mirror of
https://dev.azure.com/effectory/Survey%20Software/_git/Cloud%20Engineering
synced 2026-02-27 18:52:18 +01:00
Commit 2c6e8ced: Multiple changes
- Check output - Updated list generation - Started subdomain takeover check module
This commit is contained in:
57
AdaptiveCards/logicApp Common alert schema.json
Normal file
57
AdaptiveCards/logicApp Common alert schema.json
Normal file
@@ -0,0 +1,57 @@
|
||||
{
|
||||
"$schema": "http://adaptivecards.io/schemas/adaptive-card.json",
|
||||
"type": "AdaptiveCard",
|
||||
"version": "1.0",
|
||||
"msTeams": {
|
||||
"width": "full"
|
||||
},
|
||||
"fallbackText": "rul@{triggerBody()?['data']?['essentials']?['alertRule']} - @{triggerBody()?['data']?['essentials']?['description']}",
|
||||
"body": [
|
||||
{
|
||||
"type": "TextBlock",
|
||||
"text": "Azure Security Center Alert",
|
||||
"weight": "bolder",
|
||||
"size": "large",
|
||||
"id": "acTitle"
|
||||
},
|
||||
{
|
||||
"type": "TextBlock",
|
||||
"text": "@{triggerBody()?['data']?['essentials']?['alertRule']}",
|
||||
"weight": "Bolder",
|
||||
"wrap": true,
|
||||
"id": "acSubHeader"
|
||||
},
|
||||
{
|
||||
"type": "TextBlock",
|
||||
"text": "@{triggerBody()?['data']?['essentials']?['description']}",
|
||||
"wrap": true,
|
||||
"id": "acDescriptionArea"
|
||||
},
|
||||
{
|
||||
"type": "FactSet",
|
||||
"facts": [
|
||||
{
|
||||
"title": "Severity:",
|
||||
"value": "@{triggerBody()?['data']?['essentials']?['severity']}"
|
||||
},
|
||||
{
|
||||
"title": "Detection time:",
|
||||
"value": "@{triggerBody()?['data']?['essentials']?['firedDateTime']}"
|
||||
},
|
||||
{
|
||||
"title": "Alert Id:",
|
||||
"value": "@{triggerBody()?['data']?['essentials']?['alertId']}"
|
||||
}
|
||||
],
|
||||
"id": "acFactSet"
|
||||
}
|
||||
],
|
||||
"actions": [
|
||||
{
|
||||
"type": "Action.OpenUrl",
|
||||
"title": "See details in @{triggerBody()?['data']?['essentials']?['monitoringService']}",
|
||||
"url": "@{if(contains(createArray('Log Analytics', 'Application Insights', 'Log Alerts V2'), triggerBody()?['data']?['essentials']?['monitoringService']), triggerBody()?['data']?['alertContext']?['LinkToSearchResults'], 'https://portal.azure.com')}"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user