Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft.security insights 2021 09 01 preview add missing resources #15531

Merged
merged 20 commits into from
Aug 24, 2021
Merged

Microsoft.security insights 2021 09 01 preview add missing resources #15531

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
32855ea
Copy missing resources specs and examples from 2019-01-01-preview
Aug 5, 2021
aefc884
Update added resources specs and examples and extract common types
Aug 5, 2021
808fc88
Update readme
Aug 5, 2021
972bca3
Extract ClientInfo, UserInfo and Lable to common types
Aug 5, 2021
d8bb490
Fix SpellCheck and Avocado
Aug 5, 2021
150ddb0
Return ThreatIntelligence to readme
Aug 5, 2021
057d5b0
Fix broken refs in Watchlists
Aug 5, 2021
1f925d4
Resolve duplicate schema errors
Aug 8, 2021
bb3f3af
Run prettier
Aug 8, 2021
a53a4e5
Make common types prettier
Aug 8, 2021
12e2335
Add required property to operations according to ARM requirments
Aug 8, 2021
9f3c90e
Fix readme
Aug 8, 2021
1aa3dff
Add file separators to readme
Aug 8, 2021
92db83a
Rename example file
Aug 8, 2021
5e6e427
Supress OBJECT_ADDITIONAL_PROPERTIES
Aug 10, 2021
6bcc3f4
Add 'where' to OBJECT_ADDITIONAL_PROPERTIES supression
Aug 10, 2021
2488179
Move OBJECT_ADDITIONAL_PROPERTIES supression under general Supression…
Aug 10, 2021
ad8fe8a
Copy dataConnectors from 2021-03-01-preview
Aug 23, 2021
f3c4ca3
Update version of dataConnectors (this was done as there were errors …
Aug 23, 2021
623d5b5
Add dataConnectorsCheckRequirments path, parameters and definitions f…
Aug 23, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
87 changes: 16 additions & 71 deletions ...ts/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/AlertRules.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -804,61 +804,6 @@
"value"
]
},
"AlertSeverity": {
"description": "The severity of the alert",
"enum": [
"High",
"Medium",
"Low",
"Informational"
],
"type": "string",
"x-ms-enum": {
"modelAsString": true,
"name": "AlertSeverity",
"values": [
{
"description": "High severity",
"value": "High"
},
{
"description": "Medium severity",
"value": "Medium"
},
{
"description": "Low severity",
"value": "Low"
},
{
"description": "Informational severity",
"value": "Informational"
}
]
}
},
"AttackTactic": {
"description": "The severity for alerts created by this alert rule.",
"enum": [
"InitialAccess",
"Execution",
"Persistence",
"PrivilegeEscalation",
"DefenseEvasion",
"CredentialAccess",
"Discovery",
"LateralMovement",
"Collection",
"Exfiltration",
"CommandAndControl",
"Impact",
"PreAttack"
],
"type": "string",
"x-ms-enum": {
"modelAsString": true,
"name": "AttackTactic"
}
},
"MLBehaviorAnalyticsAlertRule": {
"allOf": [
{
Expand Down Expand Up @@ -904,14 +849,14 @@
"type": "string"
},
"severity": {
"$ref": "#/definitions/AlertSeverity",
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum",
"description": "The severity for alerts created by this alert rule.",
"readOnly": true
},
"tactics": {
"description": "The tactics of the alert rule",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"readOnly": true,
"type": "array"
Expand Down Expand Up @@ -940,13 +885,13 @@
"description": "MLBehaviorAnalytics alert rule template properties.",
"properties": {
"severity": {
"$ref": "#/definitions/AlertSeverity",
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum",
"description": "The severity for alerts created by this alert rule."
},
"tactics": {
"description": "The tactics of the alert rule template.",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
}
Expand Down Expand Up @@ -1010,14 +955,14 @@
"type": "string"
},
"severity": {
"$ref": "#/definitions/AlertSeverity",
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum",
"description": "The severity for alerts created by this alert rule.",
"readOnly": true
},
"tactics": {
"description": "The tactics of the alert rule",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"readOnly": true,
"type": "array"
Expand Down Expand Up @@ -1046,13 +991,13 @@
"description": "Fusion alert rule template properties",
"properties": {
"severity": {
"$ref": "#/definitions/AlertSeverity",
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum",
"description": "The severity for alerts created by this alert rule."
},
"tactics": {
"description": "The tactics of the alert rule template",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
}
Expand Down Expand Up @@ -1116,14 +1061,14 @@
"type": "string"
},
"severity": {
"$ref": "#/definitions/AlertSeverity",
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum",
"description": "The severity for alerts created by this alert rule.",
"readOnly": true
},
"tactics": {
"description": "The tactics of the alert rule",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"readOnly": true,
"type": "array"
Expand Down Expand Up @@ -1152,13 +1097,13 @@
"description": "Threat Intelligence alert rule template properties",
"properties": {
"severity": {
"$ref": "#/definitions/AlertSeverity",
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum",
"description": "The severity for alerts created by this alert rule."
},
"tactics": {
"description": "The tactics of the alert rule template",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
}
Expand Down Expand Up @@ -1231,7 +1176,7 @@
"severitiesFilter": {
"description": "the alerts' severities on which the cases will be generated",
"items": {
"$ref": "#/definitions/AlertSeverity"
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum"
},
"type": "array"
}
Expand Down Expand Up @@ -1353,7 +1298,7 @@
"tactics": {
"description": "The tactics of the alert rule",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
},
Expand Down Expand Up @@ -1398,7 +1343,7 @@
"tactics": {
"description": "The tactics of the alert rule template",
"items": {
"$ref": "#/definitions/AttackTactic"
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
}
Expand Down Expand Up @@ -1478,7 +1423,7 @@
"type": "string"
},
"severity": {
"$ref": "#/definitions/AlertSeverity",
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum",
"description": "The severity for alerts created by this alert rule."
},
"triggerOperator": {
Expand Down
Loading