Commit 2c6e8ced: Multiple changes

- Check output
- Updated list generation
- Started subdomain takeover check module
This commit is contained in:
Jurjen Ladenius
2021-08-12 10:46:04 +02:00
parent 2c6e8cede3
commit 1a3bc1370e
39 changed files with 4879 additions and 85 deletions

View File

@@ -0,0 +1,64 @@
{
"$schema": "http://adaptivecards.io/schemas/adaptive-card.json",
"type": "AdaptiveCard",
"version": "1.0",
"msTeams": {
"width": "full"
},
"fallbackText": "@{triggerBody()?['AlertDisplayName']} - @{triggerBody()?['Description']}",
"body": [
{
"type": "TextBlock",
"text": "Azure Security Center Alert",
"weight": "bolder",
"size": "large",
"id": "acTitle"
},
{
"type": "TextBlock",
"text": "@{triggerBody()?['AlertDisplayName']}",
"weight": "Bolder",
"wrap": true,
"id": "acSubHeader"
},
{
"type": "TextBlock",
"text": "@{triggerBody()?['Description']}",
"wrap": true,
"id": "acDescriptionArea"
},
{
"type": "FactSet",
"facts": [
{
"title": "Severity:",
"value": "@{triggerBody()?['Severity']}"
},
{
"title": "Attacked resource:",
"value": "@{triggerBody()?['CompromisedEntity']}"
},
{
"title": "Detected by:",
"value": "@{triggerBody()?['VendorName']} - @{triggerBody()?['ProductName']}"
},
{
"title": "Detection time:",
"value": "@{triggerBody()?['TimeGenerated']}"
},
{
"title": "Alert Id:",
"value": "@{triggerBody()?['SystemAlertId']}"
}
],
"id": "acFactSet"
}
],
"actions": [
{
"type": "Action.OpenUrl",
"title": "See details in Securtity Center",
"url": "@{triggerBody()?['AlertUri']}"
}
]
}