Azure-Sentinel icon indicating copy to clipboard operation
Azure-Sentinel copied to clipboard
verified publisher icon Azure

Fix fields in Solution/Analytic Rule AzureADRoleManagementPermissionGrant.yaml

Open ep3p opened this issue 3 years ago • 3 comments

Change(s):

  1. Parse ServicePrincipal.ObjectID and ServicePrincipal.DisplayName by name instead of a position in modifiedProperties.

Reason for Change(s):

  1. Not every event or environment has ServicePrincipal.ObjectID in a specific position of modifiedProperties, the position in the array could change in future developments.

Version Updated:

  • Yes

Testing Completed:

  • Yes

Checked that the validations are passing and have addressed any issues that are present:

  • Yes

ep3p avatar Jan 04 '23 12:01 ep3p

Hi @aprakash13, Can you please review the changes and share your feedback. Thanks

v-mchatla avatar Jan 06 '23 05:01 v-mchatla

Hi @aprakash13 , Can you please review and share your feedback. Thanks

v-mchatla avatar Jan 11 '23 04:01 v-mchatla

Hi @devikamehra Can you please review the Analytic Rule and share your feedback. Thanks

v-mchatla avatar Jan 13 '23 06:01 v-mchatla

Hi @devikamehra Can you please review the Analytic Rule and share your feedback. Thanks

v-atulyadav avatar Jan 18 '23 05:01 v-atulyadav

Requested Roberto to help with this one as well.

aprakash13 avatar Jan 20 '23 02:01 aprakash13

Waiting for Roberto's response. Thanks.

v-atulyadav avatar Jan 27 '23 04:01 v-atulyadav

Hi @ep3p Sorry for the delay in response. I will try to provide an update by tomorrow (2nd Feb). Thanks.

v-mchatla avatar Feb 01 '23 05:02 v-mchatla

Hi @ep3p Sorry for the delay in response. I will check with @aprakash13 and get back to you. Thanks.

v-mchatla avatar Feb 03 '23 05:02 v-mchatla

@v-mchatla Please, don't apologize, I know these things can take time, and you are doing your best.

ep3p avatar Feb 03 '23 07:02 ep3p

@v-mchatla Please, don't apologize, I know these things can take time, and you are doing your best.

Hi @ep3p, Thanks for understanding. I really appreciate it. @aprakash13 - It would be great if you could provide some update on this. Thanks

v-mchatla avatar Feb 08 '23 05:02 v-mchatla

Hi @aprakash13 please provide your feedback, thanks!

v-vdixit avatar Feb 15 '23 05:02 v-vdixit

Hi @devikamehra, @vakohl, Can you please review the changes and share your feedback. Thanks

v-mchatla avatar Feb 17 '23 05:02 v-mchatla

Hi @devikamehra, @vakohl, Can you please review the changes and share your feedback. Thanks

v-mchatla avatar Feb 24 '23 05:02 v-mchatla