Introducing version 0.5.0

[pkhabazi]

Summary of the Pull Request

Cleaned up code and optimized the functions, also introducing new functions:

• Get-AzSentinelAlertRule - allows you to get the current configuration
• Import-AzSentinelAlertRule - Imports the config from json or yaml
• New-AzSentinelAlertRule - creates alert rules from cmdlet
• Remove-AzSentinelAlertRule - allows you to remove Alert rules

References

#5
#6
#7

PR Checklist

By submitting this pull request, I confirm the following:

please fill any appropriate checkboxes, e.g: [X]

• Closes Feature Request: Get-AzSentinelAlertRule and maybe remove? #5, Update documentation #6, Feature Request - optimise parameters required #7
• Requires documentation to be updated
• I've discussed this with core contributors already. If not checked, I'm ready to accept this work might be rejected in favor of a different grand plan. Issue number where discussion took place: #xxx
• I have made only one major change in my proposed changes.
• I have commented my proposed changes within the code.
• I have tested my proposed changes, and have included unit tests where possible.
• It is compatible with the MIT License
• I have squashed any insignificant commits. (git rebase)

---

Detailed Description of the Pull Request / Additional comments

A detailed description, screenshots (if necessary), as well as links to any relevant issues

Validation Steps Performed

A detailed description of thew validation steps

How does this PR accomplish the above

A detailed description (such as a changelog) and screenshots (if necessary) of the implemented fix

What documentation changes (if any) are needed to support this PR

A detailed list of any necessary changes

---

• You must follow the template instructions. Failure to do so will result in your pull request being closed.

[MauRiEEZZZ]

Get-AzSentinelAlertRule.md

Example 1 2 3
descriptions of the examples aren't updated from the copy/paste action
To me -WhatIf and -Confirm are obsolete for this function, what do you think?

When using Get-AzSentinelAlertRule I prefer to have the DisplayName on top.
While using Format-Table the DisplayName will be the first Collumn.

While executing the function I see some flickering on the top of the screen.
Probably of the webrequest invocation. Have I seen this in the earlier version?

The Synopsis, I am not sure what to expect there it isen't consequent, it says often Manage Azure Sentinel Alert Rules.

[MauRiEEZZZ]

Remove-AzSentinelAlertRule
I was thinking I could do the following Example, but instead I received errors, Maybe I am using it wrong.

I did see RuleName accepts pipeline input in the helpfiles and it says (ByValue).
Perhaps I am doing this wrong, I just expected it work like in my example.
I have seen a similar way of working in other modules.

Confirm works perfect, great choice of options.

I do think it always should prompt for deletion and -Force will ovveride this behaviour.

[MauRiEEZZZ]

New-AzSentinelAlertRule
I tried the following, what is wrong with my value for -QueryFrequency ??

[pkhabazi]

New-AzSentinelAlertRule
I tried the following, what is wrong with my value for -QueryFrequency ??

you don't need to add "PT" for time, this is dono by the class

[pkhabazi]

Remove-AzSentinelAlertRule
I was thinking I could do the following Example, but instead I received errors, Maybe I am using it wrong.

I did see RuleName accepts pipeline input in the helpfiles and it says (ByValue).
Perhaps I am doing this wrong, I just expected it work like in my example.
I have seen a similar way of working in other modules.

Confirm works perfect, great choice of options.

I do think it always should prompt for deletion and -Force will ovveride this behaviour.

this is a good one, I think we need to create a new issue for this as a feature request

[pkhabazi]

Get-AzSentinelAlertRule.md

Example 1 2 3
descriptions of the examples aren't updated from the copy/paste action
To me -WhatIf and -Confirm are obsolete for this function, what do you think?

When using Get-AzSentinelAlertRule I prefer to have the DisplayName on top.
While using Format-Table the DisplayName will be the first Collumn.

While executing the function I see some flickering on the top of the screen.
Probably of the webrequest invocation. Have I seen this in the earlier version?

The Synopsis, I am not sure what to expect there it isen't consequent, it says often Manage Azure Sentinel Alert Rules.

updated documentation