Skip to content

Commit 4e5be9a

Browse files
committed
Updated createUiDefinition
1 parent 74aebfb commit 4e5be9a

2 files changed

Lines changed: 65 additions & 16 deletions

File tree

380 Bytes
Binary file not shown.

Solutions/Threat Intelligence (NEW)/Package/createUiDefinition.json

Lines changed: 65 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -67,29 +67,78 @@
6767
"name": "dataconnectors2-text",
6868
"type": "Microsoft.Common.TextBlock",
6969
"options": {
70-
"text": "This Solution installs the data connector for Threat Intelligence (NEW). You can get Threat Intelligence (NEW) custom log data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
70+
"text": "The data connectors installed are:"
7171
}
7272
},
7373
{
74-
"name": "dataconnectors3-text",
75-
"type": "Microsoft.Common.TextBlock",
76-
"options": {
77-
"text": "This Solution installs the data connector for Threat Intelligence (NEW). You can get Threat Intelligence (NEW) custom log data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
78-
}
74+
"name": "DC1",
75+
"type": "Microsoft.Common.Section",
76+
"label": "(1)\t\tThreat Intelligence Platforms",
77+
"elements": [
78+
{
79+
"name": "DC1-text",
80+
"type": "Microsoft.Common.TextBlock",
81+
"options": {
82+
"text": "Use this connector to send threat indicators to Microsoft Sentinel from your Threat Intelligence Platform (TIP), such as Threat Connect, Palo Alto Networks MindMeld, MISP, or other integrated applications."
83+
}
84+
}
85+
]
7986
},
8087
{
81-
"name": "dataconnectors4-text",
82-
"type": "Microsoft.Common.TextBlock",
83-
"options": {
84-
"text": "This Solution installs the data connector for Threat Intelligence (NEW). You can get Threat Intelligence (NEW) custom log data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
85-
}
88+
"name": "DC2",
89+
"type": "Microsoft.Common.Section",
90+
"label": "(2)\t\tThreat Intelligence - TAXII",
91+
"elements": [
92+
{
93+
"name": "DC2-text",
94+
"type": "Microsoft.Common.TextBlock",
95+
"options": {
96+
"text": "Use this connector to bring in threat intelligence to Microsoft Sentinel from a TAXII 2.0 or 2.1 server."
97+
}
98+
}
99+
]
86100
},
87101
{
88-
"name": "dataconnectors5-text",
89-
"type": "Microsoft.Common.TextBlock",
90-
"options": {
91-
"text": "This Solution installs the data connector for Threat Intelligence (NEW). You can get Threat Intelligence (NEW) custom log data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
92-
}
102+
"name": "DC3",
103+
"type": "Microsoft.Common.Section",
104+
"label": "(3)\t\tThreat Intelligence Upload Indicators API",
105+
"elements": [
106+
{
107+
"name": "DC3-text",
108+
"type": "Microsoft.Common.TextBlock",
109+
"options": {
110+
"text": "Microsoft Sentinel offer a data plane API to bring in threat intelligence from your Threat Intelligence Platform (TIP), such as Threat Connect, Palo Alto Networks MineMeld, MISP, or other integrated applications. Threat indicators can include IP addresses, domains, URLs, file hashes and email addresses."
111+
}
112+
}
113+
]
114+
},
115+
{
116+
"name": "DC4",
117+
"type": "Microsoft.Common.Section",
118+
"label": "(4)\t\tMicrosoft Defender Threat Intelligence",
119+
"elements": [
120+
{
121+
"name": "DC4-text",
122+
"type": "Microsoft.Common.TextBlock",
123+
"options": {
124+
"text": "Microsoft Sentinel provides you the capability to import threat intelligence generated by Microsoft to enable monitoring, alerting and hunting. Use this data connector to import Indicators of Compromise (IOCs) from Microsoft Defender Threat Intelligence (MDTI) into Microsoft Sentinel. Threat indicators can include IP addresses, domains, URLs, and file hashes, etc."
125+
}
126+
}
127+
]
128+
},
129+
{
130+
"name": "DC5",
131+
"type": "Microsoft.Common.Section",
132+
"label": "(5)\t\tThreat Intelligence - TAXII Export",
133+
"elements": [
134+
{
135+
"name": "DC5-text",
136+
"type": "Microsoft.Common.TextBlock",
137+
"options": {
138+
"text": "Microsoft Sentinel integrates with TAXII 2.1 servers to enable exporting of your threat intelligence objects."
139+
}
140+
}
141+
]
93142
},
94143
{
95144
"name": "dataconnectors-parser-text",

0 commit comments

Comments
 (0)