Merge pull request #9031 from yotam-ionix/cyberpion-to-ionix-rebrand

Re-branded the "Cyberpion" to "IONIX"

Solutions/Cyberpion/Analytic Rules/HighUrgencyActionItems.yaml → Solutions/IONIX/Analytic Rules/HighUrgencyActionItems.yaml

@@ -1,7 +1,7 @@
 id: 8e0403b1-07f8-4865-b2e9-74d1e83200a4
-name: High Urgency Cyberpion Action Items
+name: High Urgency IONIX Action Items
 description: |
-  'This query creates an alert for active Cyberpion Action Items with high urgency (9-10).
+  'This query creates an alert for active IONIX Action Items with high urgency (9-10).
    Urgency can be altered using the "min_urgency" variable in the query.'
 severity: High
 status: Available
@@ -38,5 +38,5 @@ entityMappings:
     fieldMappings:
       - identifier: DomainName
         columnName: DNSCustomEntity
-version: 1.0.0
+version: 1.0.1
 kind: Scheduled

Solutions/Cyberpion/Data Connectors/CyberpionSecurityLogs.json → Solutions/IONIX/Data Connectors/IONIXSecurityLogs.json

@@ -1,8 +1,8 @@
 {
   "id": "CyberpionSecurityLogs",
-  "title": "Cyberpion Security Logs",
-  "publisher": "Cyberpion",
-  "descriptionMarkdown": "The Cyberpion Security Logs data connector, ingests logs from the Cyberpion system directly into Sentinel. The connector allows users to visualize their data, create alerts and incidents and improve security investigations.",
+  "title": "IONIX Security Logs",
+  "publisher": "IONIX",
+  "descriptionMarkdown": "The IONIX Security Logs data connector, ingests logs from the IONIX system directly into Sentinel. The connector allows users to visualize their data, create alerts and incidents and improve security investigations.",
   "graphQueries": [
     {
       "metricName": "Total data received",
@@ -59,15 +59,15 @@
     ],
     "customs": [
       {
-        "name": "Cyberpion Subscription",
-        "description": "a subscription and account is required for cyberpion logs. [One can be acquired here.](https://azuremarketplace.microsoft.com/en/marketplace/apps/cyberpion1597832716616.cyberpion)"
+        "name": "IONIX Subscription",
+        "description": "a subscription and account is required for IONIX logs. [One can be acquired here.](https://azuremarketplace.microsoft.com/en/marketplace/apps/cyberpion1597832716616.cyberpion)"
       }
     ]
   },
   "instructionSteps": [
     {
       "title": "",
-      "description": "Follow the [instructions](https://www.cyberpion.com/resource-center/integrations/azure-sentinel/) to integrate Cyberpion Security Alerts into Sentinel.",
+      "description": "Follow the [instructions](https://www.ionix.io/integrations/azure-sentinel/) to integrate IONIX Security Alerts into Sentinel.",
       "instructions": [
         {
           "parameters": {

Solutions/IONIX/Data/Solution_IONIX.json

@@ -0,0 +1,20 @@
+{
+  "Name": "IONIX",
+  "Author": "IONIX",
+  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/ionix-logo.svg\" width=\"75px\" height=\"75px\">",
+  "Description": "The [IONIX](https://ionix.io/) solution for Microsoft Sentinel enables you to ingest vulnerability logs from the IONIX platform into Microsoft Sentinel.\n\n**Underlying Microsoft Technologies used:**\n\nThis solution is dependent on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\n\na. [Codeless Connector Platform/Native Sentinel Polling](https://docs.microsoft.com/azure/sentinel/create-codeless-connector?tabs=deploy-via-arm-template%2Cconnect-via-the-azure-portal)",
+  "Data Connectors": [
+    "Data Connectors/IONIXSecurityLogs.json"
+  ],
+  "Analytic Rules": [
+    "Analytic Rules/HighUrgencyActionItems.yaml"
+  ],
+  "Workbooks": [
+    "Workbooks/IONIXOverviewWorkbook.json"
+  ],
+  "BasePath": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Solutions/IONIX",
+  "Version": "3.0.0",
+  "Metadata": "SolutionMetadata.json",
+  "TemplateSpec": true,
+  "Is1Pconnector": false
+}

Solutions/Cyberpion/Package/createUiDefinition.json → Solutions/IONIX/Package/createUiDefinition.json

@@ -6,7 +6,7 @@
     "config": {
       "isWizard": false,
       "basics": {
-        "description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/cyberpion_logo.svg\" width=\"75px\" height=\"75px\">\n\n**Note:** _There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing._\n\nThe [Cyberpion](https://www.cyberpion.com/) solution for Microsoft Sentinel enables you to ingest vulnerability logs from the Cyberpion platform into Microsoft Sentinel.\n\n**Underlying Microsoft Technologies used:**\n\nThis solution is dependent on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\n\na. [Codeless Connector Platform/Native Sentinel Polling](https://docs.microsoft.com/azure/sentinel/create-codeless-connector?tabs=deploy-via-arm-template%2Cconnect-via-the-azure-portal)\n\n**Data Connectors:** 1, **Workbooks:** 1, **Analytic Rules:** 1\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
+        "description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/ionix-logo.svg\" width=\"75px\" height=\"75px\">\n\n**Note:** Please refer to the following before installing the solution: \r \n • Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/IONIX/ReleaseNotes.md)\r \n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\nThe [IONIX](https://ionix.io/) solution for Microsoft Sentinel enables you to ingest vulnerability logs from the IONIX platform into Microsoft Sentinel.\n\n**Underlying Microsoft Technologies used:**\n\nThis solution is dependent on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\n\na. [Codeless Connector Platform/Native Microsoft Sentinel Polling](https://docs.microsoft.com/azure/sentinel/create-codeless-connector?tabs=deploy-via-arm-template%2Cconnect-via-the-azure-portal)\n\n**Data Connectors:** 1, **Workbooks:** 1, **Analytic Rules:** 1\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
         "subscription": {
           "resourceProviders": [
             "Microsoft.OperationsManagement/solutions",
@@ -60,7 +60,7 @@
             "name": "dataconnectors1-text",
             "type": "Microsoft.Common.TextBlock",
             "options": {
-              "text": "This solution installs the data connector for ingesting Cyberpion logs into Microsoft Sentinel, using Codeless Connector Platform and Native Sentinel Polling. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
+              "text": "This Solution installs the data connector for IONIX. You can get IONIX custom log data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
             }
           },
           {
@@ -100,6 +100,20 @@
                 "uri": "https://docs.microsoft.com/azure/sentinel/tutorial-monitor-your-data"
               }
             }
+          },
+          {
+            "name": "workbook1",
+            "type": "Microsoft.Common.Section",
+            "label": "IONIX Overview",
+            "elements": [
+              {
+                "name": "workbook1-text",
+                "type": "Microsoft.Common.TextBlock",
+                "options": {
+                  "text": "Gain insights into your IONIX Security Logs."
+                }
+              }
+            ]
           }
         ]
       },
@@ -132,13 +146,13 @@
           {
             "name": "analytic1",
             "type": "Microsoft.Common.Section",
-            "label": "High Urgency Cyberpion Action Items",
+            "label": "High Urgency IONIX Action Items",
             "elements": [
               {
                 "name": "analytic1-text",
                 "type": "Microsoft.Common.TextBlock",
                 "options": {
-                  "text": "This query creates an alert for active Cyberpion Action Items with high urgency (9-10).\n Urgency can be altered using the \"min_urgency\" variable in the query."
+                  "text": "Creates an alert for active IONIX Action Items with high urgency (9-10)."
                 }
               }
             ]