Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
"properties": {
"connectorUiConfig": {
"id": "Auth0ConnectorCCPDefinition",
"title": "Auth0 Logs",
"title": "Auth0 Logs (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "The [Auth0](https://auth0.com/docs/api/management/v2/logs/get-logs) data connector allows ingesting logs from Auth0 API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses Auth0 API to fetch logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table so that queries don't need to parse it again, thus resulting in better performance.",
"graphQueries": [
Expand Down
2 changes: 1 addition & 1 deletion Solutions/Auth0/Data/Solution_Auth0.json
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
],
"Metadata": "SolutionMetadata.json",
"BasePath": "C:\\Github\\Azure-Sentinel\\Solutions\\Auth0",
"Version": "3.1.0",
"Version": "3.1.1",
"TemplateSpec": true,
"Is1PConnector": false,
"createPackage": false
Expand Down
Binary file added Solutions/Auth0/Package/3.1.1.zip
Binary file not shown.
20 changes: 10 additions & 10 deletions Solutions/Auth0/Package/mainTemplate.json
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@
"email": "[email protected]",
"_email": "[variables('email')]",
"_solutionName": "Auth0",
"_solutionVersion": "3.1.0",
"_solutionVersion": "3.1.1",
"solutionId": "azuresentinel.azure-sentinel-solution-auth0",
"_solutionId": "[variables('solutionId')]",
"uiConfigId1": "Auth0",
Expand Down Expand Up @@ -92,7 +92,7 @@
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
],
"properties": {
"description": "Auth0 data connector with template version 3.1.0",
"description": "Auth0 data connector with template version 3.1.1",
"mainTemplate": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "[variables('dataConnectorVersion1')]",
Expand Down Expand Up @@ -454,7 +454,7 @@
],
"properties": {
"contentId": "[variables('_dataConnectorContentIdConnectorDefinition2')]",
"displayName": "Auth0 Logs",
"displayName": "Auth0 Logs (Preview)",
"contentKind": "DataConnector",
"mainTemplate": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
Expand All @@ -471,7 +471,7 @@
"properties": {
"connectorUiConfig": {
"id": "Auth0ConnectorCCPDefinition",
"title": "Auth0 Logs",
"title": "Auth0 Logs (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "The [Auth0](https://auth0.com/docs/api/management/v2/logs/get-logs) data connector allows ingesting logs from Auth0 API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses Auth0 API to fetch logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table so that queries don't need to parse it again, thus resulting in better performance.",
"graphQueries": [
Expand Down Expand Up @@ -852,7 +852,7 @@
"properties": {
"connectorUiConfig": {
"id": "Auth0ConnectorCCPDefinition",
"title": "Auth0 Logs",
"title": "Auth0 Logs (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "The [Auth0](https://auth0.com/docs/api/management/v2/logs/get-logs) data connector allows ingesting logs from Auth0 API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses Auth0 API to fetch logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table so that queries don't need to parse it again, thus resulting in better performance.",
"graphQueries": [
Expand Down Expand Up @@ -1001,14 +1001,14 @@
],
"properties": {
"contentId": "[variables('_dataConnectorContentIdConnections2')]",
"displayName": "Auth0 Logs",
"displayName": "Auth0 Logs (Preview)",
"contentKind": "ResourcesDataConnector",
"mainTemplate": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "[variables('dataConnectorCCPVersion')]",
"parameters": {
"connectorDefinitionName": {
"defaultValue": "Auth0 Logs",
"defaultValue": "Auth0 Logs (Preview)",
"type": "string",
"minLength": 1
},
Expand Down Expand Up @@ -1136,7 +1136,7 @@
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
],
"properties": {
"description": "Auth0AM Data Parser with template version 3.1.0",
"description": "Auth0AM Data Parser with template version 3.1.1",
"mainTemplate": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "[variables('parserObject1').parserVersion1]",
Expand Down Expand Up @@ -1268,7 +1268,7 @@
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
],
"properties": {
"description": "Auth0 Data Parser with template version 3.1.0",
"description": "Auth0 Data Parser with template version 3.1.1",
"mainTemplate": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "[variables('parserObject2').parserVersion2]",
Expand Down Expand Up @@ -1396,7 +1396,7 @@
"apiVersion": "2023-04-01-preview",
"location": "[parameters('workspace-location')]",
"properties": {
"version": "3.1.0",
"version": "3.1.1",
"kind": "Solution",
"contentSchemaVersion": "3.0.0",
"displayName": "Auth0",
Expand Down
5 changes: 3 additions & 2 deletions Solutions/Auth0/ReleaseNotes.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
|-------------|--------------------------------|--------------------------------------------------------|
| 3.0.1 | 13-12-2024 | Added new CCP **Data Connector** to the Solution |
| 3.1.1 | 22-01-2025 | Added Preview tag to CCP **Data Connector**|
| 3.1.0 | 13-12-2024 | Added new CCP **Data Connector** to the Solution |
| 3.0.0 | 24-08-2024 | Updated the **Data Connector** Function app python runtime version to 3.11 |
| 3.0.0 | 11-12-2023 | Added new **Parser** (Auth0AM) |
| | 11-12-2023 | Added new **Parser** (Auth0AM) |

Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
"properties": {
"connectorUiConfig": {
"id": "CortexXDRDataConnector",
"title": "Palo Alto Cortex XDR",
"title": "Palo Alto Cortex XDR (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "The [Palo Alto Cortex XDR](https://cortex-panw.stoplight.io/docs/cortex-xdr/branches/main/09agw06t5dpvw-cortex-xdr-rest-api) data connector allows ingesting logs from the Palo Alto Cortex XDR API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses the Palo Alto Cortex XDR API to fetch logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table so that queries don't need to parse it again, thus resulting in better performance.",
"graphQueries": [
Expand Down
Binary file not shown.
14 changes: 7 additions & 7 deletions Solutions/Palo Alto Cortex XDR CCP/Package/mainTemplate.json
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
},
"variables": {
"_solutionName": "Palo Alto Cortex XDR CCP",
"_solutionVersion": "3.0.0",
"_solutionVersion": "3.0.1",
"solutionId": "azuresentinel.azure-sentinel-solution-cortexccp",
"_solutionId": "[variables('solutionId')]",
"workspaceResourceId": "[resourceId('microsoft.OperationalInsights/Workspaces', parameters('workspace'))]",
Expand All @@ -68,7 +68,7 @@
],
"properties": {
"contentId": "[variables('_dataConnectorContentIdConnectorDefinition1')]",
"displayName": "Palo Alto Cortex XDR",
"displayName": "Palo Alto Cortex XDR (Preview)",
"contentKind": "DataConnector",
"mainTemplate": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
Expand All @@ -85,7 +85,7 @@
"properties": {
"connectorUiConfig": {
"id": "CortexXDRDataConnector",
"title": "Palo Alto Cortex XDR",
"title": "Palo Alto Cortex XDR (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "The [Palo Alto Cortex XDR](https://cortex-panw.stoplight.io/docs/cortex-xdr/branches/main/09agw06t5dpvw-cortex-xdr-rest-api) data connector allows ingesting logs from the Palo Alto Cortex XDR API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses the Palo Alto Cortex XDR API to fetch logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table so that queries don't need to parse it again, thus resulting in better performance.",
"graphQueries": [
Expand Down Expand Up @@ -2156,7 +2156,7 @@
"properties": {
"connectorUiConfig": {
"id": "CortexXDRDataConnector",
"title": "Palo Alto Cortex XDR",
"title": "Palo Alto Cortex XDR (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "The [Palo Alto Cortex XDR](https://cortex-panw.stoplight.io/docs/cortex-xdr/branches/main/09agw06t5dpvw-cortex-xdr-rest-api) data connector allows ingesting logs from the Palo Alto Cortex XDR API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses the Palo Alto Cortex XDR API to fetch logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table so that queries don't need to parse it again, thus resulting in better performance.",
"graphQueries": [
Expand Down Expand Up @@ -2362,14 +2362,14 @@
],
"properties": {
"contentId": "[variables('_dataConnectorContentIdConnections1')]",
"displayName": "Palo Alto Cortex XDR",
"displayName": "Palo Alto Cortex XDR (Preview)",
"contentKind": "ResourcesDataConnector",
"mainTemplate": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "[variables('dataConnectorCCPVersion')]",
"parameters": {
"connectorDefinitionName": {
"defaultValue": "Palo Alto Cortex XDR",
"defaultValue": "Palo Alto Cortex XDR (Preview)",
"type": "string",
"minLength": 1
},
Expand Down Expand Up @@ -2664,7 +2664,7 @@
"apiVersion": "2023-04-01-preview",
"location": "[parameters('workspace-location')]",
"properties": {
"version": "3.0.0",
"version": "3.0.1",
"kind": "Solution",
"contentSchemaVersion": "3.0.0",
"displayName": "Palo Alto Cortex XDR CCP",
Expand Down
1 change: 1 addition & 0 deletions Solutions/Palo Alto Cortex XDR CCP/ReleaseNotes.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
|-------------|--------------------------------|--------------------------------------------------------------------------|
| 3.0.1 | 22-01-2025 | Added Preview tag to **Data Connector** |
| 3.0.0 | 17-12-2024 | Initial Solution Release |
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
"properties": {
"connectorUiConfig": {
"id": "SentinelOneCCP",
"title": "SentinelOne",
"title": "SentinelOne (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "The [SentinelOne](https://usea1-nessat.sentinelone.net/api-doc/overview) data connector allows ingesting logs from the SentinelOne API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses the SentinelOne API to fetch logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table so that queries don't need to parse it again, thus resulting in better performance.",
"graphQueries": [
Expand Down
Binary file modified Solutions/SentinelOne/Package/3.0.5.zip
Binary file not shown.
Loading
Loading