{
  "Name": "CTERA",
  "Author": "CTERA Networks - support@ctera.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/CTERA_Logo.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The CTERA solution allows you to ingest and analyze events from CTERA Edge Filers and Portal to Microsoft Sentinel. It detects ransomware incidents and potentially attacking users, abnormal user and excessive deletions  .\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
  "Data Connectors": [
    "Data Connectors/CTERA_Data_Connector.json"
  ],
  "Workbooks": [
    "Workbooks/CTERA_Workbook.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/RansomwareUserBlocked.yaml",
    "Analytic Rules/RansomwareDetected.yaml",
    "Analytic Rules/MassDeletions.yaml",
    "Analytic Rules/MassPermissionChanges.yaml",
    "Analytic Rules/MassAccessDenied.yaml",
    "Analytic Rules/InfectedFileDetected.yaml"
  ],
  "Hunting Queries": [
    "Hunting Queries/BatchDeletions.yaml",
    "Hunting Queries/AccessDenied.yaml",
    "Hunting Queries/BatchPermissionChanges.yaml"
  ],
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\CTERA",
  "Version": "3.0.1",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": true,
  "Is1PConnector": false
}