BlueVoyant Anthropic ClaudeCompliance v3.0.0

[TSwaimBV]

Summary

• The BlueVoyant Anthropic Claude Compliance solution for Microsoft Sentinel ingests compliance activity data from the Anthropic Claude Compliance API into your workspace. Using a Codeless Connector Framework (CCF) data connector, it continuously collects compliance events into the BV_ClaudeCompliance_ComplianceActivities_CL table for monitoring, hunting, and detection.

Change(s):

• New Solution

Reason for Change(s):

• New Solution

Testing Completed:

• Yes - Passed the Microsoft Sentinel solution packaging tool validation step.
• Yes - Passed Microsoft arm-ttk template technical validation.

[TSwaimBV]

@microsoft-github-policy-service agree company="Bluevoyant"

[TSwaimBV]

Logo file has been updated with true SVG. Thank you.

[TSwaimBV]

SVG Logo updated to remove data-name tag

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds a new Microsoft Sentinel solution package for BlueVoyant Anthropic Claude Compliance (v3.0.0), including metadata, release notes, a CCF (RestApiPoller) data connector, and packaged deployment artifacts.

Changes:

• Added solution metadata + release notes + README for the new solution.
• Added solution definition JSON and CCF data connector resources (definition, poller, DCR, table).
• Added packaged ARM template artifacts (mainTemplate.json, createUiDefinition.json, testParameters.json).

Reviewed changes

Copilot reviewed 11 out of 13 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/SolutionMetadata.json	Introduces offer/publisher metadata, categories, and support info for the solution.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/ReleaseNotes.md	Adds initial release notes entry for v3.0.0.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/README.md	Adds basic solution description and support details.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Package/testParameters.json	Adds ARM test parameters used for template validation/deployment testing.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Package/mainTemplate.json	Adds the packaged ARM template deploying connector resources, DCR, and custom table.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Package/createUiDefinition.json	Adds the packaged UI definition for solution installation in Azure portal.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Data/Solution_BlueVoyant-Anthropic-ClaudeCompliance.json	Defines solution contents/version and references the data connector definition.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Data Connectors/BV-ClaudeCompliance_ccf/table.json	Defines the custom table schema for collected compliance activities.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Data Connectors/BV-ClaudeCompliance_ccf/dcr.json	Defines the Data Collection Rule and transform for the custom stream/table.
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Data Connectors/BV-ClaudeCompliance_ccf/dataConnectorPoller.json	Defines the RestApiPoller connector instance configuration (endpoint/auth/paging).
Solutions/BlueVoyant-Anthropic-ClaudeCompliance/Data Connectors/BV-ClaudeCompliance_ccf/dataConnectorDefinition.json	Defines the connector UI and metadata shown in Microsoft Sentinel.

[v-maheshbh]

Hi @TSwaimBV

Kindly review the above comments and address them wherever required.
and
Kindly ensure that all CCF files adhere to the required naming convention:
SolutionName_ConnectorDefinition
SolutionName_PollerConfig
SolutionName_DCR

The file name prefix should consistently match the solution name.

Additionally, the BasePath is currently missing. Please add the BasePath using the following structure:
C:\GitHub\Azure-Sentinel\Solutions{Solution Name}

Once the above updates are completed, kindly repackage and deploy the latest mainTemplate, and ensure that the CCF connector is attached screenshot in a connected state for reference.

Thanks!

[TSwaimBV]

[Copilot]

Pull request overview

Copilot reviewed 11 out of 13 changed files in this pull request and generated 9 comments.

[Copilot]

Pull request overview

Copilot reviewed 11 out of 13 changed files in this pull request and generated 8 comments.