-
Notifications
You must be signed in to change notification settings - Fork 5k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added Watchlists Stable Version 2021-04-01 (#14843)
* Copied Watchlists version 2021-03-01-preview as is to new directory structure * Added Watchlist stable version 2021-04-01
- Loading branch information
1 parent
6983100
commit 13cf714
Showing
11 changed files
with
1,280 additions
and
0 deletions.
There are no files selected for viewing
781 changes: 781 additions & 0 deletions
781
...ityinsights/resource-manager/Microsoft.SecurityInsights/stable/2021-04-01/Watchlists.json
Large diffs are not rendered by default.
Oops, something went wrong.
86 changes: 86 additions & 0 deletions
86
...ger/Microsoft.SecurityInsights/stable/2021-04-01/examples/watchlists/CreateWatchlist.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,86 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2021-04-01", | ||
| "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", | ||
| "resourceGroupName": "myRg", | ||
| "workspaceName": "myWorkspace", | ||
| "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", | ||
| "watchlistAlias": "highValueAsset", | ||
| "watchlist": { | ||
| "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", | ||
| "properties": { | ||
| "displayName": "High Value Assets Watchlist", | ||
| "source": "Local file", | ||
| "provider": "Microsoft", | ||
| "description": "Watchlist from CSV content", | ||
| "itemsSearchKey": "header1" | ||
| } | ||
| } | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/watchlists/highValueAsset", | ||
| "name": "highValueAsset", | ||
| "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", | ||
| "type": "Microsoft.SecurityInsights/Watchlists", | ||
| "properties": { | ||
| "watchlistId": "76d5a51f-ba1f-4038-9d22-59fda38dc017", | ||
| "displayName": "High Value Assets Watchlist", | ||
| "provider": "Microsoft", | ||
| "source": "Local file", | ||
| "created": "2020-09-28T00:26:54.7746089+00:00", | ||
| "updated": "2020-09-28T00:26:57+00:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "description": "Watchlist from CSV content", | ||
| "watchlistType": "watchlist", | ||
| "watchlistAlias": "highValueAsset", | ||
| "itemsSearchKey": "header1", | ||
| "isDeleted": false, | ||
| "tenantId": "f686d426-8d16-42db-81b7-ab578e110ccd" | ||
| } | ||
| } | ||
| }, | ||
| "201": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/watchlists/highValueAsset", | ||
| "name": "highValueAsset", | ||
| "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", | ||
| "type": "Microsoft.SecurityInsights/Watchlists", | ||
| "properties": { | ||
| "watchlistId": "76d5a51f-ba1f-4038-9d22-59fda38dc017", | ||
| "displayName": "High Value Assets Watchlist", | ||
| "provider": "Microsoft", | ||
| "source": "Local file", | ||
| "created": "2020-09-28T00:26:54.7746089+00:00", | ||
| "updated": "2020-09-28T00:26:57+00:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "description": "Watchlist from CSV content", | ||
| "watchlistType": "watchlist", | ||
| "watchlistAlias": "highValueAsset", | ||
| "itemsSearchKey": "header1", | ||
| "isDeleted": false, | ||
| "tenantId": "f686d426-8d16-42db-81b7-ab578e110ccd" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
89 changes: 89 additions & 0 deletions
89
...urityInsights/stable/2021-04-01/examples/watchlists/CreateWatchlistAndWatchlistItems.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,89 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2021-04-01", | ||
| "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", | ||
| "resourceGroupName": "myRg", | ||
| "workspaceName": "myWorkspace", | ||
| "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", | ||
| "watchlistAlias": "highValueAsset", | ||
| "watchlist": { | ||
| "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", | ||
| "properties": { | ||
| "displayName": "High Value Assets Watchlist", | ||
| "source": "Local file", | ||
| "provider": "Microsoft", | ||
| "description": "Watchlist from CSV content", | ||
| "numberOfLinesToSkip": 1, | ||
| "rawContent": "This line will be skipped\nheader1,header2\nvalue1,value2", | ||
| "itemsSearchKey": "header1", | ||
| "contentType": "text/csv" | ||
| } | ||
| } | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/watchlists/highValueAsset", | ||
| "name": "highValueAsset", | ||
| "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", | ||
| "type": "Microsoft.SecurityInsights/Watchlists", | ||
| "properties": { | ||
| "watchlistId": "76d5a51f-ba1f-4038-9d22-59fda38dc017", | ||
| "displayName": "High Value Assets Watchlist", | ||
| "provider": "Microsoft", | ||
| "source": "Local file", | ||
| "created": "2020-09-28T00:26:54.7746089+00:00", | ||
| "updated": "2020-09-28T00:26:57+00:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "description": "Watchlist from CSV content", | ||
| "watchlistType": "watchlist", | ||
| "watchlistAlias": "highValueAsset", | ||
| "itemsSearchKey": "header1", | ||
| "isDeleted": false, | ||
| "tenantId": "f686d426-8d16-42db-81b7-ab578e110ccd" | ||
| } | ||
| } | ||
| }, | ||
| "201": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/watchlists/highValueAsset", | ||
| "name": "highValueAsset", | ||
| "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", | ||
| "type": "Microsoft.SecurityInsights/Watchlists", | ||
| "properties": { | ||
| "watchlistId": "76d5a51f-ba1f-4038-9d22-59fda38dc017", | ||
| "displayName": "High Value Assets Watchlist", | ||
| "provider": "Microsoft", | ||
| "source": "Local file", | ||
| "created": "2020-09-28T00:26:54.7746089+00:00", | ||
| "updated": "2020-09-28T00:26:57+00:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "description": "Watchlist from CSV content", | ||
| "watchlistType": "watchlist", | ||
| "watchlistAlias": "highValueAsset", | ||
| "itemsSearchKey": "header1", | ||
| "isDeleted": false, | ||
| "tenantId": "f686d426-8d16-42db-81b7-ab578e110ccd" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
92 changes: 92 additions & 0 deletions
92
...Microsoft.SecurityInsights/stable/2021-04-01/examples/watchlists/CreateWatchlistItem.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,92 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2021-04-01", | ||
| "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", | ||
| "resourceGroupName": "myRg", | ||
| "workspaceName": "myWorkspace", | ||
| "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", | ||
| "watchlistAlias": "highValueAsset", | ||
| "watchlistItemId": "82ba292c-dc97-4dfc-969d-d4dd9e666842", | ||
| "watchlistItem": { | ||
| "etag": "0300bf09-0000-0000-0000-5c37296e0000", | ||
| "properties": { | ||
| "itemsKeyValue": { | ||
| "Gateway subnet": "10.0.255.224/27", | ||
| "Web Tier": "10.0.1.0/24", | ||
| "Business tier": "10.0.2.0/24", | ||
| "Data tier": "10.0.2.0/24", | ||
| "Private DMZ in": "10.0.0.0/27", | ||
| "Public DMZ out": "10.0.0.96/27" | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/Watchlists/highValueAsset/WatchlistItems/82ba292c-dc97-4dfc-969d-d4dd9e666842", | ||
| "etag": "0300bf09-0000-0000-0000-5c37296e0000", | ||
| "type": "Microsoft.SecurityInsights/Watchlists/WatchlistItems", | ||
| "properties": { | ||
| "watchlistItemType": "watchlist-item", | ||
| "watchlistItemId": "82ba292c-dc97-4dfc-969d-d4dd9e666842", | ||
| "tenantId": "4008512e-1d30-48b2-9ee2-d3612ed9d3ea", | ||
| "isDeleted": false, | ||
| "created": "2020-11-15T04:58:56.0748363+00:00", | ||
| "updated": "2020-11-16T16:05:20+00:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "itemsKeyValue": { | ||
| "Gateway subnet": "10.0.255.224/27", | ||
| "Web Tier": "10.0.1.0/24", | ||
| "Business tier": "10.0.2.0/24", | ||
| "Data tier": "10.0.2.0/24", | ||
| "Private DMZ in": "10.0.0.0/27", | ||
| "Public DMZ out": "10.0.0.96/27" | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "201": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/Watchlists/highValueAsset/WatchlistItems/82ba292c-dc97-4dfc-969d-d4dd9e666842", | ||
| "etag": "0300bf09-0000-0000-0000-5c37296e0000", | ||
| "type": "Microsoft.SecurityInsights/Watchlists/WatchlistItems", | ||
| "properties": { | ||
| "watchlistItemType": "watchlist-item", | ||
| "watchlistItemId": "82ba292c-dc97-4dfc-969d-d4dd9e666842", | ||
| "tenantId": "4008512e-1d30-48b2-9ee2-d3612ed9d3ea", | ||
| "isDeleted": false, | ||
| "created": "2020-11-15T04:58:56.0748363+00:00", | ||
| "updated": "2020-11-16T16:05:20+00:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "itemsKeyValue": { | ||
| "Gateway subnet": "10.0.255.224/27", | ||
| "Web Tier": "10.0.1.0/24", | ||
| "Business tier": "10.0.2.0/24", | ||
| "Data tier": "10.0.2.0/24", | ||
| "Private DMZ in": "10.0.0.0/27", | ||
| "Public DMZ out": "10.0.0.96/27" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
14 changes: 14 additions & 0 deletions
14
...ger/Microsoft.SecurityInsights/stable/2021-04-01/examples/watchlists/DeleteWatchlist.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2021-04-01", | ||
| "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", | ||
| "resourceGroupName": "myRg", | ||
| "workspaceName": "myWorkspace", | ||
| "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", | ||
| "watchlistAlias": "highValueAsset" | ||
| }, | ||
| "responses": { | ||
| "200": {}, | ||
| "204": {} | ||
| } | ||
| } |
15 changes: 15 additions & 0 deletions
15
...Microsoft.SecurityInsights/stable/2021-04-01/examples/watchlists/DeleteWatchlistItem.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2021-04-01", | ||
| "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", | ||
| "resourceGroupName": "myRg", | ||
| "workspaceName": "myWorkspace", | ||
| "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", | ||
| "watchlistAlias": "highValueAsset", | ||
| "watchlistItemId": "4008512e-1d30-48b2-9ee2-d3612ed9d3ea" | ||
| }, | ||
| "responses": { | ||
| "200": {}, | ||
| "204": {} | ||
| } | ||
| } |
49 changes: 49 additions & 0 deletions
49
...Microsoft.SecurityInsights/stable/2021-04-01/examples/watchlists/GetWatchlistByAlias.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2021-04-01", | ||
| "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", | ||
| "resourceGroupName": "myRg", | ||
| "workspaceName": "myWorkspace", | ||
| "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", | ||
| "watchlistAlias": "highValueAsset" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/watchlists/highValueAsset", | ||
| "name": "highValueAsset", | ||
| "type": "Microsoft.SecurityInsights/Watchlists", | ||
| "etag": "\"0300bf09-0000-0000-0000-5c37296e0000\"", | ||
| "properties": { | ||
| "watchlistId": "76d5a51f-ba1f-4038-9d22-59fda38dc017", | ||
| "displayName": "High Value Assets Watchlist", | ||
| "provider": "Microsoft", | ||
| "source": "Local file", | ||
| "created": "2020-09-28T00:26:54.7746089+00:00", | ||
| "updated": "2020-09-28T00:26:57+00:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "description": "Watchlist from CSV content", | ||
| "watchlistType": "watchlist", | ||
| "watchlistAlias": "highValueAsset", | ||
| "itemsSearchKey": "header1", | ||
| "isDeleted": false, | ||
| "labels": [ | ||
| "Tag1", | ||
| "Tag2" | ||
| ], | ||
| "defaultDuration": "P1279DT12H30M5S", | ||
| "tenantId": "f686d426-8d16-42db-81b7-ab578e110ccd" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
47 changes: 47 additions & 0 deletions
47
...icrosoft.SecurityInsights/stable/2021-04-01/examples/watchlists/GetWatchlistItemById.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,47 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2021-04-01", | ||
| "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0", | ||
| "resourceGroupName": "myRg", | ||
| "workspaceName": "myWorkspace", | ||
| "watchlistAlias": "highValueAsset", | ||
| "operationalInsightsResourceProvider": "Microsoft.OperationalInsights", | ||
| "watchlistItemId": "3f8901fe-63d9-4875-9ad5-9fb3b8105797" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/Watchlists/highValueAsset/WatchlistItems/fd37d325-7090-47fe-851a-5b5a00c3f576", | ||
| "name": "fd37d325-7090-47fe-851a-5b5a00c3f576", | ||
| "etag": "\"f2089bfa-0000-0d00-0000-601c58b42021\"", | ||
| "type": "Microsoft.SecurityInsights/Watchlists/WatchlistItems", | ||
| "properties": { | ||
| "watchlistItemType": "watchlist-item", | ||
| "watchlistItemId": "fd37d325-7090-47fe-851a-5b5a00c3f576", | ||
| "tenantId": "3f8901fe-63d9-4875-9ad5-9fb3b8105797", | ||
| "isDeleted": false, | ||
| "created": "2021-02-04T12:27:32.3783333-08:00", | ||
| "updated": "2021-02-04T12:27:32.3783333-08:00", | ||
| "createdBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "updatedBy": { | ||
| "objectId": "2046feea-040d-4a46-9e2b-91c2941bfa70", | ||
| "email": "john@contoso.com", | ||
| "name": "john doe" | ||
| }, | ||
| "itemsKeyValue": { | ||
| "Header-1": "v1_1", | ||
| "Header-2": "v1_2", | ||
| "Header-3": "v1_3", | ||
| "Header-4": "v1_4", | ||
| "Header-5": "v1_5" | ||
| }, | ||
| "entityMapping": {} | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.