cloudflare/Azure-Sentinel
Publicmirrored fromhttps://github.com/cloudflare/Azure-Sentinel
Dashboards/Attivo.json
801lines · modecode
7 years ago
| 1 | { |
| 2 | "properties": { |
| 3 | "lenses": { |
| 4 | "0": { |
| 5 | "order": 0, |
| 6 | "parts": { |
| 7 | "0": { |
| 8 | "position": { |
| 9 | "x": 1, |
| 10 | "y": 0, |
| 11 | "colSpan": 14, |
| 12 | "rowSpan": 1 |
| 13 | }, |
| 14 | "metadata": { |
| 15 | "inputs": [], |
| 16 | "type": "Extension/HubsExtension/PartType/MarkdownPart", |
| 17 | "settings": { |
| 18 | "content": { |
| 19 | "settings": { |
| 20 | "content": "<div style='font-size:300%;'>Attivo Networks – Deception for Threat Detection and Response</div>", |
| 21 | "title": "", |
| 22 | "subtitle": "" |
| 23 | } |
| 24 | } |
| 25 | } |
| 26 | } |
| 27 | }, |
| 28 | "1": { |
| 29 | "position": { |
| 30 | "x": 0, |
| 31 | "y": 1, |
| 32 | "colSpan": 5, |
| 33 | "rowSpan": 4 |
| 34 | }, |
| 35 | "metadata": { |
| 36 | "inputs": [ |
| 37 | { |
| 38 | "name": "ComponentId", |
| 39 | "value": { |
| 40 | "SubscriptionId": "{Subscription_ID}", |
| 41 | "ResourceGroup": "{Resource_Group}", |
| 42 | "Name": "{Workspace_Name}", |
| 43 | "ResourceId": "/subscriptions/{Subscription_ID}/resourcegroups/{Resource_Group}/providers/microsoft.operationalinsights/workspaces/{Workspace_Name}" |
| 44 | } |
| 45 | }, |
| 46 | { |
| 47 | "name": "Query", |
| 48 | "value": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| summarize Count = count() by LogSeverity \n| render piechart \n" |
| 49 | }, |
| 50 | { |
| 51 | "name": "TimeRange", |
| 52 | "value": "P1D" |
| 53 | }, |
| 54 | { |
| 55 | "name": "Dimensions", |
| 56 | "value": { |
| 57 | "xAxis": { |
| 58 | "name": "LogSeverity", |
| 59 | "type": "String" |
| 60 | }, |
| 61 | "yAxis": [ |
| 62 | { |
| 63 | "name": "Count", |
| 64 | "type": "Int64" |
| 65 | } |
| 66 | ], |
| 67 | "splitBy": [], |
| 68 | "aggregation": "Sum" |
| 69 | } |
| 70 | }, |
| 71 | { |
| 72 | "name": "Version", |
| 73 | "value": "1.0" |
| 74 | }, |
| 75 | { |
| 76 | "name": "DashboardId", |
| 77 | "value": "/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503" |
| 78 | }, |
| 79 | { |
| 80 | "name": "PartId", |
| 81 | "value": "07265533-d8c4-4a6a-b322-6e148d6cbf44" |
| 82 | }, |
| 83 | { |
| 84 | "name": "PartTitle", |
| 85 | "value": "Analytics" |
| 86 | }, |
| 87 | { |
| 88 | "name": "PartSubTitle", |
| 89 | "value": "phil-laworkspace" |
| 90 | }, |
| 91 | { |
| 92 | "name": "resourceTypeMode", |
| 93 | "value": "workspace" |
| 94 | }, |
| 95 | { |
| 96 | "name": "ControlType", |
| 97 | "value": "AnalyticsDonut" |
| 98 | }, |
| 99 | { |
| 100 | "name": "SpecificChart", |
| 101 | "isOptional": true |
| 102 | } |
| 103 | ], |
| 104 | "type": "Extension/AppInsightsExtension/PartType/AnalyticsPart", |
| 105 | "settings": { |
| 106 | "content": { |
| 107 | "PartTitle": "Alert Severity", |
| 108 | "PartSubTitle": "event count" |
| 109 | } |
| 110 | }, |
| 111 | "asset": { |
| 112 | "idInputName": "ComponentId", |
| 113 | "type": "ApplicationInsights" |
| 114 | } |
| 115 | } |
| 116 | }, |
| 117 | "2": { |
| 118 | "position": { |
| 119 | "x": 5, |
| 120 | "y": 1, |
| 121 | "colSpan": 5, |
| 122 | "rowSpan": 4 |
| 123 | }, |
| 124 | "metadata": { |
| 125 | "inputs": [ |
| 126 | { |
| 127 | "name": "ComponentId", |
| 128 | "value": { |
| 129 | "SubscriptionId": "{Subscription_ID}", |
| 130 | "ResourceGroup": "{Resource_Group}", |
| 131 | "Name": "{Workspace_Name}", |
| 132 | "ResourceId": "/subscriptions/{Subscription_ID}/resourcegroups/{Resource_Group}/providers/microsoft.operationalinsights/workspaces/{Workspace_Name}" |
| 133 | } |
| 134 | }, |
| 135 | { |
| 136 | "name": "Query", |
| 137 | "value": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| summarize Count = count() by Phase=extract(\"cat=([a-zA-Z]+)\", 1, AdditionalExtensions)\n| render piechart \n" |
| 138 | }, |
| 139 | { |
| 140 | "name": "TimeRange", |
| 141 | "value": "P1D" |
| 142 | }, |
| 143 | { |
| 144 | "name": "Dimensions", |
| 145 | "value": { |
| 146 | "xAxis": { |
| 147 | "name": "Phase", |
| 148 | "type": "String" |
| 149 | }, |
| 150 | "yAxis": [ |
| 151 | { |
| 152 | "name": "Count", |
| 153 | "type": "Int64" |
| 154 | } |
| 155 | ], |
| 156 | "splitBy": [], |
| 157 | "aggregation": "Sum" |
| 158 | } |
| 159 | }, |
| 160 | { |
| 161 | "name": "Version", |
| 162 | "value": "1.0" |
| 163 | }, |
| 164 | { |
| 165 | "name": "DashboardId", |
| 166 | "value": "/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503" |
| 167 | }, |
| 168 | { |
| 169 | "name": "PartId", |
| 170 | "value": "31f319b0-3208-4846-8374-f6f65d7086b5" |
| 171 | }, |
| 172 | { |
| 173 | "name": "PartTitle", |
| 174 | "value": "Analytics" |
| 175 | }, |
| 176 | { |
| 177 | "name": "PartSubTitle", |
| 178 | "value": "phil-laworkspace" |
| 179 | }, |
| 180 | { |
| 181 | "name": "resourceTypeMode", |
| 182 | "value": "workspace" |
| 183 | }, |
| 184 | { |
| 185 | "name": "ControlType", |
| 186 | "value": "AnalyticsDonut" |
| 187 | }, |
| 188 | { |
| 189 | "name": "SpecificChart", |
| 190 | "isOptional": true |
| 191 | } |
| 192 | ], |
| 193 | "type": "Extension/AppInsightsExtension/PartType/AnalyticsPart", |
| 194 | "settings": { |
| 195 | "content": { |
| 196 | "PartTitle": "Attack Phases", |
| 197 | "PartSubTitle": "event count", |
| 198 | "Query": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| summarize Count = count() by Phase=extract(\"cat=([a-zA-Z&]+)\", 1, AdditionalExtensions)\n| render piechart \n" |
| 199 | } |
| 200 | }, |
| 201 | "asset": { |
| 202 | "idInputName": "ComponentId", |
| 203 | "type": "ApplicationInsights" |
| 204 | } |
| 205 | } |
| 206 | }, |
| 207 | "3": { |
| 208 | "position": { |
| 209 | "x": 10, |
| 210 | "y": 1, |
| 211 | "colSpan": 5, |
| 212 | "rowSpan": 4 |
| 213 | }, |
| 214 | "metadata": { |
| 215 | "inputs": [ |
| 216 | { |
| 217 | "name": "ComponentId", |
| 218 | "value": { |
| 219 | "SubscriptionId": "{Subscription_ID}", |
| 220 | "ResourceGroup": "{Resource_Group}", |
| 221 | "Name": "{Workspace_Name}", |
| 222 | "ResourceId": "/subscriptions/{Subscription_ID}/resourcegroups/{Resource_Group}/providers/microsoft.operationalinsights/workspaces/{Workspace_Name}" |
| 223 | } |
| 224 | }, |
| 225 | { |
| 226 | "name": "Query", |
| 227 | "value": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\" \n| summarize Count = count() by DeviceAddress \n| sort by Count\n| render barchart \n" |
| 228 | }, |
| 229 | { |
| 230 | "name": "TimeRange", |
| 231 | "value": "P7D" |
| 232 | }, |
| 233 | { |
| 234 | "name": "Dimensions", |
| 235 | "value": { |
| 236 | "xAxis": { |
| 237 | "name": "DeviceAddress", |
| 238 | "type": "String" |
| 239 | }, |
| 240 | "yAxis": [ |
| 241 | { |
| 242 | "name": "Count", |
| 243 | "type": "Int64" |
| 244 | } |
| 245 | ], |
| 246 | "splitBy": [], |
| 247 | "aggregation": "Sum" |
| 248 | } |
| 249 | }, |
| 250 | { |
| 251 | "name": "Version", |
| 252 | "value": "1.0" |
| 253 | }, |
| 254 | { |
| 255 | "name": "DashboardId", |
| 256 | "value": "/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503" |
| 257 | }, |
| 258 | { |
| 259 | "name": "PartId", |
| 260 | "value": "715f7038-804f-45c7-9fee-bab88e993dbb" |
| 261 | }, |
| 262 | { |
| 263 | "name": "PartTitle", |
| 264 | "value": "Analytics" |
| 265 | }, |
| 266 | { |
| 267 | "name": "PartSubTitle", |
| 268 | "value": "phil-laworkspace" |
| 269 | }, |
| 270 | { |
| 271 | "name": "resourceTypeMode", |
| 272 | "value": "workspace" |
| 273 | }, |
| 274 | { |
| 275 | "name": "ControlType", |
| 276 | "value": "AnalyticsChart" |
| 277 | }, |
| 278 | { |
| 279 | "name": "SpecificChart", |
| 280 | "value": "Bar" |
| 281 | } |
| 282 | ], |
| 283 | "type": "Extension/AppInsightsExtension/PartType/AnalyticsPart", |
| 284 | "settings": { |
| 285 | "content": { |
| 286 | "PartTitle": "BOTSinks Reporting In", |
| 287 | "PartSubTitle": "event count" |
| 288 | } |
| 289 | }, |
| 290 | "asset": { |
| 291 | "idInputName": "ComponentId", |
| 292 | "type": "ApplicationInsights" |
| 293 | } |
| 294 | } |
| 295 | }, |
| 296 | "4": { |
| 297 | "position": { |
| 298 | "x": 0, |
| 299 | "y": 5, |
| 300 | "colSpan": 6, |
| 301 | "rowSpan": 4 |
| 302 | }, |
| 303 | "metadata": { |
| 304 | "inputs": [ |
| 305 | { |
| 306 | "name": "ComponentId", |
| 307 | "value": { |
| 308 | "SubscriptionId": "{Subscription_ID}", |
| 309 | "ResourceGroup": "{Resource_Group}", |
| 310 | "Name": "{Workspace_Name}", |
| 311 | "ResourceId": "/subscriptions/{Subscription_ID}/resourcegroups/{Resource_Group}/providers/microsoft.operationalinsights/workspaces/{Workspace_Name}" |
| 312 | } |
| 313 | }, |
| 314 | { |
| 315 | "name": "Query", |
| 316 | "value": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| summarize Count = count() by SourceIP \n| sort by Count \n| render barchart\n" |
| 317 | }, |
| 318 | { |
| 319 | "name": "TimeRange", |
| 320 | "value": "P1D" |
| 321 | }, |
| 322 | { |
| 323 | "name": "Dimensions", |
| 324 | "value": { |
| 325 | "xAxis": { |
| 326 | "name": "SourceIP", |
| 327 | "type": "String" |
| 328 | }, |
| 329 | "yAxis": [ |
| 330 | { |
| 331 | "name": "Count", |
| 332 | "type": "Int64" |
| 333 | } |
| 334 | ], |
| 335 | "splitBy": [], |
| 336 | "aggregation": "Sum" |
| 337 | } |
| 338 | }, |
| 339 | { |
| 340 | "name": "Version", |
| 341 | "value": "1.0" |
| 342 | }, |
| 343 | { |
| 344 | "name": "DashboardId", |
| 345 | "value": "/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503" |
| 346 | }, |
| 347 | { |
| 348 | "name": "PartId", |
| 349 | "value": "9fafca5e-6164-473a-8391-cb6f875fefe7" |
| 350 | }, |
| 351 | { |
| 352 | "name": "PartTitle", |
| 353 | "value": "Analytics" |
| 354 | }, |
| 355 | { |
| 356 | "name": "PartSubTitle", |
| 357 | "value": "phil-laworkspace" |
| 358 | }, |
| 359 | { |
| 360 | "name": "resourceTypeMode", |
| 361 | "value": "workspace" |
| 362 | }, |
| 363 | { |
| 364 | "name": "ControlType", |
| 365 | "value": "AnalyticsChart" |
| 366 | }, |
| 367 | { |
| 368 | "name": "SpecificChart", |
| 369 | "value": "Bar" |
| 370 | } |
| 371 | ], |
| 372 | "type": "Extension/AppInsightsExtension/PartType/AnalyticsPart", |
| 373 | "settings": { |
| 374 | "content": { |
| 375 | "PartTitle": "Top Attackers", |
| 376 | "PartSubTitle": "event count", |
| 377 | "Query": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| where SourceIP != ''\n| summarize Count = count() by SourceIP \n| top 10 by Count desc nulls last \n| sort by Count \n| render barchart\n" |
| 378 | } |
| 379 | }, |
| 380 | "asset": { |
| 381 | "idInputName": "ComponentId", |
| 382 | "type": "ApplicationInsights" |
| 383 | } |
| 384 | } |
| 385 | }, |
| 386 | "5": { |
| 387 | "position": { |
| 388 | "x": 6, |
| 389 | "y": 5, |
| 390 | "colSpan": 9, |
| 391 | "rowSpan": 4 |
| 392 | }, |
| 393 | "metadata": { |
| 394 | "inputs": [ |
| 395 | { |
| 396 | "name": "ComponentId", |
| 397 | "value": { |
| 398 | "SubscriptionId": "{Subscription_ID}", |
| 399 | "ResourceGroup": "{Resource_Group}", |
| 400 | "Name": "{Workspace_Name}", |
| 401 | "ResourceId": "/subscriptions/{Subscription_ID}/resourcegroups/{Resource_Group}/providers/microsoft.operationalinsights/workspaces/{Workspace_Name}" |
| 402 | } |
| 403 | }, |
| 404 | { |
| 405 | "name": "Query", |
| 406 | "value": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| summarize Very_High = countif(LogSeverity == \"Very-High\"), High = countif(LogSeverity == \"High\"), Medium = countif(LogSeverity == \"Medium\"), Low = countif(LogSeverity == \"Low\"), Very_Low = countif(LogSeverity == \"Very-Low\") by bin(TimeGenerated, 1d) \n| sort by TimeGenerated asc \n| render barchart kind=stacked\n" |
| 407 | }, |
| 408 | { |
| 409 | "name": "TimeRange", |
| 410 | "value": "P7D" |
| 411 | }, |
| 412 | { |
| 413 | "name": "Dimensions", |
| 414 | "value": { |
| 415 | "xAxis": { |
| 416 | "name": "TimeGenerated", |
| 417 | "type": "DateTime" |
| 418 | }, |
| 419 | "yAxis": [ |
| 420 | { |
| 421 | "name": "Very_High", |
| 422 | "type": "Int64" |
| 423 | }, |
| 424 | { |
| 425 | "name": "High", |
| 426 | "type": "Int64" |
| 427 | }, |
| 428 | { |
| 429 | "name": "Medium", |
| 430 | "type": "Int64" |
| 431 | }, |
| 432 | { |
| 433 | "name": "Low", |
| 434 | "type": "Int64" |
| 435 | } |
| 436 | ], |
| 437 | "splitBy": [], |
| 438 | "aggregation": "Sum" |
| 439 | } |
| 440 | }, |
| 441 | { |
| 442 | "name": "Version", |
| 443 | "value": "1.0" |
| 444 | }, |
| 445 | { |
| 446 | "name": "DashboardId", |
| 447 | "value": "/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503" |
| 448 | }, |
| 449 | { |
| 450 | "name": "PartId", |
| 451 | "value": "60bc70c2-01ed-4d1e-986a-30a9fbb1bcd5" |
| 452 | }, |
| 453 | { |
| 454 | "name": "PartTitle", |
| 455 | "value": "Analytics" |
| 456 | }, |
| 457 | { |
| 458 | "name": "PartSubTitle", |
| 459 | "value": "phil-laworkspace" |
| 460 | }, |
| 461 | { |
| 462 | "name": "resourceTypeMode", |
| 463 | "value": "workspace" |
| 464 | }, |
| 465 | { |
| 466 | "name": "ControlType", |
| 467 | "value": "AnalyticsChart" |
| 468 | }, |
| 469 | { |
| 470 | "name": "SpecificChart", |
| 471 | "value": "Bar" |
| 472 | } |
| 473 | ], |
| 474 | "type": "Extension/AppInsightsExtension/PartType/AnalyticsPart", |
| 475 | "settings": { |
| 476 | "content": { |
| 477 | "PartTitle": "Attacks By Day", |
| 478 | "PartSubTitle": "event count / severity" |
| 479 | } |
| 480 | }, |
| 481 | "asset": { |
| 482 | "idInputName": "ComponentId", |
| 483 | "type": "ApplicationInsights" |
| 484 | } |
| 485 | } |
| 486 | }, |
| 487 | "6": { |
| 488 | "position": { |
| 489 | "x": 0, |
| 490 | "y": 9, |
| 491 | "colSpan": 15, |
| 492 | "rowSpan": 4 |
| 493 | }, |
| 494 | "metadata": { |
| 495 | "inputs": [ |
| 496 | { |
| 497 | "name": "ComponentId", |
| 498 | "value": { |
| 499 | "SubscriptionId": "{Subscription_ID}", |
| 500 | "ResourceGroup": "{Resource_Group}", |
| 501 | "Name": "{Workspace_Name}", |
| 502 | "ResourceId": "/subscriptions/{Subscription_ID}/resourcegroups/{Resource_Group}/providers/microsoft.operationalinsights/workspaces/{Workspace_Name}" |
| 503 | } |
| 504 | }, |
| 505 | { |
| 506 | "name": "Query", |
| 507 | "value": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| top 20 by TimeGenerated\n| project Time=TimeGenerated, BOTSink=DeviceAddress, Severity=LogSeverity, Phase=extract(\"cat=([a-zA-Z]+)\", 1, AdditionalExtensions), SourceIP, Message\n" |
| 508 | }, |
| 509 | { |
| 510 | "name": "TimeRange", |
| 511 | "value": "P1D" |
| 512 | }, |
| 513 | { |
| 514 | "name": "Version", |
| 515 | "value": "1.0" |
| 516 | }, |
| 517 | { |
| 518 | "name": "DashboardId", |
| 519 | "value": "/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503" |
| 520 | }, |
| 521 | { |
| 522 | "name": "PartId", |
| 523 | "value": "3689d50d-2785-44ce-980e-19583ea74a53" |
| 524 | }, |
| 525 | { |
| 526 | "name": "PartTitle", |
| 527 | "value": "Analytics" |
| 528 | }, |
| 529 | { |
| 530 | "name": "PartSubTitle", |
| 531 | "value": "phil-laworkspace" |
| 532 | }, |
| 533 | { |
| 534 | "name": "resourceTypeMode", |
| 535 | "value": "workspace" |
| 536 | }, |
| 537 | { |
| 538 | "name": "ControlType", |
| 539 | "value": "AnalyticsGrid" |
| 540 | }, |
| 541 | { |
| 542 | "name": "Dimensions", |
| 543 | "isOptional": true |
| 544 | }, |
| 545 | { |
| 546 | "name": "SpecificChart", |
| 547 | "isOptional": true |
| 548 | } |
| 549 | ], |
| 550 | "type": "Extension/AppInsightsExtension/PartType/AnalyticsPart", |
| 551 | "settings": { |
| 552 | "content": { |
| 553 | "PartTitle": "Most Recent Attacks", |
| 554 | "PartSubTitle": "attacks by time", |
| 555 | "Query": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| top 50 by TimeGenerated\n| project Time=TimeGenerated, BOTSink=DeviceAddress, Severity=LogSeverity, Phase=extract(\"cat=([a-zA-Z]+)\", 1, AdditionalExtensions), SourceIP, Message=replace(@\"\\\\=\", @\"=\", Message)\n", |
| 556 | "GridColumnsWidth": { |
| 557 | "Time": "265px", |
| 558 | "BOTSink": "129px", |
| 559 | "Severity": "119px", |
| 560 | "Phase": "87px", |
| 561 | "SourceIP": "72px", |
| 562 | "Message": "694px" |
| 563 | } |
| 564 | } |
| 565 | }, |
| 566 | "asset": { |
| 567 | "idInputName": "ComponentId", |
| 568 | "type": "ApplicationInsights" |
| 569 | } |
| 570 | } |
| 571 | }, |
| 572 | "7": { |
| 573 | "position": { |
| 574 | "x": 0, |
| 575 | "y": 13, |
| 576 | "colSpan": 15, |
| 577 | "rowSpan": 4 |
| 578 | }, |
| 579 | "metadata": { |
| 580 | "inputs": [ |
| 581 | { |
| 582 | "name": "ComponentId", |
| 583 | "value": { |
| 584 | "SubscriptionId": "{Subscription_ID}", |
| 585 | "ResourceGroup": "{Resource_Group}", |
| 586 | "Name": "{Workspace_Name}", |
| 587 | "ResourceId": "/subscriptions/{Subscription_ID}/resourcegroups/{Resource_Group}/providers/microsoft.operationalinsights/workspaces/{Workspace_Name}" |
| 588 | } |
| 589 | }, |
| 590 | { |
| 591 | "name": "Query", |
| 592 | "value": "CommonSecurityLog\n| where DeviceVendor == \"Attivo\"\n| summarize Count = count() by Activity \n| top 10 by Count desc nulls last \n| sort by Count \n" |
| 593 | }, |
| 594 | { |
| 595 | "name": "TimeRange", |
| 596 | "value": "P1D" |
| 597 | }, |
| 598 | { |
| 599 | "name": "Version", |
| 600 | "value": "1.0" |
| 601 | }, |
| 602 | { |
| 603 | "name": "DashboardId", |
| 604 | "value": "/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503" |
| 605 | }, |
| 606 | { |
| 607 | "name": "PartId", |
| 608 | "value": "e4f45517-b267-4746-854d-2797b7309518" |
| 609 | }, |
| 610 | { |
| 611 | "name": "PartTitle", |
| 612 | "value": "Analytics" |
| 613 | }, |
| 614 | { |
| 615 | "name": "PartSubTitle", |
| 616 | "value": "phil-laworkspace" |
| 617 | }, |
| 618 | { |
| 619 | "name": "resourceTypeMode", |
| 620 | "value": "workspace" |
| 621 | }, |
| 622 | { |
| 623 | "name": "ControlType", |
| 624 | "value": "AnalyticsGrid" |
| 625 | }, |
| 626 | { |
| 627 | "name": "Dimensions", |
| 628 | "isOptional": true |
| 629 | }, |
| 630 | { |
| 631 | "name": "SpecificChart", |
| 632 | "isOptional": true |
| 633 | } |
| 634 | ], |
| 635 | "type": "Extension/AppInsightsExtension/PartType/AnalyticsPart", |
| 636 | "settings": { |
| 637 | "content": { |
| 638 | "PartTitle": "Top Attack Types", |
| 639 | "PartSubTitle": "attacks by type", |
| 640 | "GridColumnsWidth": { |
| 641 | "Activity": "507px", |
| 642 | "Count": "330px" |
| 643 | } |
| 644 | } |
| 645 | }, |
| 646 | "asset": { |
| 647 | "idInputName": "ComponentId", |
| 648 | "type": "ApplicationInsights" |
| 649 | } |
| 650 | } |
| 651 | } |
| 652 | } |
| 653 | } |
| 654 | }, |
| 655 | "metadata": { |
| 656 | "model": { |
| 657 | "timeRange": { |
| 658 | "value": { |
| 659 | "relative": { |
| 660 | "duration": 24, |
| 661 | "timeUnit": 1 |
| 662 | } |
| 663 | }, |
| 664 | "type": "MsPortalFx.Composition.Configuration.ValueTypes.TimeRange" |
| 665 | }, |
| 666 | "filterLocale": { |
| 667 | "value": "en-us" |
| 668 | }, |
| 669 | "filters": { |
| 670 | "value": { |
| 671 | "MsPortalFx_TimeRange": { |
| 672 | "model": { |
| 673 | "format": "utc", |
| 674 | "granularity": "auto", |
| 675 | "relative": "7d" |
| 676 | }, |
| 677 | "displayCache": { |
| 678 | "name": "UTC Time", |
| 679 | "value": "Past 7 days" |
| 680 | }, |
| 681 | "filteredPartIds": [ |
| 682 | "StartboardPart-AnalyticsPart-f66a14d0-daa6-4549-80de-dfbca93fa005", |
| 683 | "StartboardPart-AnalyticsPart-f66a14d0-daa6-4549-80de-dfbca93fa009", |
| 684 | "StartboardPart-AnalyticsPart-f40a193f-71ce-4979-9012-f5d9e02e7005", |
| 685 | "StartboardPart-AnalyticsPart-f40a193f-71ce-4979-9012-f5d9e02e7007", |
| 686 | "StartboardPart-AnalyticsPart-f40a193f-71ce-4979-9012-f5d9e02e7009", |
| 687 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419c9a", |
| 688 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419c9c", |
| 689 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419c9e", |
| 690 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419f42", |
| 691 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419f44", |
| 692 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419f46", |
| 693 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419f48", |
| 694 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419f4a", |
| 695 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419fdd", |
| 696 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419fdf", |
| 697 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419fe1", |
| 698 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419fe3", |
| 699 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419fe5", |
| 700 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419fe7", |
| 701 | "StartboardPart-AnalyticsPart-cd0c49e2-82a8-4a45-bc59-574d3b419fe9", |
| 702 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f1590e8", |
| 703 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f1590ea", |
| 704 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f1590ec", |
| 705 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f1590ee", |
| 706 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f1590f0", |
| 707 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f1590f2", |
| 708 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f1590f4", |
| 709 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f15933c", |
| 710 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f15933e", |
| 711 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f159340", |
| 712 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f159342", |
| 713 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f159344", |
| 714 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f159346", |
| 715 | "StartboardPart-AnalyticsPart-e855964a-dc9d-4d6f-9017-89368f159348", |
| 716 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08005", |
| 717 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08007", |
| 718 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08009", |
| 719 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df0800b", |
| 720 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df0800d", |
| 721 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df0800f", |
| 722 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08011", |
| 723 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df082bb", |
| 724 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df082bd", |
| 725 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df082bf", |
| 726 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df082c1", |
| 727 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df082c3", |
| 728 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df082c5", |
| 729 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df082c7", |
| 730 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08544", |
| 731 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08546", |
| 732 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08548", |
| 733 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df0854a", |
| 734 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df0854c", |
| 735 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df0854e", |
| 736 | "StartboardPart-AnalyticsPart-cc0e411d-ffd3-4560-b3d3-77ea0df08550", |
| 737 | "StartboardPart-AnalyticsPart-8dae8cf1-2354-4406-9192-b2377facd007", |
| 738 | "StartboardPart-AnalyticsPart-8dae8cf1-2354-4406-9192-b2377facd009", |
| 739 | "StartboardPart-AnalyticsPart-8dae8cf1-2354-4406-9192-b2377facd00d", |
| 740 | "StartboardPart-AnalyticsPart-8dae8cf1-2354-4406-9192-b2377facd00f", |
| 741 | "StartboardPart-AnalyticsPart-8dae8cf1-2354-4406-9192-b2377facd011", |
| 742 | "StartboardPart-AnalyticsPart-8dae8cf1-2354-4406-9192-b2377facd013", |
| 743 | "StartboardPart-AnalyticsPart-8dae8cf1-2354-4406-9192-b2377facd015", |
| 744 | "StartboardPart-AnalyticsPart-0d888a4e-899b-4dad-a642-2925ed6041e2", |
| 745 | "StartboardPart-AnalyticsPart-0d888a4e-899b-4dad-a642-2925ed6041e4", |
| 746 | "StartboardPart-AnalyticsPart-0d888a4e-899b-4dad-a642-2925ed6041e6", |
| 747 | "StartboardPart-AnalyticsPart-0d888a4e-899b-4dad-a642-2925ed6041e8", |
| 748 | "StartboardPart-AnalyticsPart-0d888a4e-899b-4dad-a642-2925ed6041ea", |
| 749 | "StartboardPart-AnalyticsPart-0d888a4e-899b-4dad-a642-2925ed6041ec", |
| 750 | "StartboardPart-AnalyticsPart-0d888a4e-899b-4dad-a642-2925ed6041ee", |
| 751 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f007", |
| 752 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f009", |
| 753 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f00b", |
| 754 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f00d", |
| 755 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f00f", |
| 756 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f011", |
| 757 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f013", |
| 758 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f17c", |
| 759 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f17e", |
| 760 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f180", |
| 761 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f182", |
| 762 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f184", |
| 763 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f186", |
| 764 | "StartboardPart-AnalyticsPart-6b5a5f78-4281-448c-a80e-1ca33149f188", |
| 765 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514007", |
| 766 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514009", |
| 767 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751400b", |
| 768 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751400d", |
| 769 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751400f", |
| 770 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514011", |
| 771 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514013", |
| 772 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514358", |
| 773 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751435a", |
| 774 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751435c", |
| 775 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751435e", |
| 776 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514360", |
| 777 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514362", |
| 778 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514364", |
| 779 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514443", |
| 780 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514445", |
| 781 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514447", |
| 782 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa17514449", |
| 783 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751444b", |
| 784 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751444d", |
| 785 | "StartboardPart-AnalyticsPart-e82a27f1-fdec-4f79-9f6a-86fa1751444f" |
| 786 | ] |
| 787 | } |
| 788 | } |
| 789 | } |
| 790 | } |
| 791 | } |
| 792 | }, |
| 793 | "id": "arm/subscriptions/0a243633-fff7-4930-b89a-d8e4a3a03533/resourceGroups/attivoeng/providers/Microsoft.Portal/dashboards/cd0c49e2-82a8-4a45-bc59-574d3b419503", |
| 794 | "name": "cd0c49e2-82a8-4a45-bc59-574d3b419503", |
| 795 | "type": "Microsoft.Portal/dashboards", |
| 796 | "location": "westus", |
| 797 | "tags": { |
| 798 | "hidden-title": "Attivo BOTSink" |
| 799 | }, |
| 800 | "apiVersion": "2015-08-01-preview" |
| 801 | } |