[StealthTalk] Fix publisherId in SolutionMetadata.json to match Partner Center registered publisher

[agstealth]

Summary

Follow-up to the merged StealthTalk Anomalous Authentication solution (PR #14259). This PR corrects a single metadata value in SolutionMetadata.json:

- "publisherId": "stealthtalk",
+ "publisherId": "stealthtalkinc",

The original value was a brand-name shorthand; the corrected value matches the actual Partner Center registered publisher ID. This resolves Partner Center Best Practice Test 300.4.1.1 ("Offer Name in Partner Center must match SolutionMetadata.json"), which was failing because the Marketplace identifier derived from the GitHub source (stealthtalk.stealthtalk-sentinel-solution) did not match the Partner Center "Offer Name" (stealthtalkinc.stealthtalk-sentinel-solution).

No functional changes; no analytic rule, hunting query, parser, workbook, or playbook content modified.

---

Change(s)

• Solutions/StealthTalk/SolutionMetadata.json — publisherId corrected from "stealthtalk" to "stealthtalkinc".
• Solutions/StealthTalk/Package/mainTemplate.json — surgical update of the solutionId variable to embed the corrected publisherId. No V3 rebuild was performed to keep the diff minimal and avoid the V3 packaging tool's cosmetic field-reordering noise. The substantive change is one line.
• Solutions/StealthTalk/Package/3.0.0.zip — rebuilt so the bundled artefacts match the source.

Reason for Change(s)

• Resolves Microsoft Partner Center Best Practice Test 300.4.1.1 — "Offer Name in Partner Center must match SolutionMetadata.json". The original PR (New Solution: StealthTalk Anomalous Authentication v3.0.0 #14259) used a brand-name shorthand stealthtalk as publisherId, which did not match the actual registered Partner Center publisher ID stealthtalkinc. The Marketplace identifier publisherId.offerId derived from the source must equal the Partner Center "Offer Name" — this PR aligns the two values.

Version Updated

• No. This is a metadata-only correction during certification review. No analytic rule, hunting query, parser, workbook, or playbook content was modified; user-installable behaviour is unchanged. Per the Sentinel partner-publishing convention, pre-publish metadata corrections during cert review do not warrant a solution-version bump.
• Solution version remains 3.0.0 in Solution_StealthTalk.json, mainTemplate.json variables (_solutionVersion), and the zip filename (3.0.0.zip). This is also the version currently in flight in Partner Center, so no source-vs-Partner Center version mismatch is introduced.

Testing Completed

• Yes. Local rebuild via the project build pipeline, followed by:
  • arm-ttk validation: 51 / 51 pass.
  • Non-ASCII scan over Solutions/StealthTalk/: clean.
  • Package/3.0.0.zip contents extracted and scanned: ASCII-only, all artefacts match mainTemplate.json source.
  • Verified Package/mainTemplate.json and the unpacked Package/3.0.0.zip contain the corrected stealthtalkinc value in all embedded publisher metadata locations; no stale stealthtalk standalone publisher value remains.
  • _solutionVersion confirmed at 3.0.0 end-to-end (Solution_StealthTalk.json, mainTemplate.json, zip filename).
  • Verified mainTemplate.json diff against upstream/master is exactly one line (the solutionId variable). No cosmetic / field-order changes; substantive change isolated to the publisherId correction.
• Functional / runtime behaviour was previously validated as part of PR New Solution: StealthTalk Anomalous Authentication v3.0.0 #14259 (merged). This metadata correction does not modify any artefact that the customer install flow consumes for detection or visualization logic, so no additional Sentinel-workspace deployment testing was required.

Checked that the validations are passing and have addressed any issues that are present

• Yes. Local KQL / YAML / arm-ttk validations all pass before push. CI on this PR is expected to be green; if anything is flagged I will follow up here.

References

• Original merged PR: New Solution: StealthTalk Anomalous Authentication v3.0.0 #14259 (StealthTalk Anomalous Authentication v3.0.0).
• Partner Center certification report check: Best Practice Test 300.4.1.1 — "Offer Name in Partner Center must match SolutionMetadata.json".

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Aligns the StealthTalk solution’s marketplace identifier with the Partner Center–registered publisher by updating the publisherId, and propagating that change into the packaged template/zip.

Changes:

• Update Solutions/StealthTalk/SolutionMetadata.json publisherId from stealthtalk to stealthtalkinc.
• Update packaged solutionId in Package/mainTemplate.json to reflect the new publisherId.
• Rebuild Package/3.0.0.zip to match the updated packaged artifacts.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

File	Description
Solutions/StealthTalk/SolutionMetadata.json	Corrects publisherId to match the Partner Center publisher identifier.
Solutions/StealthTalk/Package/mainTemplate.json	Updates solutionId to keep packaged content aligned with the corrected publisher ID.

[agstealth]

Friendly heads-up @v-atulyadav — small one-line metadata fix to address Partner Center Best Practice Test 300.4.1.1. There are 2 Copilot review comments that I have responded to with context inline; Would appreciate a quick review when convenient. Thanks!