forked from Azure/azure-rest-api-specs
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Release securityinsights microsoft.security insights 2022 12 01 previ…
…ew resolved (Azure#21853) * Adds base for updating Microsoft.SecurityInsights from version preview/2022-11-01-preview to version 2022-12-01-preview * Updates readme * Updates API version in new specs and examples * Resolve merge conflicts in 2022-12-01-preview (Azure#21772) * Adds base for updating Microsoft.SecurityInsights from version preview/2022-11-01-preview to version 2022-12-01-preview * Updates readme * Updates API version in new specs and examples * Add tasks API to incidents and tasks action to automationRules (Azure#21542) * Use generated incidents swagger instead of manual * try to fix prettier * try to fix prettier * try to fix prettier * fix example casing * fix example casing * fix example path and body * fix alignment with previous swagger * Add tasks to incidents API * add task action to automationrules API * prettier * fix lint - missing workspaceName pattern * fix lint - missing workspaceName pattern * Update entity additional properties to match new oav example validation * Delete redundant examples Co-authored-by: ityankel <47292630+ityankel@users.noreply.github.com> * Fix model and spell validations (Azure#21857) * Fix model validation * Add Ueba to custom-words Co-authored-by: Anat Gilenson <53407600+anat-gilenson@users.noreply.github.com> Co-authored-by: ityankel <47292630+ityankel@users.noreply.github.com>
- Loading branch information
Showing
220 changed files
with
34,817 additions
and
3 deletions.
There are no files selected for viewing
2,543 changes: 2,543 additions & 0 deletions
2,543
...ts/resource-manager/Microsoft.SecurityInsights/preview/2022-12-01-preview/AlertRules.json
Large diffs are not rendered by default.
Oops, something went wrong.
1,410 changes: 1,410 additions & 0 deletions
1,410
...source-manager/Microsoft.SecurityInsights/preview/2022-12-01-preview/AutomationRules.json
Large diffs are not rendered by default.
Oops, something went wrong.
751 changes: 751 additions & 0 deletions
751
...hts/resource-manager/Microsoft.SecurityInsights/preview/2022-12-01-preview/Bookmarks.json
Large diffs are not rendered by default.
Oops, something went wrong.
381 changes: 381 additions & 0 deletions
381
...ts/resource-manager/Microsoft.SecurityInsights/preview/2022-12-01-preview/Enrichment.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,381 @@ | ||
| { | ||
| "swagger": "2.0", | ||
| "info": { | ||
| "title": "Security Insights", | ||
| "description": "API spec for Microsoft.SecurityInsights (Azure Security Insights) resource provider", | ||
| "version": "2022-12-01-preview" | ||
| }, | ||
| "host": "management.azure.com", | ||
| "schemes": [ | ||
| "https" | ||
| ], | ||
| "consumes": [ | ||
| "application/json" | ||
| ], | ||
| "produces": [ | ||
| "application/json" | ||
| ], | ||
| "security": [ | ||
| { | ||
| "azure_auth": [ | ||
| "user_impersonation" | ||
| ] | ||
| } | ||
| ], | ||
| "securityDefinitions": { | ||
| "azure_auth": { | ||
| "type": "oauth2", | ||
| "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize", | ||
| "flow": "implicit", | ||
| "description": "Azure Active Directory OAuth2 Flow", | ||
| "scopes": { | ||
| "user_impersonation": "impersonate your user account" | ||
| } | ||
| } | ||
| }, | ||
| "paths": { | ||
| "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.SecurityInsights/enrichment/ip/geodata/": { | ||
| "get": { | ||
| "x-ms-examples": { | ||
| "Get geodata for a single IP address": { | ||
| "$ref": "./examples/enrichment/GetGeodataByIp.json" | ||
| } | ||
| }, | ||
| "tags": [ | ||
| "Enrichment" | ||
| ], | ||
| "description": "Get geodata for a single IP address", | ||
| "operationId": "IPGeodata_Get", | ||
| "parameters": [ | ||
| { | ||
| "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter" | ||
| }, | ||
| { | ||
| "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter" | ||
| }, | ||
| { | ||
| "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter" | ||
| }, | ||
| { | ||
| "$ref": "#/parameters/EnrichmentIpAddress" | ||
| } | ||
| ], | ||
| "responses": { | ||
| "200": { | ||
| "description": "OK", | ||
| "schema": { | ||
| "$ref": "#/definitions/EnrichmentIpGeodata" | ||
| } | ||
| }, | ||
| "default": { | ||
| "description": "Error response describing why the operation failed to enrich this ip.", | ||
| "schema": { | ||
| "$ref": "../../../common/2.0/types.json#/definitions/CloudError" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.SecurityInsights/enrichment/domain/whois/": { | ||
| "get": { | ||
| "x-ms-examples": { | ||
| "Get whois information for a single domain name": { | ||
| "$ref": "./examples/enrichment/GetWhoisByDomainName.json" | ||
| } | ||
| }, | ||
| "tags": [ | ||
| "Enrichment" | ||
| ], | ||
| "description": "Get whois information for a single domain name", | ||
| "operationId": "DomainWhois_Get", | ||
| "parameters": [ | ||
| { | ||
| "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter" | ||
| }, | ||
| { | ||
| "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter" | ||
| }, | ||
| { | ||
| "$ref": "../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter" | ||
| }, | ||
| { | ||
| "$ref": "#/parameters/EnrichmentDomain" | ||
| } | ||
| ], | ||
| "responses": { | ||
| "200": { | ||
| "description": "OK", | ||
| "schema": { | ||
| "$ref": "#/definitions/EnrichmentDomainWhois" | ||
| } | ||
| }, | ||
| "default": { | ||
| "description": "Error response describing why the operation failed to enrich this domain.", | ||
| "schema": { | ||
| "$ref": "../../../common/2.0/types.json#/definitions/CloudError" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "parameters": { | ||
| "EnrichmentIpAddress": { | ||
| "description": "IP address (v4 or v6) to be enriched", | ||
| "in": "query", | ||
| "name": "ipAddress", | ||
| "required": true, | ||
| "type": "string", | ||
| "x-ms-parameter-location": "method" | ||
| }, | ||
| "EnrichmentDomain": { | ||
| "description": "Domain name to be enriched", | ||
| "in": "query", | ||
| "name": "domain", | ||
| "required": true, | ||
| "type": "string", | ||
| "x-ms-parameter-location": "method" | ||
| } | ||
| }, | ||
| "definitions": { | ||
| "EnrichmentDomainWhois": { | ||
| "description": "Whois information for a given domain and associated metadata", | ||
| "properties": { | ||
| "domain": { | ||
| "description": "The domain for this whois record", | ||
| "type": "string" | ||
| }, | ||
| "server": { | ||
| "description": "The hostname of this registrar's whois server", | ||
| "type": "string" | ||
| }, | ||
| "created": { | ||
| "description": "The timestamp at which this record was created", | ||
| "format": "date-time", | ||
| "type": "string" | ||
| }, | ||
| "updated": { | ||
| "description": "The timestamp at which this record was last updated", | ||
| "format": "date-time", | ||
| "type": "string" | ||
| }, | ||
| "expires": { | ||
| "description": "The timestamp at which this record will expire", | ||
| "format": "date-time", | ||
| "type": "string" | ||
| }, | ||
| "parsedWhois": { | ||
| "description": "The whois record for a given domain", | ||
| "$ref": "#/definitions/EnrichmentDomainWhoisDetails" | ||
| } | ||
| }, | ||
| "type": "object" | ||
| }, | ||
| "EnrichmentDomainWhoisDetails": { | ||
| "description": "The whois record for a given domain", | ||
| "properties": { | ||
| "registrar": { | ||
| "description": "The registrar associated with this domain", | ||
| "$ref": "#/definitions/EnrichmentDomainWhoisRegistrarDetails" | ||
| }, | ||
| "contacts": { | ||
| "description": "The set of contacts associated with this domain", | ||
| "$ref": "#/definitions/EnrichmentDomainWhoisContacts" | ||
| }, | ||
| "nameServers": { | ||
| "description": "A list of name servers associated with this domain", | ||
| "type": "array", | ||
| "items": { | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "statuses": { | ||
| "description": "The set of status flags for this whois record", | ||
| "type": "array", | ||
| "items": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| }, | ||
| "type": "object" | ||
| }, | ||
| "EnrichmentDomainWhoisRegistrarDetails": { | ||
| "description": "The registrar associated with this domain", | ||
| "properties": { | ||
| "name": { | ||
| "description": "The name of this registrar", | ||
| "type": "string" | ||
| }, | ||
| "abuseContactEmail": { | ||
| "description": "This registrar's abuse contact email", | ||
| "type": "string" | ||
| }, | ||
| "abuseContactPhone": { | ||
| "description": "This registrar's abuse contact phone number", | ||
| "type": "string" | ||
| }, | ||
| "ianaId": { | ||
| "description": "This registrar's Internet Assigned Numbers Authority id", | ||
| "type": "string" | ||
| }, | ||
| "url": { | ||
| "description": "This registrar's URL", | ||
| "type": "string" | ||
| }, | ||
| "whoisServer": { | ||
| "description": "The hostname of this registrar's whois server", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "type": "object" | ||
| }, | ||
| "EnrichmentDomainWhoisContacts": { | ||
| "description": "The set of contacts associated with this domain", | ||
| "properties": { | ||
| "admin": { | ||
| "description": "The admin contact for this whois record", | ||
| "$ref": "#/definitions/EnrichmentDomainWhoisContact" | ||
| }, | ||
| "billing": { | ||
| "description": "The billing contact for this whois record", | ||
| "$ref": "#/definitions/EnrichmentDomainWhoisContact" | ||
| }, | ||
| "registrant": { | ||
| "description": "The registrant contact for this whois record", | ||
| "$ref": "#/definitions/EnrichmentDomainWhoisContact" | ||
| }, | ||
| "tech": { | ||
| "description": "The technical contact for this whois record", | ||
| "$ref": "#/definitions/EnrichmentDomainWhoisContact" | ||
| } | ||
| }, | ||
| "type": "object" | ||
| }, | ||
| "EnrichmentDomainWhoisContact": { | ||
| "description": "An individual contact associated with this domain", | ||
| "properties": { | ||
| "name": { | ||
| "description": "The name of this contact", | ||
| "type": "string" | ||
| }, | ||
| "org": { | ||
| "description": "The organization for this contact", | ||
| "type": "string" | ||
| }, | ||
| "street": { | ||
| "description": "A list describing the street address for this contact", | ||
| "type": "array", | ||
| "items": { | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "city": { | ||
| "description": "The city for this contact", | ||
| "type": "string" | ||
| }, | ||
| "state": { | ||
| "description": "The state for this contact", | ||
| "type": "string" | ||
| }, | ||
| "postal": { | ||
| "description": "The postal code for this contact", | ||
| "type": "string" | ||
| }, | ||
| "country": { | ||
| "description": "The country for this contact", | ||
| "type": "string" | ||
| }, | ||
| "phone": { | ||
| "description": "The phone number for this contact", | ||
| "type": "string" | ||
| }, | ||
| "fax": { | ||
| "description": "The fax number for this contact", | ||
| "type": "string" | ||
| }, | ||
| "email": { | ||
| "description": "The email address for this contact", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "type": "object" | ||
| }, | ||
| "EnrichmentIpGeodata": { | ||
| "description": "Geodata information for a given IP address", | ||
| "properties": { | ||
| "asn": { | ||
| "description": "The autonomous system number associated with this IP address", | ||
| "type": "string" | ||
| }, | ||
| "carrier": { | ||
| "description": "The name of the carrier for this IP address", | ||
| "type": "string" | ||
| }, | ||
| "city": { | ||
| "description": "The city this IP address is located in", | ||
| "type": "string" | ||
| }, | ||
| "cityCf": { | ||
| "description": "A numeric rating of confidence that the value in the 'city' field is correct, on a scale of 0-100", | ||
| "type": "integer", | ||
| "format": "int32" | ||
| }, | ||
| "continent": { | ||
| "description": "The continent this IP address is located on", | ||
| "type": "string" | ||
| }, | ||
| "country": { | ||
| "description": "The county this IP address is located in", | ||
| "type": "string" | ||
| }, | ||
| "countryCf": { | ||
| "description": "A numeric rating of confidence that the value in the 'country' field is correct on a scale of 0-100", | ||
| "type": "integer", | ||
| "format": "int32" | ||
| }, | ||
| "ipAddr": { | ||
| "description": "The dotted-decimal or colon-separated string representation of the IP address", | ||
| "type": "string" | ||
| }, | ||
| "ipRoutingType": { | ||
| "description": "A description of the connection type of this IP address", | ||
| "type": "string" | ||
| }, | ||
| "latitude": { | ||
| "description": "The latitude of this IP address", | ||
| "type": "string" | ||
| }, | ||
| "longitude": { | ||
| "description": "The longitude of this IP address", | ||
| "type": "string" | ||
| }, | ||
| "organization": { | ||
| "description": "The name of the organization for this IP address", | ||
| "type": "string" | ||
| }, | ||
| "organizationType": { | ||
| "description": "The type of the organization for this IP address", | ||
| "type": "string" | ||
| }, | ||
| "region": { | ||
| "description": "The geographic region this IP address is located in", | ||
| "type": "string" | ||
| }, | ||
| "state": { | ||
| "description": "The state this IP address is located in", | ||
| "type": "string" | ||
| }, | ||
| "stateCf": { | ||
| "description": "A numeric rating of confidence that the value in the 'state' field is correct on a scale of 0-100", | ||
| "type": "integer", | ||
| "format": "int32" | ||
| }, | ||
| "stateCode": { | ||
| "description": "The abbreviated name for the state this IP address is located in", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "type": "object" | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.