From 318e9830b830780856d17a5e479c850af0cecaed Mon Sep 17 00:00:00 2001 From: rahul0216 Date: Wed, 10 Dec 2025 15:49:20 +0530 Subject: [PATCH] Remove hidden-SentinelWorkspaceId from MDTI playbook templates Deleted the 'hidden-SentinelWorkspaceId' tag from azuredeploy.json files in all Microsoft Defender Threat Intelligence playbooks. This streamlines template metadata and removes hardcoded workspace references. --- .../Playbooks/MDTI-Automated-Triage/azuredeploy.json | 1 - .../Playbooks/MDTI-Data-WebComponents/azuredeploy.json | 1 - .../Playbooks/MDTI-Intel-Reputation/azuredeploy.json | 1 - .../Playbooks/MDTI-PassiveDns/azuredeploy.json | 1 - .../Playbooks/MDTI-PassiveDnsReverse/azuredeploy.json | 1 - .../Playbooks/MDTI-Trackers/azuredeploy.json | 1 - 6 files changed, 6 deletions(-) diff --git a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Automated-Triage/azuredeploy.json b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Automated-Triage/azuredeploy.json index a9bd5b305c5..d33932f1ab6 100644 --- a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Automated-Triage/azuredeploy.json +++ b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Automated-Triage/azuredeploy.json @@ -515,7 +515,6 @@ "tags": { "LogicAppsCategory": "security", "Source": "MDTI", - "hidden-SentinelWorkspaceId": "/subscriptions/a2c2c31d-ebd4-4880-a60c-d615efa9d201/resourceGroups/Sentinel-CAT/providers/microsoft.OperationalInsights/Workspaces/sentinel-lab", "hidden-SentinelTemplateName": "MDTI-Automated-Triage", "hidden-SentinelTemplateVersion": "1.0" }, diff --git a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Data-WebComponents/azuredeploy.json b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Data-WebComponents/azuredeploy.json index bb77c0d93cd..a047756815c 100644 --- a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Data-WebComponents/azuredeploy.json +++ b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Data-WebComponents/azuredeploy.json @@ -513,7 +513,6 @@ "tags": { "LogicAppsCategory": "security", "Source": "MDTI", - "hidden-SentinelWorkspaceId": "/subscriptions/a2c2c31d-ebd4-4880-a60c-d615efa9d201/resourceGroups/Sentinel-CAT/providers/microsoft.OperationalInsights/Workspaces/sentinel-lab4", "hidden-SentinelTemplateName": "MDTI-Data-WebComponents", "hidden-SentinelTemplateVersion": "1.0" }, diff --git a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Intel-Reputation/azuredeploy.json b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Intel-Reputation/azuredeploy.json index ecca8322d53..dbf22bc9ed8 100644 --- a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Intel-Reputation/azuredeploy.json +++ b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Intel-Reputation/azuredeploy.json @@ -367,7 +367,6 @@ "tags": { "LogicAppsCategory": "security", "Source": "MDTI", - "hidden-SentinelWorkspaceId": "/subscriptions/a2c2c31d-ebd4-4880-a60c-d615efa9d201/resourceGroups/Sentinel-CAT/providers/microsoft.OperationalInsights/Workspaces/sentinel-lab4", "hidden-SentinelTemplateName": "MDTI-Intel-Reputation", "hidden-SentinelTemplateVersion": "1.0" }, diff --git a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDns/azuredeploy.json b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDns/azuredeploy.json index 2b2cb299c8d..39b707422d6 100644 --- a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDns/azuredeploy.json +++ b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDns/azuredeploy.json @@ -650,7 +650,6 @@ "tags": { "LogicAppsCategory": "security", "Source": "MDTI", - "hidden-SentinelWorkspaceId": "/subscriptions/a2c2c31d-ebd4-4880-a60c-d615efa9d201/resourceGroups/Sentinel-CAT/providers/microsoft.OperationalInsights/Workspaces/sentinel-lab4", "hidden-SentinelTemplateName": "MDTI-Data-PassiveDns", "hidden-SentinelTemplateVersion": "1.0" }, diff --git a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDnsReverse/azuredeploy.json b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDnsReverse/azuredeploy.json index 122cd2e3866..9585a0b0b16 100644 --- a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDnsReverse/azuredeploy.json +++ b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-PassiveDnsReverse/azuredeploy.json @@ -652,7 +652,6 @@ "tags": { "LogicAppsCategory": "security", "Source": "MDTI", - "hidden-SentinelWorkspaceId": "/subscriptions/a2c2c31d-ebd4-4880-a60c-d615efa9d201/resourceGroups/Sentinel-CAT/providers/microsoft.OperationalInsights/Workspaces/sentinel-lab4", "hidden-SentinelTemplateName": "MDTI-Data-ReverseDnS", "hidden-SentinelTemplateVersion": "1.0" }, diff --git a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Trackers/azuredeploy.json b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Trackers/azuredeploy.json index dcfcb82c20b..5b50378d1fc 100644 --- a/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Trackers/azuredeploy.json +++ b/Solutions/Microsoft Defender Threat Intelligence/Playbooks/MDTI-Trackers/azuredeploy.json @@ -628,7 +628,6 @@ "tags": { "LogicAppsCategory": "security", "Source": "MDTI", - "hidden-SentinelWorkspaceId": "/subscriptions/a2c2c31d-ebd4-4880-a60c-d615efa9d201/resourceGroups/Sentinel-CAT/providers/microsoft.OperationalInsights/Workspaces/sentinel-lab4", "hidden-SentinelTemplateName": "MDTI-Data-Trackers", "hidden-SentinelTemplateVersion": "1.0" },