Skip to content

Commit ccbafa5

Browse files
v-atulyadavv-atulyadav
authored
Merge pull request #14125 from fgravato/lookout/v3.0.3
Lookout v3.0.3: Version bump for certification resubmission
2 parents 4004c09 + 1458a9b commit ccbafa5

4 files changed

Lines changed: 20 additions & 19 deletions

File tree

‎Solutions/Lookout/Package/3.0.3.zip‎

29.7 KB
Binary file not shown.

‎Solutions/Lookout/Package/mainTemplate.json‎

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,7 @@
8585
},
8686
"variables": {
8787
"_solutionName": "Lookout",
88-
"_solutionVersion": "3.0.2",
88+
"_solutionVersion": "3.0.3",
8989
"solutionId": "lookoutinc.lookout_mtd_sentinel",
9090
"_solutionId": "[variables('solutionId')]",
9191
"uiConfigId1": "LookoutAPI",
@@ -95,10 +95,10 @@
9595
"dataConnectorId1": "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/dataConnectors', variables('_dataConnectorContentId1'))]",
9696
"_dataConnectorId1": "[variables('dataConnectorId1')]",
9797
"dataConnectorTemplateSpecName1": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-dc-',uniquestring(variables('_dataConnectorContentId1'))))]",
98-
"dataConnectorVersion1": "3.0.2",
98+
"dataConnectorVersion1": "3.0.3",
9999
"_dataConnectorcontentProductId1": "[concat(take(variables('_solutionId'),50),'-','dc','-', uniqueString(concat(variables('_solutionId'),'-','DataConnector','-',variables('_dataConnectorContentId1'),'-', variables('dataConnectorVersion1'))))]",
100100
"workspaceResourceId": "[resourceId('microsoft.OperationalInsights/Workspaces', parameters('workspace'))]",
101-
"dataConnectorCCPVersion": "3.0.2",
101+
"dataConnectorCCPVersion": "3.0.3",
102102
"_dataConnectorContentIdConnectorDefinition2": "LookoutStreaming_Definition",
103103
"dataConnectorTemplateNameConnectorDefinition2": "[concat(parameters('workspace'),'-dc-',uniquestring(variables('_dataConnectorContentIdConnectorDefinition2')))]",
104104
"_dataConnectorContentIdConnections2": "LookoutStreaming_DefinitionConnections",
@@ -194,7 +194,7 @@
194194
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
195195
],
196196
"properties": {
197-
"description": "Lookout data connector with template version 3.0.2",
197+
"description": "Lookout data connector with template version 3.0.3",
198198
"mainTemplate": {
199199
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
200200
"contentVersion": "[variables('dataConnectorVersion1')]",
@@ -1558,7 +1558,7 @@
15581558
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
15591559
],
15601560
"properties": {
1561-
"description": "LookoutThreatEvent_AnalyticalRules Analytics Rule with template version 3.0.2",
1561+
"description": "LookoutThreatEvent_AnalyticalRules Analytics Rule with template version 3.0.3",
15621562
"mainTemplate": {
15631563
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
15641564
"contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]",
@@ -1680,7 +1680,7 @@
16801680
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
16811681
],
16821682
"properties": {
1683-
"description": "LookoutThreatEventV2_AnalyticalRules Analytics Rule with template version 3.0.2",
1683+
"description": "LookoutThreatEventV2_AnalyticalRules Analytics Rule with template version 3.0.3",
16841684
"mainTemplate": {
16851685
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
16861686
"contentVersion": "[variables('analyticRuleObject2').analyticRuleVersion2]",
@@ -1871,7 +1871,7 @@
18711871
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
18721872
],
18731873
"properties": {
1874-
"description": "LookoutDeviceComplianceV2_AnalyticalRules Analytics Rule with template version 3.0.2",
1874+
"description": "LookoutDeviceComplianceV2_AnalyticalRules Analytics Rule with template version 3.0.3",
18751875
"mainTemplate": {
18761876
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
18771877
"contentVersion": "[variables('analyticRuleObject3').analyticRuleVersion3]",
@@ -2042,7 +2042,7 @@
20422042
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
20432043
],
20442044
"properties": {
2045-
"description": "LookoutSmishingAlertV2_AnalyticalRules Analytics Rule with template version 3.0.2",
2045+
"description": "LookoutSmishingAlertV2_AnalyticalRules Analytics Rule with template version 3.0.3",
20462046
"mainTemplate": {
20472047
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
20482048
"contentVersion": "[variables('analyticRuleObject4').analyticRuleVersion4]",
@@ -2227,7 +2227,7 @@
22272227
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
22282228
],
22292229
"properties": {
2230-
"description": "LookoutAuditEventV2_AnalyticalRules Analytics Rule with template version 3.0.2",
2230+
"description": "LookoutAuditEventV2_AnalyticalRules Analytics Rule with template version 3.0.3",
22312231
"mainTemplate": {
22322232
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
22332233
"contentVersion": "[variables('analyticRuleObject5').analyticRuleVersion5]",
@@ -2392,7 +2392,7 @@
23922392
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
23932393
],
23942394
"properties": {
2395-
"description": "LookoutEvents Workbook with template version 3.0.2",
2395+
"description": "LookoutEvents Workbook with template version 3.0.3",
23962396
"mainTemplate": {
23972397
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
23982398
"contentVersion": "[variables('workbookVersion1')]",
@@ -2478,7 +2478,7 @@
24782478
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
24792479
],
24802480
"properties": {
2481-
"description": "LookoutEventsV2 Workbook with template version 3.0.2",
2481+
"description": "LookoutEventsV2 Workbook with template version 3.0.3",
24822482
"mainTemplate": {
24832483
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
24842484
"contentVersion": "[variables('workbookVersion2')]",
@@ -2564,7 +2564,7 @@
25642564
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
25652565
],
25662566
"properties": {
2567-
"description": "LookoutSecurityInvestigationDashboard Workbook with template version 3.0.2",
2567+
"description": "LookoutSecurityInvestigationDashboard Workbook with template version 3.0.3",
25682568
"mainTemplate": {
25692569
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
25702570
"contentVersion": "[variables('workbookVersion3')]",
@@ -2650,7 +2650,7 @@
26502650
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
26512651
],
26522652
"properties": {
2653-
"description": "LookoutExecutiveDashboard Workbook with template version 3.0.2",
2653+
"description": "LookoutExecutiveDashboard Workbook with template version 3.0.3",
26542654
"mainTemplate": {
26552655
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
26562656
"contentVersion": "[variables('workbookVersion4')]",
@@ -2736,7 +2736,7 @@
27362736
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
27372737
],
27382738
"properties": {
2739-
"description": "LookoutIOAInvestigationDashboard Workbook with template version 3.0.2",
2739+
"description": "LookoutIOAInvestigationDashboard Workbook with template version 3.0.3",
27402740
"mainTemplate": {
27412741
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
27422742
"contentVersion": "[variables('workbookVersion5')]",
@@ -2822,7 +2822,7 @@
28222822
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
28232823
],
28242824
"properties": {
2825-
"description": "LookoutEvents Data Parser with template version 3.0.2",
2825+
"description": "LookoutEvents Data Parser with template version 3.0.3",
28262826
"mainTemplate": {
28272827
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
28282828
"contentVersion": "[variables('parserObject1').parserVersion1]",
@@ -2950,7 +2950,7 @@
29502950
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
29512951
],
29522952
"properties": {
2953-
"description": "LookoutAdvancedThreatHunting_HuntingQueries Hunting Query with template version 3.0.2",
2953+
"description": "LookoutAdvancedThreatHunting_HuntingQueries Hunting Query with template version 3.0.3",
29542954
"mainTemplate": {
29552955
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
29562956
"contentVersion": "[variables('huntingQueryObject1').huntingQueryVersion1]",
@@ -3029,7 +3029,7 @@
30293029
"apiVersion": "2023-04-01-preview",
30303030
"location": "[parameters('workspace-location')]",
30313031
"properties": {
3032-
"version": "3.0.2",
3032+
"version": "3.0.3",
30333033
"kind": "Solution",
30343034
"contentSchemaVersion": "3.0.0",
30353035
"displayName": "Lookout",

‎Solutions/Lookout/ReleaseNotes.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
22
|-------------|--------------------------------|--------------------------------------------------------------------|
3+
| 3.0.3 | 23-04-2026 | Version bump for certification resubmission. Fixed `workspace-location` parameter `defaultValue` to use `[resourceGroup().location]` ARM expression. |
34
| 3.0.2 | 11-03-2026 | Updated `lastPublishDate` across solution metadata and package to 2026-03-11. Cleaned up stale v4.0.0 branches. Resubmission for certification after resolving link discrepancy flagged in Best Practice Test 300.4.1.1. Fixed product branding: updated "Azure Sentinel" to "Microsoft Sentinel" in workbook descriptions. Fixed DCR transform query error: undefined symbol `detections` corrected to `smishing_alert.detections`. Aligned data connector version from `1.0.0` to `3.0.2` for consistent version tracking across all solution components. Updated all template version references from `3.0.1` to `3.0.2` in package. Added **Parsers** and **Notebooks** steps to the install wizard (`createUiDefinition.json`) for improved discoverability during solution deployment. |
45
| 3.0.1 | 18-12-2025 | **Parser** v3.1.0 with support for Streaming/Polling/REST API field structures. Enhanced workbooks and dashboards. **Analytic Rules** updated with MITRE ATT&CK mobile tactics. Added **Jupyter Notebooks** for threat hunting: Mobile Malware, Smishing, Device Compliance, and Audit/Insider Threat analysis. |
56
| 3.0.0 | 07-11-2025 | New **CCF Connector** added to Solution - *Lookout Mobile Threat Detection Connector*. |

‎Solutions/Lookout/SolutionMetadata.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
"publisherId": "lookoutinc",
33
"offerId": "lookout_mtd_sentinel",
44
"firstPublishDate": "2021-10-18",
5-
"lastPublishDate": "2026-03-11",
6-
"version": "3.0.2",
5+
"lastPublishDate": "2026-04-23",
6+
"version": "3.0.3",
77
"providers": ["Lookout"],
88
"categories": {
99
"domains" : ["Security - Threat Protection"],

0 commit comments

Comments
 (0)