Merge pull request #13636 from socprime/add_analityc_rules_16_02_26

add_analytic_rules__first_commit

Author: v-atulyadav

.script/tests/KqlvalidationsTests/CustomTables/SOCPrimeAuditLogs_CL.json

@@ -0,0 +1,49 @@
+ {
+            "Name": "SOCPrimeAuditLogs_CL",
+            "Properties": [
+                    {
+                        "name": "TimeGenerated",
+                        "type": "Datetime"
+                    },
+                    {
+                        "name": "EventVendor",
+                        "type": "string"
+                    },
+                     {
+                        "name": "EventType",
+                        "type": "string"
+                    },
+                        {
+                        "name": "EventProduct",
+                        "type": "string"
+                    },
+                    {
+                        "name": "EventName",
+                        "type": "string"
+                    },
+                    {
+                        "name": "UserEmail",
+                        "type": "string"
+                    },
+                    {
+                        "name": "UserName",
+                        "type": "string"
+                    },
+                    {
+                        "name": "Uri",
+                        "type": "string"
+                    },
+                    {
+                        "name": "SourceIp",
+                        "type": "string"
+                    },
+                    {
+                        "name": "HttpUserAgent",
+                        "type": "string"
+                    },
+                    {
+                        "name": "Type",
+                        "type": "string"
+                    }
+            ]
+        }