initial CCF commit

[nadavgru]

Change(s):

• Initial Filewall Data Connector

Reason for Change(s):

• Initial Filewall Data Connector

Version Updated:

• Initial version
• Including initial Workbook, Parsers, Data connector and Analytics Rules.

Testing Completed:

• Yes

Checked that the validations are passing and have addressed any issues that are present:

• Yes

[nadavgru]

@microsoft-github-policy-service agree [company="odix"]
@microsoft-github-policy-service agree
@microsoft-github-policy-service agree company="Microsoft"

[nadavgru]

@microsoft-github-policy-service agree company="odix"

[v-maheshbh]

Hi @nadavgru
BasePath Format:
Modify the BasePath to the following structure:
C:\GitHub\Azure-Sentinel\solutions\Solution Name

Kindly add the release notes with proper comments. Please include the workbook preview images inside the solution folder as well as in the following path:
https://github.com/Azure/Azure-Sentinel/tree/master/Workbooks/Images/Preview.
Additionally, update the workbook metadata file and refer to any existing solution for guidance.

For the CCF connector, kindly refer to the solution provided below and attach the Testing screenshot of the connector in a connected state.
https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Cloudflare%20CCF/Data%20Connectors

Thanks!

[nadavgru]

Connected State:

[v-maheshbh]

Hi @nadavgru
The relevantTechniques field is missing in the analytic rule. Kindly update the rule to include the appropriate relevant techniques and update your branch from master to resolve the workbook validation issues.
Kindly add the release notes with version, date and descriptive details for this update.

For the CCF connector, kindly refer to the solution provided below.
https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Cloudflare%20CCF/Data%20Connectors

Thanks!

[v-maheshbh]

Hi @nadavgru
Please resolve the conflicts in this branch.

Thanks!

[nadavgru]

fixed conflicts

[nadavgru]

Hi @v-maheshbh ,
Please Re-run as the last test failed on api limit error: message: "API rate limit exceeded for 172.215.209.99. (But here's the good news: Authenticated requests get a higher rate limit. Check out the documentation for more details.)",