AI_Creation_Events

[mgstate]

Machine learning creation event

Required items, please complete

Change(s):

Added a new detection rule for Azure Machine Learning Write Operations.
Updated the YAML configuration to include tactics and techniques relevant to potential rogue access or resource creation.
Reason for Change(s):

To monitor and investigate write operations on Azure Machine Learning resources, ensuring that any unauthorized access or resource creation is detected.
Resolves ISSUE #1234 (if applicable).
Version Updated:

Yes
Detections/Analytic Rule templates are required to have the version updated.
Testing Completed:

Yes
The code has been tested in a Microsoft Sentinel environment to validate syntax and execution.
Checked that the validations are passing and have addressed any issues that are present:

Yes

[mgstate]

@microsoft-github-policy-service agree

[v-shukore]

Hi @mgstate, the key 'ID' is not present in this analytic rule. Please add it to the rule. You can refer any rule from our repo. Thanks.

[mgstate]

Hi @mgstate, the key 'ID' is not present in this analytic rule. Please add it to the rule. You can refer any rule from our repo. Thanks.

I see - the appropriate modifications have been made @v-prasadboke @v-shukore

[mgstate]

Hi @mgstate, the key 'ID' is not present in this analytic rule. Please add it to the rule. You can refer any rule from our repo. Thanks.

I see - the appropriate modifications have been made @v-prasadboke @v-shukore

sorry meant to put @v-shukore