|
55 | 55 | "email": "support@microsoft.com", |
56 | 56 | "_email": "[variables('email')]", |
57 | 57 | "_solutionName": "Okta Single Sign-On", |
58 | | - "_solutionVersion": "3.1.2", |
| 58 | + "_solutionVersion": "3.1.3", |
59 | 59 | "solutionId": "azuresentinel.azure-sentinel-solution-okta", |
60 | 60 | "_solutionId": "[variables('solutionId')]", |
61 | 61 | "analyticRuleObject1": { |
|
248 | 248 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
249 | 249 | ], |
250 | 250 | "properties": { |
251 | | - "description": "FailedLoginsFromUnknownOrInvalidUser_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 251 | + "description": "FailedLoginsFromUnknownOrInvalidUser_AnalyticalRules Analytics Rule with template version 3.1.3", |
252 | 252 | "mainTemplate": { |
253 | 253 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
254 | 254 | "contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]", |
|
367 | 367 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
368 | 368 | ], |
369 | 369 | "properties": { |
370 | | - "description": "LoginfromUsersfromDifferentCountrieswithin3hours_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 370 | + "description": "LoginfromUsersfromDifferentCountrieswithin3hours_AnalyticalRules Analytics Rule with template version 3.1.3", |
371 | 371 | "mainTemplate": { |
372 | 372 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
373 | 373 | "contentVersion": "[variables('analyticRuleObject2').analyticRuleVersion2]", |
|
480 | 480 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
481 | 481 | ], |
482 | 482 | "properties": { |
483 | | - "description": "PasswordSpray_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 483 | + "description": "PasswordSpray_AnalyticalRules Analytics Rule with template version 3.1.3", |
484 | 484 | "mainTemplate": { |
485 | 485 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
486 | 486 | "contentVersion": "[variables('analyticRuleObject3').analyticRuleVersion3]", |
|
593 | 593 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
594 | 594 | ], |
595 | 595 | "properties": { |
596 | | - "description": "PhishingDetection_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 596 | + "description": "PhishingDetection_AnalyticalRules Analytics Rule with template version 3.1.3", |
597 | 597 | "mainTemplate": { |
598 | 598 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
599 | 599 | "contentVersion": "[variables('analyticRuleObject4').analyticRuleVersion4]", |
|
720 | 720 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
721 | 721 | ], |
722 | 722 | "properties": { |
723 | | - "description": "NewDeviceLocationCriticalOperation_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 723 | + "description": "NewDeviceLocationCriticalOperation_AnalyticalRules Analytics Rule with template version 3.1.3", |
724 | 724 | "mainTemplate": { |
725 | 725 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
726 | 726 | "contentVersion": "[variables('analyticRuleObject5').analyticRuleVersion5]", |
|
853 | 853 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
854 | 854 | ], |
855 | 855 | "properties": { |
856 | | - "description": "MFAFatigue_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 856 | + "description": "MFAFatigue_AnalyticalRules Analytics Rule with template version 3.1.3", |
857 | 857 | "mainTemplate": { |
858 | 858 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
859 | 859 | "contentVersion": "[variables('analyticRuleObject6').analyticRuleVersion6]", |
|
967 | 967 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
968 | 968 | ], |
969 | 969 | "properties": { |
970 | | - "description": "HighRiskAdminActivity_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 970 | + "description": "HighRiskAdminActivity_AnalyticalRules Analytics Rule with template version 3.1.3", |
971 | 971 | "mainTemplate": { |
972 | 972 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
973 | 973 | "contentVersion": "[variables('analyticRuleObject7').analyticRuleVersion7]", |
|
1093 | 1093 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
1094 | 1094 | ], |
1095 | 1095 | "properties": { |
1096 | | - "description": "DeviceRegistrationMaliciousIP_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 1096 | + "description": "DeviceRegistrationMaliciousIP_AnalyticalRules Analytics Rule with template version 3.1.3", |
1097 | 1097 | "mainTemplate": { |
1098 | 1098 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
1099 | 1099 | "contentVersion": "[variables('analyticRuleObject8').analyticRuleVersion8]", |
|
1216 | 1216 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
1217 | 1217 | ], |
1218 | 1218 | "properties": { |
1219 | | - "description": "UserSessionImpersonation_AnalyticalRules Analytics Rule with template version 3.1.2", |
| 1219 | + "description": "UserSessionImpersonation_AnalyticalRules Analytics Rule with template version 3.1.3", |
1220 | 1220 | "mainTemplate": { |
1221 | 1221 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
1222 | 1222 | "contentVersion": "[variables('analyticRuleObject9').analyticRuleVersion9]", |
|
1334 | 1334 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
1335 | 1335 | ], |
1336 | 1336 | "properties": { |
1337 | | - "description": "Okta Single Sign-On data connector with template version 3.1.2", |
| 1337 | + "description": "Okta Single Sign-On data connector with template version 3.1.3", |
1338 | 1338 | "mainTemplate": { |
1339 | 1339 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
1340 | 1340 | "contentVersion": "[variables('dataConnectorVersion1')]", |
|
2690 | 2690 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
2691 | 2691 | ], |
2692 | 2692 | "properties": { |
2693 | | - "description": "AdminPrivilegeGrant_HuntingQueries Hunting Query with template version 3.1.2", |
| 2693 | + "description": "AdminPrivilegeGrant_HuntingQueries Hunting Query with template version 3.1.3", |
2694 | 2694 | "mainTemplate": { |
2695 | 2695 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
2696 | 2696 | "contentVersion": "[variables('huntingQueryObject1').huntingQueryVersion1]", |
|
2775 | 2775 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
2776 | 2776 | ], |
2777 | 2777 | "properties": { |
2778 | | - "description": "CreateAPIToken_HuntingQueries Hunting Query with template version 3.1.2", |
| 2778 | + "description": "CreateAPIToken_HuntingQueries Hunting Query with template version 3.1.3", |
2779 | 2779 | "mainTemplate": { |
2780 | 2780 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
2781 | 2781 | "contentVersion": "[variables('huntingQueryObject2').huntingQueryVersion2]", |
|
2860 | 2860 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
2861 | 2861 | ], |
2862 | 2862 | "properties": { |
2863 | | - "description": "ImpersonationSession_HuntingQueries Hunting Query with template version 3.1.2", |
| 2863 | + "description": "ImpersonationSession_HuntingQueries Hunting Query with template version 3.1.3", |
2864 | 2864 | "mainTemplate": { |
2865 | 2865 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
2866 | 2866 | "contentVersion": "[variables('huntingQueryObject3').huntingQueryVersion3]", |
|
2945 | 2945 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
2946 | 2946 | ], |
2947 | 2947 | "properties": { |
2948 | | - "description": "RareMFAOperation_HuntingQueries Hunting Query with template version 3.1.2", |
| 2948 | + "description": "RareMFAOperation_HuntingQueries Hunting Query with template version 3.1.3", |
2949 | 2949 | "mainTemplate": { |
2950 | 2950 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
2951 | 2951 | "contentVersion": "[variables('huntingQueryObject4').huntingQueryVersion4]", |
|
3030 | 3030 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
3031 | 3031 | ], |
3032 | 3032 | "properties": { |
3033 | | - "description": "UserPasswordReset_HuntingQueries Hunting Query with template version 3.1.2", |
| 3033 | + "description": "UserPasswordReset_HuntingQueries Hunting Query with template version 3.1.3", |
3034 | 3034 | "mainTemplate": { |
3035 | 3035 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
3036 | 3036 | "contentVersion": "[variables('huntingQueryObject5').huntingQueryVersion5]", |
|
3115 | 3115 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
3116 | 3116 | ], |
3117 | 3117 | "properties": { |
3118 | | - "description": "NewDeviceRegistration_HuntingQueries Hunting Query with template version 3.1.2", |
| 3118 | + "description": "NewDeviceRegistration_HuntingQueries Hunting Query with template version 3.1.3", |
3119 | 3119 | "mainTemplate": { |
3120 | 3120 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
3121 | 3121 | "contentVersion": "[variables('huntingQueryObject6').huntingQueryVersion6]", |
|
3200 | 3200 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
3201 | 3201 | ], |
3202 | 3202 | "properties": { |
3203 | | - "description": "LoginsVPSProvider_HuntingQueries Hunting Query with template version 3.1.2", |
| 3203 | + "description": "LoginsVPSProvider_HuntingQueries Hunting Query with template version 3.1.3", |
3204 | 3204 | "mainTemplate": { |
3205 | 3205 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
3206 | 3206 | "contentVersion": "[variables('huntingQueryObject7').huntingQueryVersion7]", |
|
3285 | 3285 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
3286 | 3286 | ], |
3287 | 3287 | "properties": { |
3288 | | - "description": "LoginNordVPN_HuntingQueries Hunting Query with template version 3.1.2", |
| 3288 | + "description": "LoginNordVPN_HuntingQueries Hunting Query with template version 3.1.3", |
3289 | 3289 | "mainTemplate": { |
3290 | 3290 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
3291 | 3291 | "contentVersion": "[variables('huntingQueryObject8').huntingQueryVersion8]", |
|
3370 | 3370 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
3371 | 3371 | ], |
3372 | 3372 | "properties": { |
3373 | | - "description": "LoginFromMultipleLocations_HuntingQueries Hunting Query with template version 3.1.2", |
| 3373 | + "description": "LoginFromMultipleLocations_HuntingQueries Hunting Query with template version 3.1.3", |
3374 | 3374 | "mainTemplate": { |
3375 | 3375 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
3376 | 3376 | "contentVersion": "[variables('huntingQueryObject9').huntingQueryVersion9]", |
|
3455 | 3455 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
3456 | 3456 | ], |
3457 | 3457 | "properties": { |
3458 | | - "description": "LegacyAuthentication_HuntingQueries Hunting Query with template version 3.1.2", |
| 3458 | + "description": "LegacyAuthentication_HuntingQueries Hunting Query with template version 3.1.3", |
3459 | 3459 | "mainTemplate": { |
3460 | 3460 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
3461 | 3461 | "contentVersion": "[variables('huntingQueryObject10').huntingQueryVersion10]", |
|
3540 | 3540 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
3541 | 3541 | ], |
3542 | 3542 | "properties": { |
3543 | | - "description": "OktaCustomConnector Playbook with template version 3.1.2", |
| 3543 | + "description": "OktaCustomConnector Playbook with template version 3.1.3", |
3544 | 3544 | "mainTemplate": { |
3545 | 3545 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
3546 | 3546 | "contentVersion": "[variables('playbookVersion1')]", |
|
4835 | 4835 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
4836 | 4836 | ], |
4837 | 4837 | "properties": { |
4838 | | - "description": "Okta-EnrichIncidentWithUserDetails Playbook with template version 3.1.2", |
| 4838 | + "description": "Okta-EnrichIncidentWithUserDetails Playbook with template version 3.1.3", |
4839 | 4839 | "mainTemplate": { |
4840 | 4840 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
4841 | 4841 | "contentVersion": "[variables('playbookVersion2')]", |
|
5194 | 5194 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
5195 | 5195 | ], |
5196 | 5196 | "properties": { |
5197 | | - "description": "Okta-PromptUser Playbook with template version 3.1.2", |
| 5197 | + "description": "Okta-PromptUser Playbook with template version 3.1.3", |
5198 | 5198 | "mainTemplate": { |
5199 | 5199 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
5200 | 5200 | "contentVersion": "[variables('playbookVersion3')]", |
|
5645 | 5645 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
5646 | 5646 | ], |
5647 | 5647 | "properties": { |
5648 | | - "description": "Okta-ResponseFromTeams Playbook with template version 3.1.2", |
| 5648 | + "description": "Okta-ResponseFromTeams Playbook with template version 3.1.3", |
5649 | 5649 | "mainTemplate": { |
5650 | 5650 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
5651 | 5651 | "contentVersion": "[variables('playbookVersion4')]", |
|
6152 | 6152 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
6153 | 6153 | ], |
6154 | 6154 | "properties": { |
6155 | | - "description": "OktaSingleSignOn Workbook with template version 3.1.2", |
| 6155 | + "description": "OktaSingleSignOn Workbook with template version 3.1.3", |
6156 | 6156 | "mainTemplate": { |
6157 | 6157 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
6158 | 6158 | "contentVersion": "[variables('workbookVersion1')]", |
|
6248 | 6248 | "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" |
6249 | 6249 | ], |
6250 | 6250 | "properties": { |
6251 | | - "description": "OktaSSO Data Parser with template version 3.1.2", |
| 6251 | + "description": "OktaSSO Data Parser with template version 3.1.3", |
6252 | 6252 | "mainTemplate": { |
6253 | 6253 | "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", |
6254 | 6254 | "contentVersion": "[variables('parserObject1').parserVersion1]", |
|
6376 | 6376 | "apiVersion": "2023-04-01-preview", |
6377 | 6377 | "location": "[parameters('workspace-location')]", |
6378 | 6378 | "properties": { |
6379 | | - "version": "3.1.2", |
| 6379 | + "version": "3.1.3", |
6380 | 6380 | "kind": "Solution", |
6381 | 6381 | "contentSchemaVersion": "3.0.0", |
6382 | 6382 | "displayName": "Okta Single Sign-On", |
|
0 commit comments