Skip to content

Commit 74aebfb

Browse files
committed
Removed "Premium Microsoft Defender Threat Intelligence" Data Connector
1 parent b9fe193 commit 74aebfb

6 files changed

Lines changed: 392 additions & 695 deletions

File tree

Solutions/Threat Intelligence (NEW)/Data Connectors/template_PremiumMicrosoftDefenderThreatIntelligence.json

Lines changed: 0 additions & 105 deletions
This file was deleted.

Solutions/Threat Intelligence (NEW)/Data/Solution_ThreatIntelligenceUpdated.json

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,7 @@
88
"Data Connectors/template_ThreatIntelligence.json",
99
"Data Connectors/template_ThreatIntelligenceUploadIndicators.json",
1010
"Data Connectors/template_MicrosoftDefenderThreatIntelligence.json",
11-
"Data Connectors/template_ThreatIntelligenceTaxiiExport.json",
12-
"Data Connectors/template_PremiumMicrosoftDefenderThreatIntelligence.json"
11+
"Data Connectors/template_ThreatIntelligenceTaxiiExport.json"
1312
],
1413
"Workbooks": ["Workbooks/ThreatIntelligenceNew.json"],
1514
"Analytic Rules": [
@@ -76,7 +75,7 @@
7675
],
7776
"Metadata": "SolutionMetadata.json",
7877
"BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Threat Intelligence (NEW)\\",
79-
"Version": "3.0.20",
78+
"Version": "3.0.21",
8079
"TemplateSpec": false,
8180
"StaticDataConnectorIds": [
8281
"ThreatIntelligenceTaxii",
60.2 KB
Binary file not shown.

Solutions/Threat Intelligence (NEW)/Package/createUiDefinition.json

Lines changed: 2 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
"config": {
77
"isWizard": false,
88
"basics": {
9-
"description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\"width=\"75px\" height=\"75px\">\n\n**Note:** Please refer to the following before installing the solution: \n\n• Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Threat%20Intelligence%20%28NEW%29/ReleaseNotes.md)\n\n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\nMicrosoft Sentinel has recently improved its threat intelligence hunting experience by incorporating support for STIX objects like Threat Actor, Attack Pattern, Identity, and Relationship. As a result, we have updated our TI Solutions to leverage the new ThreatIntelIndicator table.\n[Work with STIX objects and indicators to enhance threat intelligence and threat hunting in Microsoft Sentinel (Preview) - Microsoft Sentinel | Microsoft Learn](https://learn.microsoft.com/azure/sentinel/work-with-stix-objects-indicators).\n\n The Threat Intelligence solution contains data connectors for import of supported STIX objects into Microsoft Sentinel, analytic rules for matching TI data with event data, workbook, and hunting queries. Threat indicators can be malicious IP's, URL's, filehashes, domains, email addresses etc.\n\n**Data Connectors:** 6, **Parsers:** 1, **Workbooks:** 1, **Analytic Rules:** 52, **Hunting Queries:** 5\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
9+
"description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\"width=\"75px\" height=\"75px\">\n\n**Note:** Please refer to the following before installing the solution: \n\n• Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Threat%20Intelligence%20%28NEW%29/ReleaseNotes.md)\n\n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\nMicrosoft Sentinel has recently improved its threat intelligence hunting experience by incorporating support for STIX objects like Threat Actor, Attack Pattern, Identity, and Relationship. As a result, we have updated our TI Solutions to leverage the new ThreatIntelIndicator table.\n[Work with STIX objects and indicators to enhance threat intelligence and threat hunting in Microsoft Sentinel (Preview) - Microsoft Sentinel | Microsoft Learn](https://learn.microsoft.com/azure/sentinel/work-with-stix-objects-indicators).\n\n The Threat Intelligence solution contains data connectors for import of supported STIX objects into Microsoft Sentinel, analytic rules for matching TI data with event data, workbook, and hunting queries. Threat indicators can be malicious IP's, URL's, filehashes, domains, email addresses etc.\n\n**Data Connectors:** 5, **Parsers:** 1, **Workbooks:** 1, **Analytic Rules:** 52, **Hunting Queries:** 5\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
1010
"subscription": {
1111
"resourceProviders": [
1212
"Microsoft.OperationsManagement/solutions",
@@ -91,13 +91,6 @@
9191
"text": "This Solution installs the data connector for Threat Intelligence (NEW). You can get Threat Intelligence (NEW) custom log data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
9292
}
9393
},
94-
{
95-
"name": "dataconnectors6-text",
96-
"type": "Microsoft.Common.TextBlock",
97-
"options": {
98-
"text": "This Solution installs the data connector for Threat Intelligence (NEW). You can get Threat Intelligence (NEW) custom log data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
99-
}
100-
},
10194
{
10295
"name": "dataconnectors-parser-text",
10396
"type": "Microsoft.Common.TextBlock",
@@ -106,7 +99,7 @@
10699
}
107100
},
108101
{
109-
"name": "dataconnectors-link6",
102+
"name": "dataconnectors-link5",
110103
"type": "Microsoft.Common.TextBlock",
111104
"options": {
112105
"link": {

0 commit comments

Comments
 (0)