SentinelARConverter
SentinelARConverter copied to clipboard
Sentinel Analytics Rule converter PowerShell module
Adds requiredDataConnectors back to the ARM template - I use it to validate the workspace prior to deployment whether it contains required tables/columns. ## IncludeRequiredDataConnectors Switch to include requiredDataConnectors to...
### Summary of the new feature / enhancement Based on the published table https://github.com/Azure/Azure-Sentinel/wiki/Query-Style-Guide#datatypes the cmdlet `Convert-SentinelARArmToYaml` should identify the used tables or functions and add the dataType and connectorId...
### Summary of the new feature / enhancement Add support for [ ] Fusion [ ] NRT [ ] ML [ ] Threat Intelligence [ ] Microsoft Security ### Proposed...
### Summary of the new feature / enhancement When the parametern `NamePrefix` is set the name of the rule is changed but not the `alertDisplayNameFormat` (when available) This should also...