{
  "version": "Notebook/1.0",
  "items": [
    {
      "type": 1,
      "content": {
        "json": "# Gigamon AMX Dashboard \n---\n\n This dashboard provides deep observability into all traffic across Organisation's cloud, virtual and physical infrastructure."
      },
      "name": "text - 2"
    },
    {
      "type": 12,
      "content": {
        "version": "NotebookGroup/1.0",
        "groupType": "editable",
        "items": [
          {
            "type": 1,
            "content": {
              "json": "## Network Traffic Summary\r\nThe following charts summarize the information about network traffic."
            },
            "name": "text - Summary"
          },
          {
            "type": 1,
            "content": {
              "json": "### Total Application Mix"
            },
            "customWidth": "30",
            "name": "text - Keys"
          },
          {
            "type": 1,
            "content": {
              "json": "### P2P Apps seen in the network"
            },
            "customWidth": "30",
            "name": "text - Identities"
          },
          { 
            "type": 1,
            "content": {
              "json": "### Presence of Cryptomining Activity"
            },
            "customWidth": "30",
            "name": "text - Libraries"
          },
          {
            "type": 3,
            "content": {
              "version": "KqlItem/1.0",
              "query": "GigamonV2_CL \r\n | summarize c=count() by app_name_s | where not(app_name_s has_any(\"Classification-unknown\", \"Unknown udp\", \"Unknown tcp\")) | sort by c | limit 100;",
              "size": 3,
              "queryType": 0,
              "resourceType": "microsoft.operationalinsights/workspaces",
              "visualization": "piechart",
              "chartSettings": {
                "seriesLabelSettings": [
                  {
                    "seriesName": "icmp",
                    "label": "icmp",
                    "color": "green"
                  },
                  {
                    "seriesName": "dtls",
                    "label": "Medium dtls",
                    "color": "orange"
                  },
                  {
                    "seriesName": "krb5",
                    "label": "krb5",
                    "color": "redBright"
                  },
                  {
                    "seriesName": "https",
                    "label": "https",
                    "color": "blue"
                  }
                ]
              }
            },
            "customWidth": "30",
            "name": "query - 1"
          },
          {
            "type": 3,
            "content": {
              "version": "KqlItem/1.0",
              "query": "GigamonV2_CL \r\n| summarize c=count() by app_name_s | where (app_name_s has_any(\"bittorrent\", \"edonkey\", \"slsk\", \"gnutella\"))| sort by c | limit 100;",
              "size": 3,
              "queryType": 0,
              "resourceType": "microsoft.operationalinsights/workspaces",
              "visualization": "piechart",
              "chartSettings": {
                "seriesLabelSettings": [
                  {
                    "seriesName": "Low",
                    "label": "Low Severity",
                    "color": "green"
                  },
                  {
                    "seriesName": "Medium",
                    "label": "Medium Serverity",
                    "color": "orange"
                  },
                  {
                    "seriesName": "High",
                    "label": "High Severity",
                    "color": "redBright"
                  },
                  {
                    "seriesName": "Not Defined",
                    "color": "blue"
                  },
                  {
                    "seriesName": "bittorrent",
                    "label": "bittorrent",
                    "color": "green"
                  },
                  {
                    "seriesName": "edonkey",
                    "label": "edonkey",
                    "color": "orange"
                  },
                  {
                    "seriesName": "slsk",
                    "label": "slsk",
                    "color": "redBright"
                  },
                  {
                    "seriesName": "gnutella",
                    "label": "gnutella",
                    "color": "redBright"
                  }
                ]
              }
            },
            "customWidth": "33",
            "name": "query - 1 - Copy"
          },
          {
            "type": 3,
            "content": {
              "version": "KqlItem/1.0",
              "query": "GigamonV2_CL \r\n| summarize c=count() by app_name_s | where (app_name_s has_any(\"bitcoin\", \"monero\", \"ethereum\", \"miner gate\")) | sort by c | limit 100;",
              "size": 3,
              "queryType": 0,
              "resourceType": "microsoft.operationalinsights/workspaces",
              "visualization": "piechart",
              "chartSettings": {
                "seriesLabelSettings": [
                  {
                    "seriesName": "Low",
                    "label": "Low Severity",
                    "color": "green"
                  },
                  {
                    "seriesName": "Medium",
                    "label": "Medium Serverity",
                    "color": "orange"
                  },
                  {
                    "seriesName": "High",
                    "label": "High Severity",
                    "color": "redBright"
                  },
                  {
                    "seriesName": "Not Defined",
                    "color": "blue"
                  },
                  {
                    "seriesName": "bitcoin",
                    "color": "orange"
                  },
                  {
                    "seriesName": "monero",
                    "color": "green"
                  },
                  {
                    "seriesName": "ethereum",
                    "color": "redBright"
                  },
                  {
                    "seriesName": "miner gate",
                    "color": "blue"
                  }
                ]
              }
            },
            "customWidth": "33",
            "name": "query - 1 - Copy - Copy"
          },
          {
            "type": 1,
            "content": {
              "json": "### Presence of IoT Traffic"
            },
            "customWidth": "30",
            "name": "text - CryptoState"
          },
          {
            "type": 1,
            "content": {
              "json": "### Info on Expired TLS Certificates still being used"
            },
            "customWidth": "70",
            "name": "text - QuantumState"
          },
          {
            "type": 3,
            "content": {
              "version": "KqlItem/1.0",
              "query": "GigamonV2_CL \r\n | summarize c=count() by app_name_s | where (app_name_s has_any(\"iec104\", \"mqtt\", \"coap\")) | sort by c | limit 100;",
              "size": 3,
              "queryType": 0,
              "resourceType": "microsoft.operationalinsights/workspaces",
              "visualization": "piechart",
              "chartSettings": {
                "seriesLabelSettings": [
                  {
                    "seriesName": "Low",
                    "label": "Low Severity",
                    "color": "green"
                  },
                  {
                    "seriesName": "Medium",
                    "label": "Medium Serverity",
                    "color": "orange"
                  },
                  {
                    "seriesName": "High",
                    "label": "High Severity",
                    "color": "redBright"
                  },
                  {
                    "seriesName": "Not Defined",
                    "color": "blue"
                  },
                  {
                    "seriesName": "iec104",
                    "color": "orange"
                  },
                  {
                    "seriesName": "mqtt",
                    "color": "green"
                  },
                  {
                    "seriesName": "coap",
                    "color": "redBright"
                  }
                ]
              }
            },
            "customWidth": "30",
            "name": "Crypto - Classical"
          },
          {
            "type": 3,
            "content": {
              "version": "KqlItem/1.0",
              "query": "GigamonV2_CL \r\n| where isnotempty(app_name_s) and isnotempty(ssl_issuer_s) and isnotempty(ssl_common_name_s) and isnotempty(ssl_validity_not_after_s) | summarize count () by start_time_s,app_name_s,src_ip_s,dst_ip_s,ssl_issuer_s,ssl_common_name_s,ssl_validity_not_after_s | sort by app_name_s; ",
              "size": 3,
              "queryType": 0,
              "resourceType": "microsoft.operationalinsights/workspaces",
              "visualization": "piechart",
              "chartSettings": {
                "seriesLabelSettings": [
                  {
                    "seriesName": "icmp",
                    "label": "icmp",
                    "color": "green"
                  },
                  {
                    "seriesName": "dtls",
                    "label": "Medium dtls",
                    "color": "orange"
                  },
                  {
                    "seriesName": "krb5",
                    "label": "krb5",
                    "color": "redBright"
                  },
                  {
                    "seriesName": "https",
                    "label": "https",
                    "color": "blue"
                  }
                ]
              }
            },
            "customWidth": "70",
            "name": "PQC Chart"
          },
          {
            "type": 12,
            "content": {
              "version": "NotebookGroup/1.0",
              "groupType": "editable",
              "items": []
            },
            "name": "group - 4"
          }
        ]
      },
      "name": "group - 3"
    }
  ],
  "fallbackResourceIds": []
}