Entity-analyzer-Fixes

[Yaniv-Shasha]

this commit changes these 3 parts

1. change the lookback value to 7 days on all the 3 logic apps

2. for the file
   \Solutions\SentinelSOARessentials\Playbooks\Incident-Trigger-Entity-Analyzer\azuredeploy.json

added

                        "type": "Foreach",
                        **"runtimeConfiguration": {
                            "concurrency": {
                                "repetitions": 5**
                            }
                        }

on the foreach loop - this was tested and deployed successfully

3. for file :

Solutions\SentinelSOARessentials\Playbooks\Url-Trigger-Entity-Analyzer\azuredeploy.json

change the title of the logic app to
"title": "URL Trigger Entity Analyzer",

Version updated:

• Yes
• Detections/Analytic Rule templates are required to have the version updated

The code should have been tested in a Microsoft Sentinel environment that does not have any custom parsers, functions or tables, so that you validate no incorrect syntax and execution functions properly. If your submission requires a custom parser or function, it must be submitted with the PR.

Testing Completed:

• Yes

Note: If updating a detection, you must update the version field.

Before the submission has been made, please look at running the KQL and Yaml Validation Checks locally.
https://github.com/Azure/Azure-Sentinel#run-kql-validation-locally

Checked that the validations are passing and have addressed any issues that are present:

• Yes/No/Need Help

Note: Let us know if you have tried fixing the validation error and need help.

References:

• Guidance for Detection checks
• General contribution guidance
• PR validation troubleshooting

---

[v-maheshbh]

Hi @Yaniv-Shasha
Could you please attach the playbook testing screenshot for reference?

Thanks!

[Yaniv-Shasha]

just be sure that as i changes the title name of one of the logic, the solution package will still reference it

[v-maheshbh]

HI @Yaniv-Shasha

FYI

Thanks!