Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"id": "VaronisSaaS",
"title": "Varonis SaaS",
"title": "[Deprecated] Varonis SaaS",
"publisher": "Varonis",
"descriptionMarkdown": "Varonis SaaS provides the capability to ingest [Varonis Alerts](https://www.varonis.com/products/datalert) into Microsoft Sentinel.\n\nVaronis prioritizes deep data visibility, classification capabilities, and automated remediation for data access. Varonis builds a single prioritized view of risk for your data, so you can proactively and systematically eliminate risk from insider threats and cyberattacks.",
"graphQueries": [
Expand All @@ -10,22 +10,22 @@
"metricName": "Total data recieved"
},
{
"baseQuery": "VaronisAlerts_CL\n| where Severity_s == \"High\"",
"baseQuery": "VaronisAlerts_CL\n| where AlertSeverity_s == \"High\"",
"legend": "High severity alerts",
"metricName": "High severity alerts"
},
{
"baseQuery": "VaronisAlerts_CL\n| where Severity_s == \"Medium\"",
"baseQuery": "VaronisAlerts_CL\n| where AlertSeverity_s == \"Medium\"",
"legend": "Medium severity alerts",
"metricName": "Medium severity alerts"
},
{
"baseQuery": "VaronisAlerts_CL\n| where Severity_s == \"Low\"",
"baseQuery": "VaronisAlerts_CL\n| where AlertSeverity_s == \"Low\"",
"legend": "Low severity alerts",
"metricName": "Low severity alerts"
},
{
"baseQuery": "VaronisAlerts_CL\n| where Severity_s == \"Informational\"",
"baseQuery": "VaronisAlerts_CL\n| where AlertSeverity_s == \"Informational\"",
"legend": "Informational severity alerts",
"metricName": "Informational severity alerts"
}
Expand All @@ -37,7 +37,7 @@
},
{
"description": "List high severity Varonis Alerts",
"query": "VaronisAlerts_CL\n| where Severity_s == \"High\"\n| sort by TimeGenerated desc"
"query": "VaronisAlerts_CL\n| where AlertSeverity_s == \"High\"\n| sort by TimeGenerated desc"
}
],
"dataTypes": [
Expand Down
2 changes: 1 addition & 1 deletion Solutions/VaronisSaaS/Data/Solution_VaronisSaaS.json
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
"Analytic Rules/VaronisInformationalAlertsDetected.yaml"
],
"BasePath": "C:\\Sources\\Azure-Sentinel\\Solutions\\VaronisSaaS",
"Version": "3.1.0",
"Version": "3.1.1",
"Metadata": "SolutionMetadata.json",
"TemplateSpec": true,
"Is1PConnector": false
Expand Down
Binary file added Solutions/VaronisSaaS/Package/3.1.1.zip
Binary file not shown.
Loading