{
  "Name": "Alsid For AD",
  "Author": "Alsid",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Alsid.svg\" width=\"75px\" height=\"75px\">",
  "Description": "Alsid for Active Directory connector allows to export Alsid Indicators of Exposures, trailflow and Indicators of Attacks logs to Microsoft Sentinel in real time.",
  "Data Connectors": [
    "Data Connectors/AlsidForAD.json"
  ],
  "Parsers": [
    "Parsers/afad_parser.kql.txt"
  ],
  "Workbooks": [
  "Workbooks/AlsidIoA.json",
  "Workbooks/AlsidIoE.json"
  ],
  
  "Analytic Rules": [
    "Analytic Rules/ADAttacksPathways.yaml",
	"Analytic Rules/DCShadow.yaml",
	"Analytic Rules/DCSync.yaml",
	"Analytic Rules/GoldenTicket.yaml",
	"Analytic Rules/IndicatorsOfAttack.yaml",
	"Analytic Rules/IndicatorsOfExposures.yaml",
	"Analytic Rules/LSASSMemory.yaml",
	"Analytic Rules/PasswordGuessing.yaml",
	"Analytic Rules/PasswordIssues.yaml",
	"Analytic Rules/PasswordSpraying.yaml",
	"Analytic Rules/PrivilegedAccountIssues.yaml",
	"Analytic Rules/UserAccountIssues.yaml"
	],
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Alsid For AD",
  "Version": "2.0.0",
  "Metadata": "SolutionMetadata.json",
 "TemplateSpec": true,
  "Is1PConnector": false
}