Skip to content

Commit 636abb9

Browse files
author
Shubhangi Pagar
committed
Merge branch 'fixPodDuplicateDataIssue' of https://github.com/shubhangipagar-gh/Azure-Sentinel into fixPodDuplicateDataIssue
2 parents b75c38b + 3daccad commit 636abb9

File tree

173 files changed

+14808
-10002
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

173 files changed

+14808
-10002
lines changed

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
strategy:
3333
fail-fast: false
3434
matrix:
35-
language: [ 'javascript', 'python', 'ruby', 'actions' ]
35+
language: [ 'javascript', 'python', 'ruby', 'actions', 'csharp' ]
3636
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby', 'actions' ]
3737
# Learn more about CodeQL language support at https://git.io/codeql-language-support
3838

@@ -51,6 +51,16 @@ jobs:
5151
# queries: ./path/to/local/query, your-org/your-repo/queries@main
5252
queries: security-extended,security-and-quality
5353

54+
# ℹ️ Setup DotNet Versions to building C# projects
55+
- name: Setup DotNet Versions
56+
uses: actions/setup-dotnet@v5
57+
with:
58+
dotnet-version: |
59+
6.0.x
60+
7.0.x
61+
8.0.x
62+
9.0.x
63+
5464
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5565
# If this step fails, then you should remove it and run the build manually (see below)
5666
- name: Autobuild

‎.github/workflows/update-solutions-analyzer.yml‎

Lines changed: 79 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,79 @@
1+
name: Update Solutions Analyzer CSV Files
2+
3+
on:
4+
push:
5+
branches:
6+
- master
7+
paths:
8+
- 'Solutions/**/*.json'
9+
- 'Solutions/**/Parsers/**/*.yaml'
10+
- 'Solutions/**/Parsers/**/*.yml'
11+
- 'Tools/Solutions Analyzer/solution_connector_tables.py'
12+
workflow_dispatch: # Allow manual trigger
13+
schedule:
14+
# Run weekly on Monday at 2 AM UTC to catch any missed changes
15+
- cron: '0 2 * * 1'
16+
17+
jobs:
18+
update-csv:
19+
runs-on: ubuntu-latest
20+
permissions:
21+
contents: write
22+
pull-requests: write
23+
24+
steps:
25+
- name: Checkout repository
26+
uses: actions/checkout@v4
27+
with:
28+
fetch-depth: 0
29+
30+
- name: Set up Python
31+
uses: actions/setup-python@v5
32+
with:
33+
python-version: '3.11'
34+
35+
- name: Install dependencies
36+
run: |
37+
pip install json5
38+
39+
- name: Run Solutions Analyzer
40+
run: |
41+
cd "Tools/Solutions Analyzer"
42+
python solution_connector_tables.py
43+
44+
- name: Check for changes
45+
id: check_changes
46+
run: |
47+
if git diff --quiet "Tools/Solutions Analyzer/solutions_connectors_tables_mapping.csv" "Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv"; then
48+
echo "changed=false" >> $GITHUB_OUTPUT
49+
else
50+
echo "changed=true" >> $GITHUB_OUTPUT
51+
fi
52+
53+
- name: Commit and push changes
54+
if: steps.check_changes.outputs.changed == 'true'
55+
run: |
56+
git config --local user.email "github-actions[bot]@users.noreply.github.com"
57+
git config --local user.name "github-actions[bot]"
58+
git add "Tools/Solutions Analyzer/solutions_connectors_tables_mapping.csv"
59+
git add "Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv"
60+
git commit -m "chore: Update Solutions Analyzer CSV files [skip ci]"
61+
git push
62+
63+
- name: Create summary
64+
if: steps.check_changes.outputs.changed == 'true'
65+
run: |
66+
echo "### Solutions Analyzer Updated :white_check_mark:" >> $GITHUB_STEP_SUMMARY
67+
echo "" >> $GITHUB_STEP_SUMMARY
68+
echo "CSV files have been regenerated and committed." >> $GITHUB_STEP_SUMMARY
69+
echo "" >> $GITHUB_STEP_SUMMARY
70+
echo "**Modified files:**" >> $GITHUB_STEP_SUMMARY
71+
echo "- Tools/Solutions Analyzer/solutions_connectors_tables_mapping.csv" >> $GITHUB_STEP_SUMMARY
72+
echo "- Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv" >> $GITHUB_STEP_SUMMARY
73+
74+
- name: No changes summary
75+
if: steps.check_changes.outputs.changed == 'false'
76+
run: |
77+
echo "### Solutions Analyzer :information_source:" >> $GITHUB_STEP_SUMMARY
78+
echo "" >> $GITHUB_STEP_SUMMARY
79+
echo "No changes detected. CSV files are already up-to-date." >> $GITHUB_STEP_SUMMARY

‎.script/tests/asimParsersTest/ExclusionListForASimTests.csv‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,7 @@ ParserName
22
_ASim_NetworkSession_NTANetAnalytics
33
_Im_NetworkSession_NTANetAnalytics
44
_Im_NetworkSession_AzureFirewall
5-
_ASim_NetworkSession_AzureFirewall
5+
_ASim_NetworkSession_AzureFirewall
6+
_Im_Authentication_Sshd
7+
_ASim_Authentication_M365Defender
8+
_Im_Authentication_M365Defender

‎CODEOWNERS‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55

66
# All up code owners - this should be limited to a select few - if specific code owner is needed, add to the specific folders below
77

8-
* @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
8+
* @Azure/sentinel-repo-admins
99

1010
# This is copied from here: https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners
1111

@@ -14,9 +14,11 @@
1414
/Detections/ @Azure/sentinel-repo-hunt-detection-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
1515
/Hunting\ Queries/ @Azure/sentinel-repo-hunt-detection-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
1616
/Notebooks/ @Azure/sentinel-repo-books-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
17-
/Parsers/ @Azure/sentinel-repo-tools-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
17+
/Parsers/ @Azure/sentinel-repo-tools-reviewers @Azure/sentinel-repo-parser-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
1818
/Playbooks/ @Azure/sentinel-repo-books-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
1919
/Workbooks/ @Azure/sentinel-repo-books-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
2020
/Solutions/HoneyTokens/ @haneuvir
2121
/Solutions/SAP/ @udidekel
2222
/Solutions/ @Azure/sentinel-repo-solution-reviewers @Azure/sentinel-repo-admins @Azure/sentinel-repo-reviewers
23+
24+

‎DataConnectors/AWS-SecurityHubFindings/AzFunAWSSecurityHubIngestion/__init__.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ def main(mytimer: func.TimerRequest) -> None:
7979
try:
8080
managed_identity = ManagedIdentityCredential()
8181
azure_cli = AzureCliCredential()
82-
default_azure_credential = DefaultAzureCredential(
82+
default_azure_credential = DefaultAzureCredential( # CodeQL [SM05139] This connector is deprecated. Code will be deleted soon.
8383
exclude_shared_token_cache_credential=True
8484
)
8585
credential_chain = ChainedTokenCredential(

‎DataConnectors/O365 DataCSharp/.gitattributes‎

Lines changed: 0 additions & 63 deletions
This file was deleted.

0 commit comments

Comments
 (0)