{ "name": "MSEntraID_disableUser", "version": "1.0", "author": "nusatanra-self, StrangeBee", "url": "https://github.com/TheHive-Project/Cortex-Analyzers", "license": "AGPL-V3", "description": "Disable user in Microsoft Entra ID for a User Principal Name. (mail)", "dataTypeList": ["thehive:case_artifact"], "command": "MSEntraID/MSEntraID.py", "baseConfig": "MSEntraID", "config": { "service": "disableUser" }, "configurationItems": [ {"name": "tenant_id", "description": "Microsoft Entra ID Tenant ID", "type": "string", "multi": false, "required": true }, {"name": "client_id", "description": "Client ID/Application ID of Microsoft Entra ID Registered App", "type": "string", "multi": false, "required": true }, {"name": "client_secret", "description": "Secret for Microsoft Entra ID Registered Application", "type": "string", "multi": false, "required": true } ], "registration_required": true, "subscription_required": true, "free_subscription": false, "service_homepage": "https://www.microsoft.com/security/business/identity-access/microsoft-entra-id" }