{
  "Name": "PaloAltoPrismaCloud",
  "Author": "Microsoft - support@microsoft.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Solutions/PaloAltoPrismaCloud/logo/Palo-alto-logo.png\" width=\"75px\" height=\"75px\">",
  "Description": "The [Palo Alto Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud) CSPM solution provides the capability to ingest Prisma Cloud CSPM alerts and audit logs into Microsoft Sentinel using the Prisma Cloud CSPM API. Refer to Prisma Cloud CSPM API documentation for more information. \r \n **Underlying Microsoft Technologies used:** \r \n This solution takes a dependency on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\r \n • [Azure Monitor HTTP Data Collector API](https://docs.microsoft.com/azure/azure-monitor/logs/data-collector-api) \r \n\n",
  "Workbooks": [
    "Workbooks/PaloAltoPrismaCloudOverview.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/PaloAltoPrismaCloudAclAccessKeysNotRotated.yaml",
    "Analytic Rules/PaloAltoPrismaCloudAclAllowAllOut.yaml",
    "Analytic Rules/PaloAltoPrismaCloudAclAllowInToAdminPort.yaml",
    "Analytic Rules/PaloAltoPrismaCloudAclInAllowAll.yaml",
    "Analytic Rules/PaloAltoPrismaCloudAnomalousApiKeyActivity.yaml",
    "Analytic Rules/PaloAltoPrismaCloudHighRiskScoreAlert.yaml",
    "Analytic Rules/PaloAltoPrismaCloudHighSeverityAlertOpenedForXDays.yaml",
    "Analytic Rules/PaloAltoPrismaCloudIamAdminGroup.yaml",
    "Analytic Rules/PaloAltoPrismaCloudInactiveUser.yaml",
    "Analytic Rules/PaloAltoPrismaCloudMaxRiskScoreAlert.yaml",
    "Analytic Rules/PaloAltoPrismaCloudMultipleFailedLoginsUser.yaml"
  ],
  "Parsers": [
    "Parsers/PaloAltoPrismaCloud.yaml"
  ],
  "Hunting Queries": [
    "Hunting Queries/PaloAltoPrismaCloudAccessKeysUsed.yaml",
    "Hunting Queries/PaloAltoPrismaCloudFailedLoginsSources.yaml",
    "Hunting Queries/PaloAltoPrismaCloudFailedLoginsUsers.yaml",
    "Hunting Queries/PaloAltoPrismaCloudHighRiskScoreOpenedAlerts.yaml",
    "Hunting Queries/PaloAltoPrismaCloudHighSeverityAlerts.yaml",
    "Hunting Queries/PaloAltoPrismaCloudNewUsers.yaml",
    "Hunting Queries/PaloAltoPrismaCloudOpenedAlerts.yaml",
    "Hunting Queries/PaloAltoPrismaCloudTopResources.yaml",
    "Hunting Queries/PaloAltoPrismaCloudUpdatedResources.yaml"
  ],
  "Data Connectors": [
    "Data Connectors/PrismaCloudCSPMLog_CCF/PaloAltoPrismaCloudCSPMLog_ConnectorDefinition.json"
  ],
  "Playbooks": [
    "Playbooks/CustomConnector/PrismaCloudCSPMCustomConnector/azuredeploy.json",
    "Playbooks/PrismaCloudCSPMPlaybooks/PrismaCloudCSPM-Enrichment/azuredeploy.json",
    "Playbooks/PrismaCloudCSPMPlaybooks/PrismaCloudCSPM-Remediation/azuredeploy.json"
  ],
  "Metadata": "SolutionMetadata.json",
  "BasePath": "C:\\GitHub\\Azure-Sentinel",
  "Version": "3.0.2",
  "TemplateSpec": true,
  "Is1Pconnector": false
}