tests/fixtures/collector-golden/Security/DefenderAlerts.json
|
{
"SchemaVersion": 1, "Category": "Security", "Name": "DefenderAlerts", "FixturePath": "tests/fixtures/collector-equivalence/Security.json", "FixtureSha256": "1a8d61beaf32287046bb34aaff589557490302c8d0d5d4837ec09a843d44ac13", "Rows": [ "Affected Resources=s:N/A|Alert Name=<null>|Alert Type=<null>|Confidence Level=s:res-value|Description=s:See Azure Portal|ID=s:res-value|Intent=s:Unknown|Portal Link=s:https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0|Remediation Steps=s:See Azure Portal for recommended actions|Resource Group=s:N/A|Resource U=j:1|Severity=<null>|Status=<null>|Subscription=s:sub-fixture-01|Tactics (MITRE ATT&CK)=s:N/A|Time Generated (UTC)=s:N/A", "Affected Resources=s:N/A|Alert Name=<null>|Alert Type=<null>|Confidence Level=s:res-value|Description=s:See Azure Portal|ID=s:res-value|Intent=s:Unknown|Portal Link=s:https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0|Remediation Steps=s:See Azure Portal for recommended actions|Resource Group=s:N/A|Resource U=j:1|Severity=<null>|Status=<null>|Subscription=s:sub-fixture-01|Tactics (MITRE ATT&CK)=s:N/A|Time Generated (UTC)=s:N/A", "Affected Resources=s:N/A|Alert Name=<null>|Alert Type=<null>|Confidence Level=s:res-value|Description=s:See Azure Portal|ID=s:res-value|Intent=s:Unknown|Portal Link=s:https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0|Remediation Steps=s:See Azure Portal for recommended actions|Resource Group=s:N/A|Resource U=j:1|Severity=<null>|Status=<null>|Subscription=s:sub-fixture-01|Tactics (MITRE ATT&CK)=s:N/A|Time Generated (UTC)=s:N/A", "Affected Resources=s:N/A|Alert Name=<null>|Alert Type=<null>|Confidence Level=s:res-value|Description=s:See Azure Portal|ID=s:res-value|Intent=s:Unknown|Portal Link=s:https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0|Remediation Steps=s:See Azure Portal for recommended actions|Resource Group=s:N/A|Resource U=j:1|Severity=<null>|Status=<null>|Subscription=<null>|Tactics (MITRE ATT&CK)=s:N/A|Time Generated (UTC)=s:N/A", "Affected Resources=s:N/A|Alert Name=<null>|Alert Type=<null>|Confidence Level=s:res-value|Description=s:See Azure Portal|ID=s:res-value|Intent=s:Unknown|Portal Link=s:https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0|Remediation Steps=s:See Azure Portal for recommended actions|Resource Group=s:N/A|Resource U=j:1|Severity=<null>|Status=<null>|Subscription=s:sub-fixture-01|Tactics (MITRE ATT&CK)=s:N/A|Time Generated (UTC)=s:N/A", "Affected Resources=s:N/A|Alert Name=<null>|Alert Type=<null>|Confidence Level=s:res-value|Description=s:See Azure Portal|ID=s:res-value|Intent=s:Unknown|Portal Link=s:https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0|Remediation Steps=s:See Azure Portal for recommended actions|Resource Group=s:N/A|Resource U=j:1|Severity=<null>|Status=<null>|Subscription=s:sub-fixture-01|Tactics (MITRE ATT&CK)=s:N/A|Time Generated (UTC)=s:N/A" ], "Workbook": { "WithoutTags": "Subscription\tAlert Name\tAlert Type\tSeverity\tStatus\tTime Generated (UTC)\tResource Group\tAffected Resources\tDescription\tIntent\tTactics (MITRE ATT&CK)\tRemediation Steps\tConfidence Level\tPortal Link\tResource U\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\n\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1", "WithTags": "Subscription\tAlert Name\tAlert Type\tSeverity\tStatus\tTime Generated (UTC)\tResource Group\tAffected Resources\tDescription\tIntent\tTactics (MITRE ATT&CK)\tRemediation Steps\tConfidence Level\tPortal Link\tResource U\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\n\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1\nsub-fixture-01\t\t\t\t\tN/A\tN/A\tN/A\tSee Azure Portal\tUnknown\tN/A\tSee Azure Portal for recommended actions\tres-value\thttps://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0\t1" } } |