{
  "Name": "SOC Prime CCF",
  "Author": "SOC Prime - support@socprime.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/SOCPrime_Logo.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The [SOC Prime Audit Logs](https://tdm.socprime.com/login) data connector allows ingesting logs from the SOC Prime Platform API into Microsoft Sentinel. The data connector is built on Microsoft Sentinel Codeless Connector Platform. It uses the SOC Prime Platform API to fetch SOC Prime platform audit logs and it supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parses the received security data into a custom table, thus resulting in better performance.",
  "Data Connectors": [
    "Data Connectors/SOCPrime_ccp/SOCPrime_DataConnectorDefinition.json"
    ],
  "Analytic Rules": [
    "Solutions/SOC Prime CCF/Analytic Rules/SOCPrimeDeletedCustomFieldMappingProfile.yaml",
    "Solutions/SOC Prime CCF/Analytic Rules/SOCPrimeDeletedTenant.yaml",
    "Solutions/SOC Prime CCF/Analytic Rules/SuccessLoginFromBadIp.yaml"
  ],
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\SOC Prime CCF",
  "Version": "3.0.1",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": false,
  "Is1PConnector": false
}