Skip to content

Commit 73258c2

Browse files
SaisangSaisang
committed
Update dataconnectors
1 parent 5cf4559 commit 73258c2

24 files changed

+108
-57
lines changed

‎articles/sentinel/data-connectors/abnormalsecurity.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "AbnormalSecurity (using Azure Functions) connector for Microsoft Sentine
33
description: "Learn how to install the connector AbnormalSecurity (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -109,7 +109,7 @@ If you're already signed in, go to the next step.
109109

110110
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. AbnormalSecurityXX).
111111

112-
e. **Select a runtime:** Choose Python 3.8.
112+
e. **Select a runtime:** Choose Python 3.11.
113113

114114
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
115115

‎articles/sentinel/data-connectors/alicloud.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "AliCloud (using Azure Functions) connector for Microsoft Sentinel"
33
description: "Learn how to install the connector AliCloud (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -113,7 +113,7 @@ If you're already signed in, go to the next step.
113113

114114
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. AliCloudXXXXX).
115115

116-
e. **Select a runtime:** Choose Python 3.8.
116+
e. **Select a runtime:** Choose Python 3.11.
117117

118118
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
119119

‎articles/sentinel/data-connectors/api-protection.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "API Protection connector for Microsoft Sentinel"
33
description: "Learn how to install the connector API Protection to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -65,7 +65,7 @@ The installation process is documented in great detail in the GitHub repository
6565

6666
Step 2: Retrieve the workspace access credentials
6767

68-
The first installation step is to retrieve both your **Workspace ID** and **Primary Key** from the Sentinel platform.
68+
The first installation step is to retrieve both your **Workspace ID** and **Primary Key** from the Microsoft Sentinel platform.
6969
Copy the values shown below and save them for configuration of the API log forwarder integration.
7070

7171

@@ -89,15 +89,15 @@ In order to test the data ingestion the user should deploy the sample *httpbin*
8989

9090
4.1 Install the sample
9191

92-
The sample application can be installed locally using a [Docker compose file](https://github.com/42Crunch/azure-sentinel-integration/blob/main/sample-deployment/docker-compose.yml) which will install the httpbin API server, the 42Crunch API protection and the Sentinel log forwarder. Set the environment variables as required using the values copied from step 2.
92+
The sample application can be installed locally using a [Docker compose file](https://github.com/42Crunch/azure-sentinel-integration/blob/main/sample-deployment/docker-compose.yml) which will install the httpbin API server, the 42Crunch API protection and the Microsoft Sentinel log forwarder. Set the environment variables as required using the values copied from step 2.
9393

9494
4.2 Run the sample
9595

9696
Verfify the API protection is connected to the 42Crunch platform, and then exercise the API locally on the *localhost* at port 8080 using Postman, curl, or similar. You should see a mixture of passing and failing API calls.
9797

9898
4.3 Verify the data ingestion on Log Analytics
9999

100-
After approximately 20 minutes access the Log Analytics workspace on your Sentinel installation, and locate the *Custom Logs* section verify that a *apifirewall_log_1_CL* table exists. Use the sample queries to examine the data.
100+
After approximately 20 minutes access the Log Analytics workspace on your Microsoft Sentinel installation, and locate the *Custom Logs* section verify that a *apifirewall_log_1_CL* table exists. Use the sample queries to examine the data.
101101

102102

103103

‎articles/sentinel/data-connectors/armis-devices.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "Armis Devices (using Azure Functions) connector for Microsoft Sentinel"
33
description: "Learn how to install the connector Armis Devices (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -121,7 +121,7 @@ If you're already signed in, go to the next step.
121121

122122
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. ARMISXXXXX).
123123

124-
e. **Select a runtime:** Choose Python 3.8 or above.
124+
e. **Select a runtime:** Choose Python 3.11 or above.
125125

126126
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
127127

‎articles/sentinel/data-connectors/armorblox.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "Armorblox (using Azure Functions) connector for Microsoft Sentinel"
33
description: "Learn how to install the connector Armorblox (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -113,7 +113,7 @@ If you're already signed in, go to the next step.
113113

114114
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. Armorblox).
115115

116-
e. **Select a runtime:** Choose Python 3.8.
116+
e. **Select a runtime:** Choose Python 3.11.
117117

118118
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
119119

‎articles/sentinel/data-connectors/atlassian-confluence-audit.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "Atlassian Confluence Audit (using Azure Functions) connector for Microso
33
description: "Learn how to install the connector Atlassian Confluence Audit (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -105,7 +105,7 @@ If you're already signed in, go to the next step.
105105

106106
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. ConflAuditXXXXX).
107107

108-
e. **Select a runtime:** Choose Python 3.8.
108+
e. **Select a runtime:** Choose Python 3.11.
109109

110110
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
111111

‎articles/sentinel/data-connectors/auth0-access-management.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
---
2-
title: "Auth0 Access Management(using Azure Function) (using Azure Functions) connector for Microsoft Sentinel"
3-
description: "Learn how to install the connector Auth0 Access Management(using Azure Function) (using Azure Functions) to connect your data source to Microsoft Sentinel."
2+
title: "Auth0 Access Management(using Azure Function) connector for Microsoft Sentinel"
3+
description: "Learn how to install the connector Auth0 Access Management(using Azure Function) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
1010
---
1111

12-
# Auth0 Access Management(using Azure Function) (using Azure Functions) connector for Microsoft Sentinel
12+
# Auth0 Access Management(using Azure Function) connector for Microsoft Sentinel
1313

1414
The [Auth0 Access Management](https://auth0.com/access-management) data connector provides the capability to ingest [Auth0 log events](https://auth0.com/docs/api/management/v2/#!/Logs/get_logs) into Microsoft Sentinel
1515

@@ -39,7 +39,7 @@ Auth0AM_CL
3939

4040
## Prerequisites
4141

42-
To integrate with Auth0 Access Management(using Azure Function) (using Azure Functions) make sure you have:
42+
To integrate with Auth0 Access Management(using Azure Function) make sure you have:
4343

4444
- **Microsoft.Web/sites permissions**: Read and write permissions to Azure Functions to create a Function App is required. [See the documentation to learn more about Azure Functions](/azure/azure-functions/).
4545
- **REST API Credentials/permissions**: **API token** is required. [See the documentation to learn more about API token](https://auth0.com/docs/secure/tokens/access-tokens/get-management-api-access-tokens-for-production)
@@ -108,7 +108,7 @@ If you're already signed in, go to the next step.
108108

109109
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. Auth0AMXXXXX).
110110

111-
e. **Select a runtime:** Choose Python 3.8.
111+
e. **Select a runtime:** Choose Python 3.11.
112112

113113
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
114114

‎articles/sentinel/data-connectors/bitglass.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "Bitglass (using Azure Functions) connector for Microsoft Sentinel"
33
description: "Learn how to install the connector Bitglass (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -111,7 +111,7 @@ If you're already signed in, go to the next step.
111111

112112
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. BitglassXXXXX).
113113

114-
e. **Select a runtime:** Choose Python 3.8.
114+
e. **Select a runtime:** Choose Python 3.11.
115115

116116
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
117117

‎articles/sentinel/data-connectors/cisco-secure-endpoint-amp.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "Cisco Secure Endpoint (AMP) (using Azure Functions) connector for Micros
33
description: "Learn how to install the connector Cisco Secure Endpoint (AMP) (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -106,7 +106,7 @@ If you're already signed in, go to the next step.
106106

107107
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions.
108108

109-
e. **Select a runtime:** Choose Python 3.8.
109+
e. **Select a runtime:** Choose Python 3.11.
110110

111111
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
112112

‎articles/sentinel/data-connectors/cloudflare.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "Cloudflare (Preview) (using Azure Functions) connector for Microsoft Sen
33
description: "Learn how to install the connector Cloudflare (Preview) (using Azure Functions) to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 04/26/2024
6+
ms.date: 10/15/2024
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
ms.collection: sentinel-data-connector
@@ -106,7 +106,7 @@ If you're already signed in, go to the next step.
106106

107107
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. CloudflareXX).
108108

109-
e. **Select a runtime:** Choose Python 3.8.
109+
e. **Select a runtime:** Choose Python 3.11.
110110

111111
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
112112

0 commit comments

Comments
 (0)