Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update data connectors and workbooks #10076

Closed
wants to merge 13 commits into from
Closed

Update data connectors and workbooks #10076

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
7a867ea
Version Update
nlepagnez Mar 2, 2024
9ca432a
Merge branch 'Azure:master' into UpdateDataConnectorsAndWorkbooks
nlepagnez Mar 2, 2024
474894c
Update Deployment to add new Configuration Version
nlepagnez Mar 2, 2024
bd7e66d
Merge branch 'UpdateDataConnectorsAndWorkbooks' of https://github.com…
nlepagnez Mar 2, 2024
859b1f7
Update data connector for update procedure
nlepagnez Mar 2, 2024
44b7e9f
Compil Solution Package
nlepagnez Mar 2, 2024
0fdbc9f
Adding New Custom Tables for tests
nlepagnez Mar 2, 2024
e425975
Adding missing custom tables
nlepagnez Mar 2, 2024
463a633
Correct Variable
nlepagnez Mar 6, 2024
3003a1a
Update permissions required for the colletor
nlepagnez Mar 11, 2024
ae83594
Update ESI-ExchangeAdminAuditLogEvents.json
v-prasadboke Mar 12, 2024
f3a2466
Adding "Azure Functions" permissions as Tests hardcode the check of t…
nlepagnez Mar 12, 2024
e98e41c
Merge branch 'UpdateDataConnectorsAndWorkbooks' of https://github.com…
nlepagnez Mar 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
135 changes: 135 additions & 0 deletions .script/tests/KqlvalidationsTests/CustomFunctions/ExchangeConfiguration.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,135 @@
{
"FunctionName": "ExchangeConfiguration",
"FunctionParameters": [
{
"Name": "SpecificSectionList",
"Type": "String"
},
{
"Name": "SpecificConfigurationDate",
"Type": "String"
},
{
"Name": "Target",
"Type": "String"
},
{
"Name": "SpecificConfigurationEnv",
"Type": "String"
}
],
"FunctionResultColumns": [
{
"Name": "TimeGenerated",
"Type": "DateTime"
},
{
"Name": "TableName",
"Type": "String"
},
{
"Name": "Identity_s",
"Type": "String"
},
{
"Name": "ConfigurationInstanceID",
"Type": "String"
},
{
"Name": "ESIEnvironment",
"Type": "String"
},
{
"Name": "Section",
"Type": "String"
},
{
"Name": "PSCmdlet",
"Type": "String"
},
{
"Name": "Name",
"Type": "String"
},
{
"Name": "IdentityString_s",
"Type": "String"
},
{
"Name": "CmdletResultType",
"Type": "String"
},
{
"Name": "rawData_s",
"Type": "dynamic"
},
{
"Name": "Identity_IsDeleted_b",
"Type": "binary"
},
{
"Name": "Identity_Rdn_s",
"Type": "String"
},
{
"Name": "Identity_Parent_s",
"Type": "String"
},
{
"Name": "Identity_Depth_d",
"Type": "integer"
},
{
"Name": "Identity_DistinguishedName_s",
"Type": "String"
},
{
"Name": "Identity_IsRelativeDn_b",
"Type": "binary"
},
{
"Name": "Identity_DomainId_s",
"Type": "String"
},
{
"Name": "Identity_PartitionGuid_g",
"Type": "guid"
},
{
"Name": "Identity_PartitionFQDN_s",
"Type": "String"
},
{
"Name": "Identity_ObjectGuid_g",
"Type": "guid"
},
{
"Name": "Identity_Name_s",
"Type": "String"
},
{
"Name": "WhenCreated",
"Type": "DateTime"
},
{
"Name": "WhenChanged",
"Type": "DateTime"
},
{
"Name": "Source",
"Type": "String"
},
{
"Name": "ScopedEnvironment",
"Type": "String"
},
{
"Name": "Identity",
"Type": "String"
},
{
"Name": "CmdletResultValue",
"Type": "dynamic"
}
]
}
8 changes: 8 additions & 0 deletions .script/tests/KqlvalidationsTests/CustomTables/ESIExchangeOnlineConfig_CL.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,6 +64,14 @@
"Name": "WhenChanged_s",
"Type": "string"
},
{
"Name": "WhenCreated_t",
"Type": "datetime"
},
{
"Name": "WhenChanged_t",
"Type": "datetime"
},
{
"Name": "ExecutionResult_s",
"Type": "string"
Expand Down
96 changes: 96 additions & 0 deletions .script/tests/KqlvalidationsTests/CustomTables/ExchangeHttpProxy_CL.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,96 @@
{ "Name": "ExchangeHttpProxy_CL",
"Properties":[
{
"Name": "TenantId",
"Type": "string"
},
{
"Name": "SourceSystem",
"Type": "string"
},
{
"Name": "MG",
"Type": "string"
},
{
"Name": "ManagementGroupName",
"Type": "string"
},
{
"Name": "TimeGenerated",
"Type": "datetime"
},
{
"Name": "Computer",
"Type": "string"
},
{
"Name": "RawData",
"Type": "string"
},
{
"Name": "GenerationInstanceID_g",
"Type": "string"
},
{
"Name": "ESIEnvironment_s",
"Type": "string"
},
{
"Name": "EntryDate_s",
"Type": "string"
},
{
"Name": "Section_s",
"Type": "string"
},
{
"Name": "PSCmdL_s",
"Type": "string"
},
{
"Name": "Name_s",
"Type": "string"
},
{
"Name": "Identity_s",
"Type": "string"
},
{
"Name": "WhenCreated_s",
"Type": "string"
},
{
"Name": "WhenChanged_s",
"Type": "string"
},
{
"Name": "WhenCreated_t",
"Type": "datetime"
},
{
"Name": "WhenChanged_t",
"Type": "datetime"
},
{
"Name": "ExecutionResult_s",
"Type": "string"
},
{
"Name": "rawData_s",
"Type": "string"
},
{
"Name": "IdentityString_s",
"Type": "string"
},
{
"Name": "Type",
"Type": "string"
},
{
"Name": "_ResourceId",
"Type": "string"
}
]
}
88 changes: 88 additions & 0 deletions .script/tests/KqlvalidationsTests/CustomTables/MessageTrackingLog_CL.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,88 @@
{ "Name": "MessageTrackingLog_CL",
"Properties":[
{
"Name": "TenantId",
"Type": "string"
},
{
"Name": "SourceSystem",
"Type": "string"
},
{
"Name": "MG",
"Type": "string"
},
{
"Name": "ManagementGroupName",
"Type": "string"
},
{
"Name": "TimeGenerated",
"Type": "datetime"
},
{
"Name": "Computer",
"Type": "string"
},
{
"Name": "RawData",
"Type": "string"
},
{
"Name": "GenerationInstanceID_g",
"Type": "string"
},
{
"Name": "ESIEnvironment_s",
"Type": "string"
},
{
"Name": "EntryDate_s",
"Type": "string"
},
{
"Name": "Section_s",
"Type": "string"
},
{
"Name": "PSCmdL_s",
"Type": "string"
},
{
"Name": "Name_s",
"Type": "string"
},
{
"Name": "Identity_s",
"Type": "string"
},
{
"Name": "WhenCreated_s",
"Type": "string"
},
{
"Name": "WhenChanged_s",
"Type": "string"
},
{
"Name": "ExecutionResult_s",
"Type": "string"
},
{
"Name": "rawData_s",
"Type": "string"
},
{
"Name": "IdentityString_s",
"Type": "string"
},
{
"Name": "Type",
"Type": "string"
},
{
"Name": "_ResourceId",
"Type": "string"
}
]
}
5 changes: 5 additions & 0 deletions .script/tests/NonAsciiValidationsTests/SkipValidationsTemplates.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,11 @@
"id": "44a7b71e-ad89-49fd-b540-a73c83c6f8c5",
"templateName": "Remote Management and Monitoring tool - ServerEye - File Signature",
"validationFailReason": "umlaut is present in the proper name"
},
{
"id": "39f51672-8c63-4600-882a-5db8275f798f",
"templateName": "Microsoft Exchange Security - MESCompareDataMRA parser",
"validationFailReason": "Non-ASCII characters are required to test comparison of strings with non-ASCII characters"
}
]

Expand Down
14 changes: 11 additions & 3 deletions ...ange Security - Exchange On-Premises/Data Connectors/ESI-ExchangeAdminAuditLogEvents.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
{
"metricName": "Total data received",
"legend": "[Option 3 & 4] Domain Controllers Security Logs",
"baseQuery": "SecurityEvents"
"baseQuery": "SecurityEvent"
},
{
"metricName": "Total data received",
Expand Down Expand Up @@ -60,7 +60,15 @@
}
],
"connectivityCriterias": [
"SentinelKindsV2"
{
"type": "IsConnectedQuery",
"value": [
"Event | where EventLog == 'MSExchange Management' | summarize LastLogReceived = max(TimeGenerated) | project IsConnected = LastLogReceived > ago(7d)",
"W3CIISLog | summarize LastLogReceived = max(TimeGenerated) | project IsConnected = LastLogReceived > ago(7d)",
"MessageTrackingLog_CL | summarize LastLogReceived = max(TimeGenerated) | project IsConnected = LastLogReceived > ago(7d)",
"ExchangeHttpProxy_CL | summarize LastLogReceived = max(TimeGenerated) | project IsConnected = LastLogReceived > ago(7d)"
]
}
],
"availability": {
"status": 1,
Expand Down Expand Up @@ -685,7 +693,7 @@
],
"metadata": {
"id": "5738bef7-b6c0-4fec-ba0b-ac728bef83a9",
"version": "2.1.0",
"version": "2.2.0",
"kind": "dataConnector",
"source": {
"kind": "solution",
Expand Down
Loading
Loading