{
  "Name": "Azure SQL Database solution for sentinel",
  "Author": "Microsoft - support@microsoft.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/AzureSQL.svg\"width=\"75px\"height=\"75px\">",
  "Description": "The [Azure SQL Database](https://azure.microsoft.com/products/azure-sql/) solution for Microsoft Sentinel enables you to stream Azure SQL database audit and diagnostic logs into Microsoft Sentinel, allowing you to continuously monitor activity in all your instances. \r\n  \r\n  **Underlying Microsoft Technologies used:** \r\n\r\n This solution takes a dependency on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\r\n\n  a. [Azure Monitor Resource Diagnostics ](https://docs.microsoft.com/azure/azure-monitor/essentials/diagnostic-settings?tabs=portal)",
  "Workbooks": [
    "Workbooks/Workbook-AzureSQLSecurity.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/Detection-ErrorsCredentialStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-ErrorsFirewallStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-ErrorsSyntaxStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-HotwordsDropStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-HotwordsExecutionStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-HotwordsFirewallRuleStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-HotwordsOLEObjectStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-HotwordsOutgoingStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-VolumeAffectedRowsStatefulAnomalyOnDatabase.yaml",
    "Analytic Rules/Detection-VolumeResponseRowsStatefulAnomalyOnDatabase.yaml"
  ],
  "Hunting Queries": [
    "Hunting Queries/HuntingQuery-AffectedRowAnomaly.yaml",
    "Hunting Queries/HuntingQuery-BooleanBlindSQLi.yaml",
    "Hunting Queries/HuntingQuery-ExecutionTimeAnomaly.yaml",
    "Hunting Queries/HuntingQuery-PrevalenceBasedQuerySizeAnomaly.yaml",
    "Hunting Queries/HuntingQuery-SuspiciousStoredProcedures.yaml",
    "Hunting Queries/HuntingQuery-TimeBasedQuerySizeAnomaly.yaml",
    "Hunting Queries/HuntingQuery-VolumeAffectedRowsStatefulAnomalyOnDatabase.yaml",
    "Hunting Queries/HuntingQuery-VolumeResponseRowsStatefulAnomalyOnDatabase.yaml"
  ],
  "Data Connectors": [
    "Data Connectors/template_AzureSql.JSON"
  ],
  "Metadata": "SolutionMetadata.json",
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Azure SQL Database solution for sentinel",
  "Version": "3.0.0",
  "TemplateSpec": true,
  "StaticDataConnectorIds": [
    "AzureSql"
  ]
}