{
	"Name": "Threat Intelligence Solution for Azure Government",
	"Author": "Microsoft - support@microsoft.com",
	"Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\"width=\"75px\" height=\"75px\">",
	"Description": "The Threat Intelligence solution contains data connectors for import of threat indicators into Microsoft Sentinel, analytic rules for matching TI data with event data, workbook, and hunting queries. Threat indicators can be malicious IP's, URL's, filehashes, domains, email addresses etc.",
	"Data Connectors": [
		"Solutions/Threat Intelligence Solution for Azure Government/Data Connectors/template_ThreatIntelligenceTaxii.json",
		"Solutions/Threat Intelligence Solution for Azure Government/Data Connectors/template_ThreatIntelligenceUploadIndicators_ForGov.json",
		"Solutions/Threat Intelligence Solution for Azure Government/Data Connectors/template_PremiumMicrosoftDefenderThreatIntelligence.json",
		"Solutions/Threat Intelligence Solution for Azure Government/Data Connectors/template_MicrosoftDefenderThreatIntelligence.json"
	],
	"Workbooks": [
		"Solutions/Threat Intelligence Solution for Azure Government/Workbooks/ThreatIntelligence.json"
	],
	"Hunting Queries": [
		"Solutions/Threat Intelligence Solution for Azure Government/Hunting Queries/FileEntity_OfficeActivity.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Hunting Queries/FileEntity_SecurityEvent.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Hunting Queries/FileEntity_Syslog.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Hunting Queries/FileEntity_VMConnection.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Hunting Queries/FileEntity_WireData.yaml"
	],
	"Analytic Rules": [
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/DomainEntity_CommonSecurityLog.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/DomainEntity_DnsEvents.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/DomainEntity_imWebSession.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/DomainEntity_PaloAlto.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/DomainEntity_SecurityAlert.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/DomainEntity_Syslog.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/EmailEntity_AzureActivity.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/EmailEntity_OfficeActivity.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/EmailEntity_PaloAlto.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/EmailEntity_SecurityAlert.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/EmailEntity_SecurityEvent.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/EmailEntity_SigninLogs.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/FileHashEntity_CommonSecurityLog.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/FileHashEntity_SecurityEvent.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_AppServiceHTTPLogs.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_AWSCloudTrail.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_AzureActivity.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_AzureFirewall.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_AzureKeyVault.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_AzureNetworkAnalytics.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_AzureSQL.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_CustomSecurityLog.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_DnsEvents.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_imWebSession.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_OfficeActivity.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPentity_SigninLogs.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_VMConnection.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_W3CIISLog.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/URLEntity_AuditLogs.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/URLEntity_OfficeActivity.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/URLEntity_PaloAlto.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/URLEntity_SecurityAlerts.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/URLEntity_Syslog.yaml",
		"Solutions/Threat Intelligence Solution for Azure Government/Analytic Rules/IPEntity_DuoSecurity.yaml"
	],
	"BasePath": "C:\\GitHub\\Azure-Sentinel",
	"Version": "3.0.5",
	"Metadata": "SolutionMetadata.json",
	"TemplateSpec": true,
	"StaticDataConnectorIds": [
		"ThreatIntelligenceTaxii",
		"MicrosoftDefenderThreatIntelligence",
		"PremiumMicrosoftDefenderForThreatIntelligence"
	]
}