{
  "Name": "UniFi Site Manager (CCF)",
  "Author": "noodlemctwoodle - ccfconnectors.county118@passmail.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/UnifiSiteManager.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The [UniFi Site Manager](https://unifi.ui.com/) solution for Microsoft Sentinel provides cloud-side telemetry ingestion via the [Site Manager API](https://developer.ui.com/site-manager-api/) for sites, devices, hosts and ISP metrics. Ships analytics rules covering ISP downtime, WAN issues, IPS/IDS posture, firmware drift, device offline events, configuration changes and security signals, plus an operations workbook for at-a-glance estate health.\n\n**Data Connector:** UniFi Site Manager (CCF) \u2014 single Connect deploys 4 polling rules with a single API key.\n\n**Underlying API tier:** the Site Manager API is available on all UniFi cloud plans. The Audit log endpoint requires Pro+; this solution does not depend on it.\n\n**Pre-requisites:** A UniFi Site Manager API key is required. Generate one at https://unifi.ui.com/api.",
  "BasePath": "C:\\GitHub\\azure-Sentinel\\Solutions\\UniFi Site Manager (CCF)",
  "Version": "3.0.0",
  "TemplateSpec": false,
  "Is1PConnector": false,
  "Data Connectors": [
    "Data Connectors/UnifiSiteManagerLogs_ccf/UnifiSiteManager_ConnectorDefinition.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/UniFiCloudConsoleSecurityFirmwareGap.yaml",
    "Analytic Rules/UniFiCloudControllerConnectionStateChange.yaml",
    "Analytic Rules/UniFiCloudDataConnectorHealth.yaml",
    "Analytic Rules/UniFiCloudDeviceOffline.yaml",
    "Analytic Rules/UniFiCloudExternalWANIPchanged.yaml",
    "Analytic Rules/UniFiCloudFirmwareUpdateAvailable.yaml",
    "Analytic Rules/UniFiCloudIPSIDSdisabledormisconfigured.yaml",
    "Analytic Rules/UniFiCloudIPSsignaturecountdropped50.yaml",
    "Analytic Rules/UniFiCloudISPDowntime.yaml",
    "Analytic Rules/UniFiCloudISPHighLatency.yaml",
    "Analytic Rules/UniFiCloudISPPacketLoss.yaml",
    "Analytic Rules/UniFiCloudISPSLABreach.yaml",
    "Analytic Rules/UniFiCloudMultipleDevicesOffline.yaml",
    "Analytic Rules/UniFiCloudNewDeviceAdopted.yaml",
    "Analytic Rules/UniFiCloudNewWAN2secondaryissuerecorded.yaml",
    "Analytic Rules/UniFiCloudNewWANissueindexrecorded.yaml",
    "Analytic Rules/UniFiCloudNewcriticalnotificationsappeared.yaml",
    "Analytic Rules/UniFiCloudPendingfirmwareupdatesoutstandingfor7d.yaml",
    "Analytic Rules/UniFiCloudSiteHealthCritical.yaml",
    "Analytic Rules/UniFiCloudSystemlogshippingdisabled.yaml",
    "Analytic Rules/UniFiCloudWANuptimebelow99.yaml",
    "Analytic Rules/UniFiCloudWiFiqualitydegradedhighTXretry.yaml"
  ],
  "Hunting Queries": [
    "Hunting Queries/UniFiCloudConsoleGroupChurn.yaml",
    "Hunting Queries/UniFiCloudDeviceFlapping.yaml",
    "Hunting Queries/UniFiCloudFirmwareDriftHotspots.yaml",
    "Hunting Queries/UniFiCloudFirmwareVersionDiversity.yaml",
    "Hunting Queries/UniFiCloudLongTailLatencyHotspots.yaml",
    "Hunting Queries/UniFiCloudOffHoursDeviceAdoption.yaml",
    "Hunting Queries/UniFiCloudPersistentWANIssues.yaml",
    "Hunting Queries/UniFiCloudWANIPGeoDeviation.yaml"
  ],
  "Workbooks": [
    "Workbooks/UnifiSiteManager.json"
  ],
  "Metadata": "SolutionMetadata.json"
}