Skip to content
Original file line number Diff line number Diff line change
Expand Up @@ -126,11 +126,11 @@
},
{
"title": "Option 1 - Azure Resource Manager (ARM) Template for Flex Consumption Plan",
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploy)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy."
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeployflex)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy."
},
{
"title": "Option 1 - Azure Resource Manager (ARM) Template for Premium Plan",
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploy)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy."
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploypremium)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy."
},
{
"title": "Option 2 - Manual Deployment of Azure Functions",
Expand All @@ -145,4 +145,4 @@
"description": "**2. Configure the Function App**\\n\\n1. In the Function App, select the Function App Name and select **Configuration**.\\n2. In the **Application settings** tab, select **+ New application setting**.\\n3. Add each of the following application settings individually, with their respective string values (case-sensitive): \\n\\tApplication ID\\n\\tTenant ID\\n\\tClient Secret\\n\\tVMRay API Key\\n\\tVMRay Initial Fetch Date\\n\\tTimeInterval - Use logAnalyticsUri to override the log analytics API endpoint for dedicated cloud. For example, for public cloud, leave the value empty; for Azure GovUS cloud environment, specify the value in the following format: `https://<CustomerId>.ods.opinsights.azure.us`\\n3. Once all application settings have been entered, click **Save**."
}
]
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -303,7 +303,7 @@
"WaitSection"
],
"properties": {
"packageUri": "https://github.com/vmray/ms-sentinel/raw/refs/heads/main/VMRayThreatIntelligence/FlexConsumptionPlan/VMRayConn.zip",
"packageUri": "https://aka.ms/sentinel-VMRay-functionapp",
"remoteBuild": true
}
},
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -312,7 +312,7 @@
"apiVersion": "2022-03-01",
"name": "[format('{0}/{1}', variables('FunctionName'), 'zipdeploy')]",
"properties": {
"packageUri": "https://github.com/vmray/ms-sentinel/raw/refs/heads/main/VMRayThreatIntelligence/PremiumPlan/VMRayConn.zip"
"packageUri": "https://aka.ms/sentinel-VMRay-functionapp"
},
"dependsOn": [
"[resourceId('Microsoft.Web/sites', variables('FunctionName'))]"
Expand Down
Binary file modified Solutions/VMRay/Package/3.0.0.zip
Binary file not shown.
12 changes: 7 additions & 5 deletions Solutions/VMRay/Package/mainTemplate.json
Original file line number Diff line number Diff line change
Expand Up @@ -246,7 +246,7 @@
"vmrayBaseURL": "[[parameters('vmrayBaseURL')]",
"vmrayAPIKey": "[[parameters('vmrayAPIKey')]",
"Resubmit": "[[parameters('Resubmit')]",
"WEBSITE_RUN_FROM_PACKAGE": "https://github.com/vmray/ms-sentinel/raw/refs/heads/main/VMRayEnrichment/VMRayEnrichemntFuncApp.zip?raw=true"
"WEBSITE_RUN_FROM_PACKAGE": "https://aka.ms/sentinel-VMRay-Enrichment"
}
}
]
Expand Down Expand Up @@ -1891,11 +1891,11 @@
]
},
{
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploy)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeployflex)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"title": "Option 1 - Azure Resource Manager (ARM) Template for Flex Consumption Plan"
},
{
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploy)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploypremium)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"title": "Option 1 - Azure Resource Manager (ARM) Template for Premium Plan"
},
{
Expand Down Expand Up @@ -2112,11 +2112,11 @@
]
},
{
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploy)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeployflex)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"title": "Option 1 - Azure Resource Manager (ARM) Template for Flex Consumption Plan"
},
{
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploy)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"description": "Use this method for automated deployment of the data connector using an ARM Template.\n\n1. Click the **Deploy to Azure** button below. \n\n\t[![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploypremium)\n2. Select the preferred **Subscription**, **Resource Group** and **Location**. \n3. Enter the **Application ID**, **Tenant ID**,**Client Secret**, **VMRay API Key**, **VMRay Initial Fetch Date**, **TimeInterval** and deploy.\n4. Mark the checkbox labeled **I agree to the terms and conditions stated above**.\n5. Click **Purchase** to deploy.",
"title": "Option 1 - Azure Resource Manager (ARM) Template for Premium Plan"
},
{
Expand Down Expand Up @@ -2207,3 +2207,5 @@
"outputs": {}
}



10 changes: 5 additions & 5 deletions Solutions/VMRay/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -101,12 +101,12 @@
### Flex Consumption Plan
- Click on below button to deploy with Flex Consumption plan:

[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Frefs%2Fheads%2Fmaster%2FSolutions%2FVMRay%2FData%20Connectors%2Fazuredeploy_VMRayThreatIntelligenceFuncApp_AzureFunction_flex.json)
[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeployflex)

### Premium Plan
- Click on below button to deploy with Premium plan:

[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Frefs%2Fheads%2Fmaster%2FSolutions%2FVMRay%2FData%20Connectors%2Fazuredeploy_VMRayThreatIntelligenceFuncApp_AzureFunction_premium.json)
[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://aka.ms/sentinel-VMRay-azuredeploypremium)

- It will redirect to feed Configuration page.
![09](Images/09.png)
Expand Down Expand Up @@ -138,7 +138,7 @@

- Click on below button to deploy

[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2raw.githubusercontent.com%2Azure%2Azure-Sentinel%2refs%2heads%2master%2Solutions%2VMRay%2Playbooks%2CustomConnector%2VMRayEnrichment_FunctionAppConnector%2azuredeploy.json)
[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Frefs%2Fheads%2Fmaster%2FSolutions%2FVMRay%2FPlaybooks%2FCustomConnector%2FVMRayEnrichment_FunctionAppConnector%2Fazuredeploy.json)

- It will redirect to feed Configuration page.

Expand Down Expand Up @@ -168,7 +168,7 @@

- Click on below button to deploy

[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2raw.githubusercontent.com%2Azure%2Azure-Sentinel%2refs%2heads%2master%2Solutions%2VMRay%2Playbooks%2Submit-URL-VMRay-Analyzer%2azuredeploy.json)
[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Frefs%2Fheads%2Fmaster%2FSolutions%2FVMRay%2FPlaybooks%2FSubmit-URL-VMRay-Analyzer%2Fazuredeploy.json)

- It will redirect to configuration page

Expand All @@ -195,7 +195,7 @@

- Click on below button to deploy

[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2raw.githubusercontent.com%2Azure%2Azure-Sentinel%2refs%2heads%2master%2Solutions%2VMRay%2Playbooks%2VMRay-Sandbox_Outlook_Attachment%2azuredeploy.json)
[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Frefs%2Fheads%2Fmaster%2FSolutions%2FVMRay%2FPlaybooks%2FVMRay-Sandbox_Outlook_Attachment%2Fazuredeploy.json)

- It will redirect to configuration page

Expand Down
2 changes: 1 addition & 1 deletion Solutions/VMRay/ReleaseNotes.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
|-------------|--------------------------------|---------------------------------------------| |
|-------------|--------------------------------|---------------------------------------------|
| 3.0.0 | 23-07-2025 | Initial Solution Release |