-
Notifications
You must be signed in to change notification settings - Fork 3k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #8919 from Azure/v-rusraut/Snowflake-DataConnector…
…-inst-changes Repackage - Snowflake(Azure Function Changes)
- Loading branch information
Showing
8 changed files
with
708 additions
and
698 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
{ | ||
"Name": "Snowflake", | ||
"Author": "Microsoft - support@microsoft.com", | ||
"Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\"width=\"75px\"height=\"75px\">", | ||
"Description": "The Snowflake solution provides the capability to ingest Snowflake [login logs](https://docs.snowflake.com/en/sql-reference/account-usage/login_history.html) and [query logs](https://docs.snowflake.com/en/sql-reference/account-usage/query_history.html) into Microsoft Sentinel using the Snowflake Python Connector. Refer to [Snowflake documentation](https://docs.snowflake.com/en/user-guide/python-connector.html) for more information.\r\n \r\n **Underlying Microsoft Technologies used:** \r\n\r\n This solution takes a dependency on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\r\n\n a. [Azure Monitor HTTP Data Collector API](https://docs.microsoft.com/azure/azure-monitor/logs/data-collector-api) \r\n\n b. [Azure Functions](https://azure.microsoft.com/services/functions/#overview)\r\n\n\n\n", | ||
"Metadata": "SolutionMetadata.json", | ||
"BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Snowflake", | ||
"Version": "3.0.0", | ||
"TemplateSpec": true, | ||
"Is1PConnector": false, | ||
"publisherId": "azuresentinel", | ||
"offerId": "azure-sentinel-solution-snowflake", | ||
"providers": [ | ||
"Snowflake" | ||
], | ||
"categories": { | ||
"domains": [ | ||
"Application" | ||
] | ||
}, | ||
"firstPublishDate": "2021-10-23", | ||
"support": { | ||
"name": "Microsoft Corporation", | ||
"email": "support@microsoft.com", | ||
"tier": "Microsoft", | ||
"link": "https://support.microsoft.com" | ||
}, | ||
"Data Connectors": "[\n \"Data Connectors/Snowflake_API_FunctionApp.json\"\n]", | ||
"Parsers": "[\n \"Snowflake.txt\"\n]", | ||
"Workbooks": "[\n \"Workbooks/Snowflake.json\"\n]", | ||
"Analytic Rules": "[\n \"SnowflakeDiscoveryActivity.yaml\",\n \"SnowflakeLongQueryProcessTime.yaml\",\n \"SnowflakeMultipleFailedQueries.yaml\",\n \"SnowflakeMultipleLoginFailure.yaml\",\n \"SnowflakeMultipleLoginFailureFromIP.yaml\",\n \"SnowflakePossibleDataDestruction.yaml\",\n \"SnowflakePrivilegesDiscovery.yaml\",\n \"SnowflakeQueryOnSensitiveTable.yaml\",\n \"SnowflakeUnusualQuery.yaml\",\n \"SnowflakeUserAddAdminPrivileges.yaml\"\n]", | ||
"Hunting Queries": "[\n \"SnowflakeAdminSources.yaml\",\n \"SnowflakeDeletedDatabases.yaml\",\n \"SnowflakeDeletedTables.yaml\",\n \"SnowflakeDormantUser.yaml\",\n \"SnowflakeFailedLogins.yaml\",\n \"SnowflakeHighCreditConsumingQueries.yaml\",\n \"SnowflakeTimeConsumingQueries.yaml\",\n \"SnowflakeUnknownQueryType.yaml\",\n \"SnowflakeUnusedAdmins.yaml\",\n \"SnowflakeUserSources.yaml\"\n]" | ||
} |
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.