Added in filters for block events

20022020

Merge from orign

Shain's feedback Azure#2

Removing special character

Pull from master

Pull request from johnbilliris/Azure-Sentinel:master to johnbilliris/Azure-Sentinel:GuardicoreThreatIntelImprovements

Bringing up to date

Changed solution rule datatypes to ESETPROTECT

Playbooks Update #2

Add data connector for Armorblox solution

Add files via upload

merge to upstream

Solution_NonameSecurity.json

Connector_RESTAPI_NonameSecurity.json

rebase to master

* Solution package with the updated Playbook Templates.
* Updated documentation and package

Rubrik Solution Update (#2)

Update AuthenticationAttemptfromNewCountry.yaml

…ovements

Callmegreg GitHub solution improvements

Ltipp147/package content

…dpointconnector-ccp

Update Sophos Endpoint Data Connector - ccp

…improvements

Users/vkorenkov/1643469 improvements

fixes for compliance with checks

PR to test KQL validation run

Fix analytics rules

Add mea site config

…readme-updates

docs: readme improvements

Co-authored-by: v-shukore <159111145+v-shukore@users.noreply.github.com>

This reverts commit e079ca0.

Co-authored-by: RamboV <68921481+RamboV@users.noreply.github.com>

)"

This reverts commit 20419d8.

* Redo

* Manual lookover

* Remove nonascii chars

* Remove nonascii characters

---------

Co-authored-by: Derrick Lee <derricklee@microsoft.com>

Sync upstream

Co-authored-by: gloo-shock <36697840+gloo-shock@users.noreply.github.com>

This reverts commit a63d238

This reverts commit a63d238

Syncing my fork with the latest changes from main

…zure#3, Azure#4)

Azure#2 — Renamed Whisper - BGP Anomaly Hunt → Whisper - ASN Reputation Score Hunt
to match the query's actual logic (compares ASN reputation scores across
24-hour windows, flags increases >20 points). Filename kept stable.

Azure#3 — Standardized the playbook parameter naming across all 10 playbooks
from `playbook-name` (kebab) to `PlaybookName` (PascalCase) per the
Azure-Sentinel repo convention. Updated both the parameter declaration
and every `parameters('playbook-name')` reference.

Azure#4 — Moved the Whisper Security custom API connector ARM template into
its own folder per repo convention:
  Solutions/Whisper/Playbooks/WhisperSecurityConnector.json
    → Solutions/Whisper/Playbooks/WhisperSecurityConnector/azuredeploy.json

Package regenerated to 3.0.29 via Create-Azure-Sentinel-Solution V3.

Azure#1 (parse_json on comma-separated strings) — replied on the thread
explaining deferral until we have live data to verify the actual
ingestion-pipeline output format; not changing code in this round.

Signed-off-by: Elakkuvan Rajamani <elakkuvan@whisper.security>