/entities",
"kind": "File",
"properties": {
"friendlyName": "cmd.exe",
"directory": "C:\\Windows\\System32",
"fileName": "cmd.exe"
}
}
]
}
}
}
}