{
    "Name": "IllumioSaaS",
    "Author": "app-integrations@illumio.com",
    "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/IllumioLogo.svg\" width=\"75px\" height=\"75px\">",
    "Description": "**1. Azure Function App: **\n\n[IllumioSaaS](https://www.illumio.com/) solution provides ability to ingest auditable and flow events from AWS S3 bucket. \n\n **2. Codeless Connector Framework (CCF): ** \n\n [IllumioSaaS](https://www.illumio.com/) CCF solution provides ability to ingest flow events from AWS S3 bucket.",
    "Data Connectors": [        
        "Data Connectors/IllumioSaaS_FunctionApp.json"
    ],
    "Workbooks": [
        "Workbooks/IllumioAuditableEvents.json",
        "Workbooks/IllumioFlowData.json",
        "Workbooks/IllumioWorkloadsStats.json",
        "Workbooks/IllumioOnPremHealth.json"
    ],
    "Analytic Rules": [
        "Analytic Rules/Illumio_VEN_Firewall_Tampering_Detection_Query.yaml",
        "Analytic Rules/Illumio_VEN_Enforcement_Change_Detection_Query.yaml",
        "Analytic Rules/Illumio_VEN_Offline_Detection_Query.yaml",
        "Analytic Rules/Illumio_VEN_Clone_Detection_Query.yaml",
        "Analytic Rules/Illumio_VEN_Deactivated_Query.yaml",
        "Analytic Rules/Illumio_VEN_Suspend_Query.yaml"
    ],
    "Playbooks": [
        "Playbooks/CustomConnector/IllumioSaaS_FunctionAppConnector/azuredeploy.json",
        "Playbooks/Illumio-Get-Ven-Details/azuredeploy.json",
        "Playbooks/Illumio-Port-Blocking-Switch/azuredeploy.json",
        "Playbooks/Illumio-Quarantine-Workload/azuredeploy.json"
    ],
    "Parsers": [
        "Parsers/IllumioSyslogAuditEvents.yaml",
        "Parsers/IllumioSyslogNetworkTrafficEvents.yaml"
    ],
    "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\IllumioSaaS",
    "Version": "3.4.0",
    "Metadata": "SolutionMetadata.json",
    "TemplateSpec": true,
    "Is1Pconnector": false
}