{
  "Name": "Cloudflare CCF",
  "Author": "Cloudflare - support@cloudflare.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\"width=\"75px\"height=\"75px\">",
  "Description": "The [Cloudflare](https://www.cloudflare.com/) solution provides the capability to ingest [Cloudflare logs](https://developers.cloudflare.com/logs/) into Microsoft Sentinel using the Codeless Connector Framework (CCF) and Azure Blob Storage. Refer to [Cloudflare documentation](https://developers.cloudflare.com/logs/about/) for more information.\n\n**Underlying Microsoft Technologies used:**\r\n\n  a. [Codeless Connector Framework](https://learn.microsoft.com/en-us/azure/sentinel/create-codeless-connector)\n\n  b. [Azure Monitor HTTP Data Collector API](https://docs.microsoft.com/azure/azure-monitor/logs/data-collector-api) (for reference, legacy support)",
  "Data Connectors": [
    "Cloudflare CCF/Data Connectors/CloudflareLog_CCF/CloudflareLog_ConnectorDefinition.json"
  ],
  "Parsers": [
    "Cloudflare CCF/Parsers/Cloudflare.yaml"
  ],
  "Workbooks": [
    "Cloudflare CCF/Workbooks/CloudflareCCF.json"
  ],
  "Hunting Queries": [
    "Cloudflare CCF/Hunting Queries/CloudflareCCFClientErrors.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFClientTlsErrors.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFFilesRequested.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFRareUAs.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFServerErrors.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFServerTlsErrors.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFTopNetworkRules.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFTopWafRules.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFUnexpectedCountries.yaml",
    "Cloudflare CCF/Hunting Queries/CloudflareCCFUnexpectedEdgeResponse.yaml"
  ],
  "Analytic Rules": [
    "Cloudflare CCF/Analytic Rules/CloudflareCCFBadClientIp.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFEmptyUA.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFMultipleErrorsSource.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFMultipleUAs.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFUnexpectedCountry.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFUnexpectedPost.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFUnexpectedRequest.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFUnexpectedUrl.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFWafThreatAllowed.yaml",
    "Cloudflare CCF/Analytic Rules/CloudflareCCFXSSProbingPattern.yaml"
  ],
  "Metadata": "SolutionMetadata.json",
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Cloudflare CCF",
  "Version": "3.0.4",
  "TemplateSpec": true,
  "Is1PConnector": false
}