{
  "Name": "Bitglass",
  "Author": "Microsoft - support@microsoft.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The [Bitglass](https://www.forcepoint.com/bitglass) solution provides the capability to retrieve security event logs of the Bitglass services and more events into Microsoft Sentinel through the REST API. The connector provides ability to get events which helps to examine potential security risks, analyze your team's use of collaboration, diagnose configuration problems and more.\r\n \r\n **Underlying Microsoft Technologies used:** \r\n \r\n This solution takes a dependency on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\r\n \r\n a. [Azure Monitor HTTP Data Collector API](https://docs.microsoft.com/azure/azure-monitor/logs/data-collector-api) \r\n \r\n b. [Azure Functions ](https://azure.microsoft.com/services/functions/#overview)",
  "Workbooks": [
    "Workbooks/Bitglass.json"
  ],
  "Parsers": [
    "Parsers/Bitglass.yaml"
  ],
  "Hunting Queries": [
    "Hunting Queries/BitglassApplications.yaml",
    "Hunting Queries/BitglassInsecureWebProtocol.yaml",
	"Hunting Queries/BitglassLoginFailures.yaml",
	"Hunting Queries/BitglassNewApplications.yaml",
	"Hunting Queries/BitglassNewUsers.yaml",
	"Hunting Queries/BitglassPrivilegedLoginFailures.yaml",
	"Hunting Queries/BitglassRiskyUsers.yaml",
	"Hunting Queries/BitglassTopUsersWithBlocks.yaml",
	"Hunting Queries/BitglassUncategorizedResources.yaml",
	"Hunting Queries/BitglassUserDevices.yaml"
 ],
  "Data Connectors": [
    "Data Connectors/Bitglass_API_FunctionApp.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/BitglassFilesSharedWithExternal.yaml",
    "Analytic Rules/BitglassImpossibleTravelDistance.yaml",
	"Analytic Rules/BitglassMultipleFailedLogins.yaml",
	"Analytic Rules/BitglassNewAdminUser.yaml",
	"Analytic Rules/BitglassNewDevice.yaml",
	"Analytic Rules/BitglassNewRiskyUser.yaml",
	"Analytic Rules/BitglassSmartEdgeAgentUninstall.yaml",
	"Analytic Rules/BitglassSuspiciousFileUpload.yaml",
	"Analytic Rules/BitglassUserLoginNewGeoLocation.yaml",
	"Analytic Rules/BitglassUserUAChanged.yaml"
  ],
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Bitglass",
  "Version": "3.0.0",
  "Metadata": "SolutionMetadata.json",
   "TemplateSpec": true,
  "Is1PConnector": false
}