{
  "Name": "eDCRule",
  "Author": "eDC ICE223 - ice223@acercsi.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/edc-logo-75px.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The eDCRule solution for Microsoft Sentinel installs custom analytic rule templates.",
  "WorkbookBladeDescription": "This solution does not include workbooks.",
  "AnalyticalRuleBladeDescription": "This solution installs analytic rule templates. After installing the solution, create and enable analytic rules in the Manage solution view.",
  "HuntingQueryBladeDescription": "This solution does not include hunting queries.",
  "PlaybooksBladeDescription": "This solution does not include playbook templates.",
  "Data Connectors": [],
  "Parsers": [],
  "Hunting Queries": [],
  "Analytic Rules": [
    "Analytic Rules/[AzureSubscription] Suspicious Azure VM Run Command Execution Detected.yaml",
    "Analytic Rules/[Entra ID] Application Assigned Administrator Permissions Immediately After Obtaining Role Management Permissions.yaml",
    "Analytic Rules/[Entra ID] Application Granted Administrative Permission to Assign Microsoft Entra ID Roles.yaml",
    "Analytic Rules/[Entra ID] Authentication Method Changed for Privileged Account.yaml",
    "Analytic Rules/[Entra ID] Domain Federation Trust Settings Modified.yaml",
    "Analytic Rules/[Entra ID] Mass Privileged Role Change Activity Detected.yaml",
    "Analytic Rules/[Entra ID] Privilege Elevation Request Denied.yaml",
    "Analytic Rules/[Entra ID] Privileged Role Assigned to a New User.yaml",
    "Analytic Rules/[Entra ID] Privileged Role Assigned to User.yaml",
    "Analytic Rules/[Entra ID] Suspicious Continuous OAuth Token Usage.yaml"
  ],
  "SummaryRules": [],
  "Workbooks": [],
  "Playbooks": [],
  "WorkbookDescription": [],
  "PlaybookDescription": [],
  "Watchlists": [],
  "WatchlistDescription": [],
  "dependentDomainSolutionIds": [],
  "BasePath": "Solutions/eDCRule",
  "Version": "3.0.0",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": false,
  "Is1PConnector": false,
  "StaticDataConnectorIds": []
}