Correct targetProduct in tiIndicator: submitTiIndicators

[RecordedFutureOskbo]

Required items, please complete

Change(s):

• Change "targetProduct": "Microsoft Sentinel" back to "Azure Sentinel"
• Generated new solution 2.2.2.zip containing the fix.

Reason for Change(s): Error in our playbooks introduced due to name change from Azure Sentinel to Microsoft Sentinel. Introduced in this COMMIT.

This fix will correct the targetProduct back to Azure Sentinel according to the spec https://learn.microsoft.com/en-us/graph/api/tiindicator-submittiindicators?view=graph-rest-beta&tabs=http

Testing Completed:

• Installed mainTemplate.json
• Installed playbooks from templates
• Run templates importing data and triggered analytic rules.

[RecordedFutureOskbo]

I have prepared publishing of Solution package in the partner portal and are ready to publish when this PR is approved.

[v-sabiraj]

@RecordedFutureOskbo, please check if there is need to change the text from "Microsoft Sentinel" to "Azure sentinel" again? as we have changed at all instances, thanks.

[RecordedFutureOskbo]

Yes this is required in the Microsoft Graph API. The text will not surface to the end user. I tested the API with "Microsoft Sentinel" as targetProduct I got HTTP Status 400 back. https://learn.microsoft.com/en-us/graph/api/resources/tiindicator?view=graph-rest-beta

[v-sabiraj]

@RecordedFutureOskbo Ok, let me check if we can skip these failing validations, thanks.

[RecordedFutureOskbo]

@v-sabiraj any status on this? I will try to create a workaround so we can get this fix to our customers.

[RecordedFutureOskbo]

@v-sabiraj Azure.Azure-Sentinel task is now successful.

[RecordedFutureOskbo]

@v-sabiraj, @v-atulyadav any new on this PR? I have fixed all Required checks.

[v-sabiraj]

@RecordedFutureOskbo, actually the arm-ttk for particular playbooks is failing, the check has been added to check individual files.

[RecordedFutureOskbo]

@RecordedFutureOskbo, actually the arm-ttk for particular playbooks is failing, the check has been added to check individual files.

I have a separate branch where I tried to remove all arm-ttk issues. I rather submit it separate, since I will rename all playbooks to azuredeploy.json as one of the updates.

[RecordedFutureOskbo]

@v-sabiraj do you need fix for arm-ttk in this PR?

[v-sabiraj]

@RecordedFutureOskbo, this is fixed, will approve, thanks.

[v-sabiraj]

Hey, @RecordedFutureOskbo can you please update your branch from master. The fix has been done in master, thanks.

[RecordedFutureOskbo]

Hey, @RecordedFutureOskbo can you please update your branch from master. The fix has been done in master, thanks.

Done, thanks!