{
  "Name": "SailPointIdentityNow",
  "Author": "SailPointIdentityNow",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The [SailPoint Integration](https://www.sailpoint.com/) solution provides the capability to ingest SailPoint IdentityNow search events into Microsoft Sentinel through the REST API. The solution includes two data connectors: a legacy Azure Function-based connector and a Codeless Connector Framework (CCF) based connector. \n\n ** Underlying Microsoft Technologies used: ** \n\n This solution takes a dependency on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs: \n\n a. [Azure Monitor HTTP Data Collector API](https://docs.microsoft.com/azure/azure-monitor/logs/data-collector-api) *(used by the Azure Function-based connector)* \n\n b. [Azure Functions](https://azure.microsoft.com/services/functions/#overview) *(used by the Azure Function-based connector)* \n\n c. [Microsoft Sentinel Codeless Connector Framework](https://learn.microsoft.com/azure/sentinel/create-codeless-connector) *(used by the CCF-based connector)*",
  "Data Connectors": [
    "Data Connectors/SailPoint_IdentityNow_FunctionApp.json",
    "Data Connectors/SearchEvent_CCF/SailPointIdentityNow_ConnectorDefinition.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/SailPointIdentityNowAlertsForTriggers.yaml",
	"Analytic Rules/SailPointIdentityNowEventType.yaml",
	"Analytic Rules/SailPointIdentityNowEventTypeTechnicalName.yaml",
	"Analytic Rules/SailPointIdentityNowFailedEvents.yaml",
	"Analytic Rules/SailPointIdentityNowFailedEventsBasedOnTime.yaml",
    "Analytic Rules/SailPointIdentityNowUserWithFailedEvents.yaml"
  ],
  "Playbooks": [
    "Playbooks/Custom Connector/azuredeploy.json"
  ],
  "Parsers": [
    "Parsers/parser_SailPointIDN_EventsAliasFunction.json"
  ],
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\SailPointIdentityNow",  
  "Version": "3.0.1",
  "DataConnectorCCFVersion": "3.0.1",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": true,
  "Is1Pconnector": false
}