diff --git a/Solutions/TestSolution/Analytic Rules/testrule.yaml b/Solutions/TestSolution/Analytic Rules/testrule.yaml new file mode 100644 index 0000000000..d4f5a367ba --- /dev/null +++ b/Solutions/TestSolution/Analytic Rules/testrule.yaml @@ -0,0 +1,22 @@ +id: 9018f480-e6e8-45e3-a7f3-2eb91ffe609f +name: test rule +description: | + 'test rule.' +severity: Low/Medium/High +status: Available +requiredDataConnectors: + - connectorId: + dataTypes: + - +queryFrequency: +queryPeriod: +triggerOperator: +triggerThreshold: +tactics: + - +relevantTechniques: + - +query: | + +kind: +version: 1.0.0 diff --git a/Solutions/TestSolution/Data Connectors/requirements.txt b/Solutions/TestSolution/Data Connectors/requirements.txt new file mode 100644 index 0000000000..e69de29bb2 diff --git a/Solutions/TestSolution/Data/Solution_TestSolution.json b/Solutions/TestSolution/Data/Solution_TestSolution.json index d69b37ba92..eb8ed37f67 100644 --- a/Solutions/TestSolution/Data/Solution_TestSolution.json +++ b/Solutions/TestSolution/Data/Solution_TestSolution.json @@ -7,21 +7,21 @@ ], "Workbooks": [ - + "Workbooks/TestSolutionAlertOverview.json" ], "Analytic Rules": [ - + "Analytic Rules/testrule.yaml" ], "Hunting Queries": [ - + "Hunting Queries/testhunting.yaml" ], "Parsers": [ - + "Parsers/Test_Solution.yaml" ], "Playbooks": [ - + "Playbooks/azuredeploy.json", ], - "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\TestSolution", + "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\TestSolution\\", "Version": "3.0.0", "Metadata": "SolutionMetadata.json", "TemplateSpec": true, diff --git a/Solutions/TestSolution/Hunting Queries/testhunting.yaml b/Solutions/TestSolution/Hunting Queries/testhunting.yaml new file mode 100644 index 0000000000..c0350fe89f --- /dev/null +++ b/Solutions/TestSolution/Hunting Queries/testhunting.yaml @@ -0,0 +1,11 @@ +id: 7f432a0f-5fd2-4694-b8c7-bc57b41e7815 +name: test +description: | + '' +requiredDataConnectors: [] +tactics: + - +relevantTechniques: + - +query: | + diff --git a/Solutions/TestSolution/Parsers/Test_Solution.yaml b/Solutions/TestSolution/Parsers/Test_Solution.yaml new file mode 100644 index 0000000000..9beaaa9ab4 --- /dev/null +++ b/Solutions/TestSolution/Parsers/Test_Solution.yaml @@ -0,0 +1,10 @@ +id: cb50cc14-b4fa-49d1-b8ee-61c1c70f4c09 +Function: + Title: Parser for Test Solution + Version: '1.0.0' + LastUpdated: '2024-10-11' +Category: Microsoft Sentinel Parser +FunctionName: Test_Solution +FunctionAlias: Test_Solution +FunctionQuery: | + \ No newline at end of file diff --git a/Solutions/TestSolution/Playbooks/azuredeploy.json b/Solutions/TestSolution/Playbooks/azuredeploy.json new file mode 100644 index 0000000000..e69de29bb2 diff --git a/Solutions/TestSolution/Playbooks/readme.md b/Solutions/TestSolution/Playbooks/readme.md new file mode 100644 index 0000000000..e69de29bb2 diff --git a/Solutions/TestSolution/Workbooks/TestSolutionAlertOverview.json b/Solutions/TestSolution/Workbooks/TestSolutionAlertOverview.json new file mode 100644 index 0000000000..e69de29bb2