{
  "Name": "Azure Activity",
  "Author": "Microsoft - support@microsoft.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Workbooks/Images/Logos/azureactivity_logo.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The [Azure Activity](https://docs.microsoft.com/azure/azure-monitor/essentials/activity-log) solution for Microsoft Sentinel enables you to ingest Azure Activity Administrative, Security, Service Health, Alert, Recommendation, Policy, Autoscale and Resource Health [logs](https://docs.microsoft.com/azure/azure-monitor/reference/tables/azureactivity) using Diagnostic Settings into Microsoft Sentinel.",
 "Data Connectors": [
    "Data Connectors/AzureActivity.json"
  ],
  "Hunting Queries": [
    "Hunting Queries/AnalyticsRulesAdministrativeOperations.yaml",
    "Hunting Queries/AnomalousAzureOperationModel.yaml",
    "Hunting Queries/Anomalous_Listing_Of_Storage_Keys.yaml",
    "Hunting Queries/AzureAdministrationFromVPS.yaml",
    "Hunting Queries/AzureNSG_AdministrativeOperations.yaml",
    "Hunting Queries/AzureRunCommandFromAzureIP.yaml",
    "Hunting Queries/AzureSentinelConnectors_AdministrativeOperations.yaml",
    "Hunting Queries/AzureSentinelWorkbooks_AdministrativeOperation.yaml",
    "Hunting Queries/AzureVirtualNetworkSubnets_AdministrativeOperationset.yaml",
    "Hunting Queries/Common_Deployed_Resources.yaml",
    "Hunting Queries/Creating_Anomalous_Number_Of_Resources.yaml",
    "Hunting Queries/Granting_Permissions_to_Account.yaml",
    "Hunting Queries/PortOpenedForAzureResource.yaml",
    "Hunting Queries/Rare_Custom_Script_Extension.yaml",
	"Hunting Queries/Machine_Learning_Creation.yaml"
  ],
  "Analytic Rules": [
    "Analytic Rules/AADHybridHealthADFSNewServer.yaml",
    "Analytic Rules/AADHybridHealthADFSServiceDelete.yaml",
    "Analytic Rules/AADHybridHealthADFSSuspApp.yaml",
    "Analytic Rules/Creating_Anomalous_Number_Of_Resources_detection.yaml",
    "Analytic Rules/Creation_of_Expensive_Computes_in_Azure.yaml",
    "Analytic Rules/Granting_Permissions_To_Account_detection.yaml",
    "Analytic Rules/NRT-AADHybridHealthADFSNewServer.yaml",
    "Analytic Rules/NRT_Creation_of_Expensive_Computes_in_Azure.yaml",
    "Analytic Rules/New-CloudShell-User.yaml",
    "Analytic Rules/NewResourceGroupsDeployedTo.yaml",
    "Analytic Rules/RareOperations.yaml",
    "Analytic Rules/TimeSeriesAnomaly_Mass_Cloud_Resource_Deletions.yaml",
	"Analytic Rules/SubscriptionMigration.yaml",
	"Analytic Rules/Machine_Learning_Creation.yaml"
	
  ],
  "Workbooks": [
    "Workbooks/AzureActivity.json",
    "Workbooks/AzureServiceHealthWorkbook.json"
  ],
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\solutions\\Azure Activity",
  "Version": "3.0.4",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": true,
  "StaticDataConnectorIds": [
    "AzureActivity"
  ]
}