diff --git a/Solutions/SAP/Sample Authorizations Role File/MSFTSEN_SENTINEL_READER.SAP b/Solutions/SAP/Sample Authorizations Role File/MSFTSEN_SENTINEL_READER.SAP index 8d58ddf0f3c..91b45b03803 100644 --- a/Solutions/SAP/Sample Authorizations Role File/MSFTSEN_SENTINEL_READER.SAP +++ b/Solutions/SAP/Sample Authorizations Role File/MSFTSEN_SENTINEL_READER.SAP @@ -1,146 +1,52 @@ -DATE 20250316 125135 +DATE 20260407 091227 RELEASE 758 LOADED_AGRS /MSFTSEN/SENTINEL_READER -AGR_DEFINE 400/MSFTSEN/SENTINEL_READER DEVELOPER 20240327082114000000000000000DEVELOPER 20250316125114000000000000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000001S_ADMI_FCD__________00 U O000010 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000002S_APPL_LOG__________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000003S_RFC __________00 U O000004 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000004S_SAL __________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000005S_SCD0_OBJ__________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000006S_TABU_NAM__________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000007S_TCODE __________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000008S_TRANSPRT__________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000009S_USER_GRP__________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000012S_XMI_PROD__________00 U O000017 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000010S_USER_UID__________00 U O000000 -AGR_1250 400/MSFTSEN/SENTINEL_READER 000011S_WF_WI __________00 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000001S_ADMI_FCD__________00 S_ADMI_FCDAUDD U O000011 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000002S_ADMI_FCD__________00 S_ADMI_FCDSPOS U O000011 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000003S_APPL_LOG__________00 ACTVT 03 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000004S_APPL_LOG__________00 ALG_OBJECT* U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000005S_APPL_LOG__________00 ALG_SUBOBJ* U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000006S_RFC __________00 ACTVT 16 U O000005 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000007S_RFC __________00 RFC_NAME /MSFTSEN/* U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000008S_RFC __________00 RFC_NAME /OSP/SYSTEM_TIMEZONE U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000009S_RFC __________00 RFC_NAME ARFC U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000010S_RFC __________00 RFC_NAME BAPI_SYSTEM_MTE_GETMLHIS U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000011S_RFC __________00 RFC_NAME BAPI_SYSTEM_MTE_GETTIDBYNAME U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000012S_RFC __________00 RFC_NAME BAPI_SYSTEM_MTE_GETTREE U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000013S_RFC __________00 RFC_NAME BAPI_USER_GET_DETAIL U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000014S_RFC __________00 RFC_NAME BAPI_XBP_APPL_LOG_CONTENT_GET U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000015S_RFC __________00 RFC_NAME BAPI_XBP_JOB_JOBLOG_READ U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000016S_RFC __________00 RFC_NAME BAPI_XMI_LOGOFF U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000017S_RFC __________00 RFC_NAME BAPI_XMI_LOGON U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000018S_RFC __________00 RFC_NAME BAPI_XMI_SET_AUDITLEVEL U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000019S_RFC __________00 RFC_NAME CTS_API U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000020S_RFC __________00 RFC_NAME CTS_API_READ_CHANGE_REQUEST U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000021S_RFC __________00 RFC_NAME DDIF_FIELDINFO_GET U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000022S_RFC __________00 RFC_NAME RFC1 U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000023S_RFC __________00 RFC_NAME RFCPING U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000024S_RFC __________00 RFC_NAME RFC_GET_FUNCTION_INTERFACE U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000025S_RFC __________00 RFC_NAME RFC_METADATA_GET U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000026S_RFC __________00 RFC_NAME RFC_READ_TABLE U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000027S_RFC __________00 RFC_NAME RFC_SYSTEM_INFO U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000028S_RFC __________00 RFC_NAME RSAU_API_GET_LOG_DATA U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000029S_RFC __________00 RFC_NAME SALX U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000030S_RFC __________00 RFC_NAME SAP_WAPI_READ_CONTAINER U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000031S_RFC __________00 RFC_NAME SDIFRUNTIME U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000032S_RFC __________00 RFC_NAME SIAG_ROLE_GET_AUTH U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000033S_RFC __________00 RFC_NAME SLIC_LOCAL_HWKEY U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000034S_RFC __________00 RFC_NAME SMOI U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000035S_RFC __________00 RFC_NAME STFC U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000036S_RFC __________00 RFC_NAME SUSR_USER_AUTH_FOR_OBJ_GET U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000037S_RFC __________00 RFC_NAME SU_USER U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000038S_RFC __________00 RFC_NAME SWRR U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000039S_RFC __________00 RFC_NAME SXBP U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000040S_RFC __________00 RFC_NAME SXBP_EXT U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000041S_RFC __________00 RFC_NAME SXMI U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000042S_RFC __________00 RFC_NAME SYST U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000043S_RFC __________00 RFC_NAME TH_SERVER_LIST U O000006 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000044S_RFC __________00 RFC_TYPE FUGR U O000007 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000045S_RFC __________00 RFC_TYPE FUNC U O000007 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000046S_SAL __________00 SAL_ACTVT SHOW_LOG U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000047S_SCD0_OBJ__________00 ACTVT 08 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000048S_SCD0_OBJ__________00 OBJECTCLAS* U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000049S_TABU_NAM__________00 ACTVT 03 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000050S_TABU_NAM__________00 TABLE ADCP U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000051S_TABU_NAM__________00 TABLE ADR6 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000052S_TABU_NAM__________00 TABLE AGR_1251 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000053S_TABU_NAM__________00 TABLE AGR_AGRS U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000054S_TABU_NAM__________00 TABLE AGR_DEFINE U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000055S_TABU_NAM__________00 TABLE AGR_FLAGS U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000056S_TABU_NAM__________00 TABLE AGR_PROF U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000057S_TABU_NAM__________00 TABLE AGR_TCODES U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000058S_TABU_NAM__________00 TABLE AGR_USERS U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000059S_TABU_NAM__________00 TABLE BALHDR U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000099S_TABU_NAM__________00 TABLE USR21 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000100S_TABU_NAM__________00 TABLE USR41 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000101S_TABU_NAM__________00 TABLE USRACL U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000102S_TABU_NAM__________00 TABLE USRSTAMP U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000103S_TABU_NAM__________00 TABLE UST04 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000104S_TCODE __________00 TCD SM51 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000105S_TRANSPRT__________00 ACTVT 03 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000106S_TRANSPRT__________00 TTYPE * U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000107S_USER_GRP__________00 ACTVT 03 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000108S_USER_GRP__________00 ACTVT 05 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000109S_USER_GRP__________00 CLASS * U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000060S_TABU_NAM__________00 TABLE BNKA U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000061S_TABU_NAM__________00 TABLE CDHDR U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000062S_TABU_NAM__________00 TABLE CDPOS U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000063S_TABU_NAM__________00 TABLE DBCON U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000064S_TABU_NAM__________00 TABLE DBTABLOG U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000065S_TABU_NAM__________00 TABLE DEVACCESS U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000066S_TABU_NAM__________00 TABLE E070 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000067S_TABU_NAM__________00 TABLE EUFUNC U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000068S_TABU_NAM__________00 TABLE GRFNMWRTINST U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000069S_TABU_NAM__________00 TABLE ICFDOCU U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000070S_TABU_NAM__________00 TABLE ICFHANDLER U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000071S_TABU_NAM__________00 TABLE ICFSERVLOC U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000072S_TABU_NAM__________00 TABLE OA2_SD_CL U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000073S_TABU_NAM__________00 TABLE OA2_SD_CLT U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000074S_TABU_NAM__________00 TABLE OA2_SD_CL_SC U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000075S_TABU_NAM__________00 TABLE PAHI U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000076S_TABU_NAM__________00 TABLE RFCATTRIB U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000077S_TABU_NAM__________00 TABLE RFCCBWHITELIST_A U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000078S_TABU_NAM__________00 TABLE RFCDES U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000079S_TABU_NAM__________00 TABLE RFCDESSECU U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000080S_TABU_NAM__________00 TABLE RFCDOC U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000081S_TABU_NAM__________00 TABLE RFCSYSACL U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000082S_TABU_NAM__________00 TABLE RFCTRUST U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000083S_TABU_NAM__________00 TABLE RSAUFILES U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000084S_TABU_NAM__________00 TABLE SACF_ALERT U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000085S_TABU_NAM__________00 TABLE SNCSYSACL U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000086S_TABU_NAM__________00 TABLE SOUD U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000087S_TABU_NAM__________00 TABLE SWWLOGHIST U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000088S_TABU_NAM__________00 TABLE SWWWIHEAD U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000089S_TABU_NAM__________00 TABLE T000 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000090S_TABU_NAM__________00 TABLE TBTCO U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000091S_TABU_NAM__________00 TABLE TMSQAFILTER U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000092S_TABU_NAM__________00 TABLE TSP01 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000093S_TABU_NAM__________00 TABLE TXCOM U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000094S_TABU_NAM__________00 TABLE USER_ADDR U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000095S_TABU_NAM__________00 TABLE USGRP_USER U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000096S_TABU_NAM__________00 TABLE USR01 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000097S_TABU_NAM__________00 TABLE USR02 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000098S_TABU_NAM__________00 TABLE USR05 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000117S_XMI_PROD__________00 EXTPRODUCTAzure Sentinel U O000019 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000118S_XMI_PROD__________00 INTERFACE XAL U O000020 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000119S_XMI_PROD__________00 INTERFACE XBP U O000020 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000113S_WF_WI __________00 TASK_CLASS* U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000114S_WF_WI __________00 WFACTVT 44 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000115S_WF_WI __________00 WI_TYPE * U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000116S_XMI_PROD__________00 EXTCOMPANYMicrosoft U O000018 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000110S_USER_UID__________00 ACTVT 03 U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000111S_USER_UID__________00 CLASS * U O000000 -AGR_1251 400/MSFTSEN/SENTINEL_READER 000112S_USER_UID__________00 EXTUID_TYP* U O000000 -AGR_TEXTS 400/MSFTSEN/SENTINEL_READER E00000Microsoft Sentinel for SAP agent- read only +AGR_DEFINE 400/MSFTSEN/SENTINEL_READER DEVELOPER 20240327082114000000000000000DEVELOPER 20260407091205000000000000000 +AGR_1250 400/MSFTSEN/SENTINEL_READER 000004S_TABU_NAM__________00 U O000000 +AGR_1250 400/MSFTSEN/SENTINEL_READER 000005S_TCODE __________00 U O000000 +AGR_1250 400/MSFTSEN/SENTINEL_READER 000001S_ADMI_FCD__________00 U O000000 +AGR_1250 400/MSFTSEN/SENTINEL_READER 000002S_RFC __________00 U O000004 +AGR_1250 400/MSFTSEN/SENTINEL_READER 000003S_SAL __________00 U O000000 +AGR_1250 400/MSFTSEN/SENTINEL_READER 000006S_USER_GRP__________00 U O000000 +AGR_1250 400/MSFTSEN/SENTINEL_READER 000007S_USER_UID__________00 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000001S_ADMI_FCD__________00 S_ADMI_FCDAUDD U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000002S_RFC __________00 ACTVT 16 U O000005 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000003S_RFC __________00 RFC_NAME /OSP/SYSTEM_TIMEZONE U O000006 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000004S_RFC __________00 RFC_NAME BAPI_USER_GET_DETAIL U O000006 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000005S_RFC __________00 RFC_NAME RFCPING U O000006 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000029S_USER_UID__________00 EXTUID_TYPGU U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000006S_RFC __________00 RFC_NAME RFC_METADATA_GET U O000006 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000007S_RFC __________00 RFC_NAME RFC_READ_TABLE U O000006 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000008S_RFC __________00 RFC_NAME RSAU_API_GET_LOG_DATA U O000006 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000009S_RFC __________00 RFC_NAME SIAG_ROLE_GET_AUTH U O000006 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000010S_RFC __________00 RFC_TYPE FUGR U O000007 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000011S_RFC __________00 RFC_TYPE FUNC U O000007 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000012S_SAL __________00 SAL_ACTVT SHOW_LOG U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000013S_TABU_NAM__________00 ACTVT 03 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000014S_TABU_NAM__________00 TABLE AGR_1251 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000015S_TABU_NAM__________00 TABLE AGR_DEFINE U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000016S_TABU_NAM__________00 TABLE AGR_USERS U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000017S_TABU_NAM__________00 TABLE CDHDR U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000018S_TABU_NAM__________00 TABLE CDPOS U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000019S_TABU_NAM__________00 TABLE PAHI U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000020S_TABU_NAM__________00 TABLE T000 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000021S_TABU_NAM__________00 TABLE USR02 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000022S_TABU_NAM__________00 TABLE USRSTAMP U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000023S_TCODE __________00 TCD SUIM U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000024S_USER_GRP__________00 ACTVT 03 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000025S_USER_GRP__________00 ACTVT 05 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000026S_USER_GRP__________00 CLASS SUPER U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000027S_USER_UID__________00 ACTVT 03 U O000000 +AGR_1251 400/MSFTSEN/SENTINEL_READER 000028S_USER_UID__________00 CLASS SUPER U O000000 +AGR_TEXTS 400/MSFTSEN/SENTINEL_READER E00000Microsoft Sentinel for SAP agentless- read only +AGR_TEXTS 400/MSFTSEN/SENTINEL_READER E00001Microsoft Sentinel for SAP agentless- read only AGR_FLAGS 400/MSFTSEN/SENTINEL_READER COLL_AGR DEVELOPER 20240327082114DEVELOPER 20240327082114 AGR_FLAGS 400/MSFTSEN/SENTINEL_READER DEVCLASS DEVELOPER 20240327082114DEVELOPER 20240327082114 AGR_FLAGS 400/MSFTSEN/SENTINEL_READER MASTER_LANDEVELOPER 20240327082114DEVELOPER 20240327082114E AGR_FLAGS 400/MSFTSEN/SENTINEL_READER RESP_USER DEVELOPER 20240327082114DEVELOPER 20240327082114 AGR_FLAGS 400/MSFTSEN/SENTINEL_READER SYS_FLAG DEVELOPER 20240327082114DEVELOPER 20240327082114 -AGR_FLAGS 400/MSFTSEN/SENTINEL_READER FORCE_MIX DEVELOPER 20240327082114DEVELOPER 20250316125031 -AGR_FLAGS 400/MSFTSEN/SENTINEL_READER FORCE_YEL DEVELOPER 20240327082114DEVELOPER 20250316125114 +AGR_FLAGS 400/MSFTSEN/SENTINEL_READER FORCE_MIX DEVELOPER 20240327082114DEVELOPER 20260402132816 +AGR_FLAGS 400/MSFTSEN/SENTINEL_READER FORCE_YEL DEVELOPER 20240327082114DEVELOPER 20260402132817 AGR_TIME 400/MSFTSEN/SENTINEL_READER SYSTTARTMPDEVELOPER 20240327082114000000000000000DEVELOPER 20240327082114000000000000000 -AGR_TIME 400/MSFTSEN/SENTINEL_READER PROFILE DEVELOPER 20240327082114000000000000000DEVELOPER 20250316125031000000000000000 +AGR_TIME 400/MSFTSEN/SENTINEL_READER PROFILE DEVELOPER 20240327082114000000000000000DEVELOPER 20260402132816000000000000000 AGR_LSD 400/MSFTSEN/SENTINEL_READER E diff --git a/Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv b/Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv index c7894653619..5545bbce52b 100644 --- a/Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv +++ b/Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv @@ -1,21 +1,61 @@ -"solution_name","solution_folder","solution_github_url","connector_id","connector_title","connector_publisher","relevant_file","reason","details" -"archTIS","archTIS","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/archTIS","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." -"Azure Resource Graph","Azure Resource Graph","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Resource%20Graph","AzureResourceGraph","Azure Resource Graph","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Resource%20Graph/Data Connectors/AzureResourceGraph_DataConnectorDefinition.json","no_table_definitions","Connector definition did not expose any table tokens." -"Google Cloud Platform Audit Logs","Google Cloud Platform Audit Logs","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs","GCPPub/SubAuditLogs","GCP Pub/Sub Audit Logs","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs/Data Connectors/GCPAuditLogs.json","loganalytics_mismatch","logAnalyticsTableId 'Microsoft-GCPAuditLogs' differs from detected table tokens ['GCPAuditLogs']" -"Google Cloud Platform Audit Logs","Google Cloud Platform Audit Logs","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs","GCPPub/SubAuditLogs","GCP Pub/Sub Audit Logs","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs/Data Connectors/GCPAuditLogs.json","loganalytics_mismatch","logAnalyticsTableId 'Microsoft-GCPAuditLogs' differs from detected table tokens ['GCPAuditLogs']" -"Microsoft 365 Assets","Microsoft 365 Assets","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20365%20Assets","M365Assets","Microsoft 365 Assets (formerly, Office 365)","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20365%20Assets/Data Connectors/M365Asset_DataConnectorDefinition.json","no_table_definitions","Connector definition did not expose any table tokens." -"Microsoft Business Applications","Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Executable%20uploaded%20to%20SharePoint%20document%20management%20site.yaml","content_unknown_table","analytic_rule 'Dataverse - Executable uploaded to SharePoint document management site' references unknown tables: DataverseSharePointSites" -"Microsoft Business Applications","Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Export%20activity%20from%20terminated%20or%20notified%20employee.yaml","content_unknown_table","analytic_rule 'Dataverse - Export activity from terminated or notified employee' references unknown tables: MSBizAppsTerminatedEmployees" -"Microsoft Business Applications","Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Login%20by%20a%20sensitive%20privileged%20user.yaml","content_unknown_table","analytic_rule 'Dataverse - Login by a sensitive privileged user' references unknown tables: MSBizAppsVIPUsers" -"Microsoft Business Applications","Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Login%20from%20IP%20in%20the%20block%20list.yaml","content_unknown_table","analytic_rule 'Dataverse - Login from IP in the block list' references unknown tables: MSBizAppsNetworkAddresses" -"Microsoft Business Applications","Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Login%20from%20IP%20not%20in%20the%20allow%20list.yaml","content_unknown_table","analytic_rule 'Dataverse - Login from IP not in the allow list' references unknown tables: MSBizAppsNetworkAddresses" -"Microsoft Business Applications","Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Mass%20download%20from%20SharePoint%20document%20management.yaml","content_unknown_table","analytic_rule 'Dataverse - Mass download from SharePoint document management' references unknown tables: DataverseSharePointSites" -"Microsoft Business Applications","Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Terminated%20employee%20exfiltration%20over%20email.yaml","content_unknown_table","analytic_rule 'Dataverse - Terminated employee exfiltration over email' references unknown tables: MSBizAppsTerminatedEmployees" -"Microsoft Entra ID Assets","Microsoft Entra ID Assets","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID%20Assets","EntraIDAssets","Microsoft Entra ID Assets","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID%20Assets/Data Connectors/EntraIDAssets_DataConnectorDefinition.json","no_table_definitions","Connector definition did not expose any table tokens." -"Microsoft Exchange Security - Exchange On-Premises","Microsoft Exchange Security - Exchange On-Premises","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises/Workbooks/Microsoft%20Exchange%20Admin%20Activity.json","content_unknown_table","workbook 'Microsoft Exchange Admin Activity' references unknown tables: ExchangeConfiguration" -"Microsoft Exchange Security - Exchange On-Premises","Microsoft Exchange Security - Exchange On-Premises","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises/Workbooks/Microsoft%20Exchange%20Least%20Privilege%20with%20RBAC.json","content_unknown_table","workbook 'Microsoft Exchange Least Privilege with RBAC' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" -"Microsoft Exchange Security - Exchange On-Premises","Microsoft Exchange Security - Exchange On-Premises","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises/Workbooks/Microsoft%20Exchange%20Security%20Review.json","content_unknown_table","workbook 'Microsoft Exchange Security Review' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" -"Microsoft Exchange Security - Exchange Online","Microsoft Exchange Security - Exchange Online","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online/Workbooks/Microsoft%20Exchange%20Least%20Privilege%20with%20RBAC%20-%20Online.json","content_unknown_table","workbook 'Microsoft Exchange Least Privilege with RBAC - Online' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" -"Microsoft Exchange Security - Exchange Online","Microsoft Exchange Security - Exchange Online","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online/Workbooks/Microsoft%20Exchange%20Security%20Review%20-%20Online.json","content_unknown_table","workbook 'Microsoft Exchange Security Review - Online' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" -"Palo Alto - XDR (Cortex)","Palo Alto - XDR (Cortex)","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Palo%20Alto%20-%20XDR%20%28Cortex%29","","","","","missing_solution_metadata","Solution contains connectors but is missing SolutionMetadata.json." -"TenableAD","TenableAD","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/TenableAD","","","","","missing_solution_metadata","Solution contains connectors but is missing SolutionMetadata.json." +"solution_name","solution_folder","connector_id","connector_title","connector_publisher","relevant_file","reason","details" +"Azure Batch Account","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Batch%20Account","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Cognitive Search","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Cognitive%20Search","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Data Lake Storage Gen1","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Data%20Lake%20Storage%20Gen1","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure DDoS Protection","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20DDoS%20Protection","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Event Hubs","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Event%20Hubs","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Firewall","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Firewall","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Firewall/Workbooks/AzureFirewallWorkbook.json","content_unknown_table","workbook 'AzureFirewallWorkbook' references unknown tables: AzureFirewallDnsProxy" +"Azure Firewall","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Firewall","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Key Vault","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Key%20Vault","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure kubernetes Service","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20kubernetes%20Service","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Logic Apps","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Logic%20Apps","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Network Security Groups","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Network%20Security%20Groups","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Resource Graph","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Resource%20Graph","AzureResourceGraph","Azure Resource Graph","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Resource%20Graph/Data Connectors/AzureResourceGraph_DataConnectorDefinition.json","no_table_definitions","Connector definition did not expose any table tokens." +"Azure Service Bus","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Service%20Bus","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure SQL Database solution for sentinel","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20SQL%20Database%20solution%20for%20sentinel","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Storage","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Storage","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Stream Analytics","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Stream%20Analytics","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Azure Web Application Firewall (WAF)","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Web%20Application%20Firewall%20%28WAF%29","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Blackberry CylancePROTECT","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Blackberry%20CylancePROTECT","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"CiscoASA","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/CiscoASA","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Common Event Format","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Common%20Event%20Format","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Google Cloud Platform Audit Logs","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs","GCPPub/SubAuditLogs","GCP Pub/Sub Audit Logs","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs/Data Connectors/GCPAuditLogs.json","loganalytics_mismatch","logAnalyticsTableId 'Microsoft-GCPAuditLogs' differs from detected table tokens ['GCPAuditLogs']" +"Google Cloud Platform Audit Logs","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs","GCPPub/SubAuditLogs","GCP Pub/Sub Audit Logs","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Audit%20Logs/Data Connectors/GCPAuditLogs.json","loganalytics_mismatch","logAnalyticsTableId 'Microsoft-GCPAuditLogs' differs from detected table tokens ['GCPAuditLogs']" +"Google Cloud Platform Firewall Logs","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Google%20Cloud%20Platform%20Firewall%20Logs","","","","","missing_solution_metadata","Solution contains connectors but is missing SolutionMetadata.json." +"Infoblox","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Infoblox","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Infoblox/Workbooks/Infoblox_Workbook.json","content_unknown_table","workbook 'Infoblox_Workbook' references unknown tables: Infoblox" +"IoTOTThreatMonitoringwithDefenderforIoT","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/IoTOTThreatMonitoringwithDefenderforIoT","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Microsoft 365","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20365","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Microsoft 365 Assets","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20365%20Assets","M365Assets","Microsoft 365 Assets (formerly, Office 365)","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20365%20Assets/Data Connectors/M365Asset_DataConnectorDefinition.json","no_table_definitions","Connector definition did not expose any table tokens." +"Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Login%20from%20IP%20not%20in%20the%20allow%20list.yaml","content_unknown_table","analytic_rule 'Dataverse - Login from IP not in the allow list' references unknown tables: MSBizAppsNetworkAddresses" +"Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Login%20by%20a%20sensitive%20privileged%20user.yaml","content_unknown_table","analytic_rule 'Dataverse - Login by a sensitive privileged user' references unknown tables: MSBizAppsVIPUsers" +"Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Terminated%20employee%20exfiltration%20over%20email.yaml","content_unknown_table","analytic_rule 'Dataverse - Terminated employee exfiltration over email' references unknown tables: MSBizAppsTerminatedEmployees" +"Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Export%20activity%20from%20terminated%20or%20notified%20employee.yaml","content_unknown_table","analytic_rule 'Dataverse - Export activity from terminated or notified employee' references unknown tables: MSBizAppsTerminatedEmployees" +"Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Login%20from%20IP%20in%20the%20block%20list.yaml","content_unknown_table","analytic_rule 'Dataverse - Login from IP in the block list' references unknown tables: MSBizAppsNetworkAddresses" +"Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Mass%20download%20from%20SharePoint%20document%20management.yaml","content_unknown_table","analytic_rule 'Dataverse - Mass download from SharePoint document management' references unknown tables: DataverseSharePointSites" +"Microsoft Business Applications","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Business%20Applications/Analytic%20Rules/Dataverse%20-%20Executable%20uploaded%20to%20SharePoint%20document%20management%20site.yaml","content_unknown_table","analytic_rule 'Dataverse - Executable uploaded to SharePoint document management site' references unknown tables: DataverseSharePointSites" +"Microsoft Defender for Cloud Apps","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Defender%20for%20Cloud%20Apps","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Microsoft Defender for Identity","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Defender%20For%20Identity","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Microsoft Defender XDR","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Defender%20XDR","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Microsoft Entra ID","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Microsoft Entra ID Assets","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID%20Assets","EntraIDAssets","Microsoft Entra ID Assets","Microsoft","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID%20Assets/Data Connectors/EntraIDAssets_DataConnectorDefinition.json","no_table_definitions","Connector definition did not expose any table tokens." +"Microsoft Entra ID Protection","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID%20Protection","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Microsoft Exchange Security - Exchange On-Premises","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises/Workbooks/Microsoft%20Exchange%20Admin%20Activity.json","content_unknown_table","workbook 'Microsoft Exchange Admin Activity' references unknown tables: ExchangeConfiguration" +"Microsoft Exchange Security - Exchange On-Premises","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises/Workbooks/Microsoft%20Exchange%20Least%20Privilege%20with%20RBAC.json","content_unknown_table","workbook 'Microsoft Exchange Least Privilege with RBAC' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" +"Microsoft Exchange Security - Exchange On-Premises","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20On-Premises/Workbooks/Microsoft%20Exchange%20Security%20Review.json","content_unknown_table","workbook 'Microsoft Exchange Security Review' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" +"Microsoft Exchange Security - Exchange Online","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online/Workbooks/Microsoft%20Exchange%20Security%20Review%20-%20Online.json","content_unknown_table","workbook 'Microsoft Exchange Security Review - Online' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" +"Microsoft Exchange Security - Exchange Online","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Exchange%20Security%20-%20Exchange%20Online/Workbooks/Microsoft%20Exchange%20Least%20Privilege%20with%20RBAC%20-%20Online.json","content_unknown_table","workbook 'Microsoft Exchange Least Privilege with RBAC - Online' references unknown tables: ExchangeConfiguration, ExchangeEnvironmentList" +"Microsoft Project","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Project","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"MicrosoftDefenderForEndpoint","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/MicrosoftDefenderForEndpoint","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"MicrosoftPurviewInsiderRiskManagement","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/MicrosoftPurviewInsiderRiskManagement","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"OneIdentity","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/OneIdentity","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Palo Alto - XDR (Cortex)","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Palo%20Alto%20-%20XDR%20%28Cortex%29","","","","","missing_solution_metadata","Solution contains connectors but is missing SolutionMetadata.json." +"Symantec Integrated Cyber Defense","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Symantec%20Integrated%20Cyber%20Defense","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"TenableAD","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/TenableAD","","","","","missing_solution_metadata","Solution contains connectors but is missing SolutionMetadata.json." +"TransmitSecurity","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/TransmitSecurity","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Windows Firewall","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Windows%20Firewall","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Windows Forwarded Events","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Windows%20Forwarded%20Events","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Windows Security Events","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Windows%20Security%20Events","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"Windows Server DNS","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Windows%20Server%20DNS","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files." +"ZeroTrust(TIC3.0)","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/ZeroTrust%28TIC3.0%29","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/ZeroTrust%28TIC3.0%29/Workbooks/ZeroTrustTIC3.json","content_unknown_table","workbook 'ZeroTrustTIC3' references unknown tables: AzureFirewallDnsProxy" +"Zinc Open Source","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Zinc%20Open%20Source","","","","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Zinc%20Open%20Source/Analytic%20Rules/ZincOctober2022_IP_Domain_Hash_IOC.yaml","content_unknown_table","analytic_rule '[Deprecated] - Zinc Actor IOCs domains hashes IPs and useragent - October 2022' references unknown tables: AzureFirewallDnsProxy" +"Zscaler Internet Access","https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Zscaler%20Internet%20Access","","","","","missing_connector_json","Data Connectors folder exists but contains no readable connector JSON files."