search

Azure / azure-powershell

Microsoft Azure PowerShell
Other
4.23k stars 3.84k forks source link

Az.SecurityInsights - technique not returned in Get-AzSentinelAlertRuleTemplate #20372

Open Kaloszer opened 1 year ago

Kaloszer commented 1 year ago

Description

Get-AzSentinelRuleTemplate does not return the Techniques of a template, which are visible when comparing against the newest rule version whereas tactic is available.

ex. Tactic: image

Issue script & Debug output

PS C:\ADO\Repos\ManagedSOC\Predica.Managed.SOC>                 $azRuleTemplates = Get-AzSentinelAlertRuleTemplate `
>>                     -ResourceGroupName $ResourceGroupName `
>>                     -WorkspaceName $WorkspaceName `
>>                     -SubscriptionId $SubscriptionId `
>> -Id '' `
>> -debug
[CmdletBeginProcessing]: Starting command
CmdletBeginProcessing: 
CmdletProcessRecordStart: 
CmdletGetPipeline: 
CmdletBeforeAPICall: 
URLCreated: /subscriptions/0000000-0000-00000-000/resourceGroups/rgname/providers/Microsoft.OperationalInsights/workspaces/workspacename/providers/Microsoft.SecurityInsights/alertRuleTemplates/14f6da04-2f96-44ee-9210-9ccc1be6401e?api-version=2021-09-01-preview
RequestCreated: /subscriptions/0000000-0000-00000-000/resourceGroups/rgname/providers/Microsoft.OperationalInsights/workspaces/testsoc/providers/Microsoft.SecurityInsights/alertRuleTemplates/14f6da04-2f96-44ee-9210-9ccc1be6401e?api-version=2021-09-01-preview
HeaderParametersAdded: 
============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/subscriptions/0000000-0000-00000-000/resourceGroups/rgname/providers/Microsoft.OperationalInsights/workspaces/testsoc/providers/Microsoft.SecurityInsights/alertRuleTemplates/14f6da04-2f96-44ee-9210-9ccc1be6401e?api-version=2021-09-01-preview

Headers:
x-ms-unique-id                : 31,32,33
x-ms-client-request-id        : b4aee540-ebec-432c-922c-e96389bf00f6
CommandName                   : &
FullCommandName               : Get-AzSentinelAlertRuleTemplate_Get
ParameterSetName              : __AllParameterSets
User-Agent                    : AzurePowershell/v0.0.0,PSVersion/v2022.11.2,Az.SecurityInsights/3.0.0

Body:

BeforeCall: 
============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Cache-Control                 : no-cache
Pragma                        : no-cache
Server                        : Kestrel
x-ms-ratelimit-remaining-subscription-reads: 11995
x-ms-request-id               : fdf5b76f-4e31-462e-b850-42d88d4d5020
x-ms-correlation-request-id   : fdf5b76f-4e31-462e-b850-42d88d4d5020
x-ms-routing-request-id       : GERMANYNORTH:20221205T113302Z:fdf5b76f-4e31-462e-b850-42d88d4d5020
Strict-Transport-Security     : max-age=31536000; includeSubDomains
X-Content-Type-Options        : nosniff
Date                          : Mon, 05 Dec 2022 11:33:02 GMT

Body:
{
  "id": "/subscriptions/0000000-0000-00000-000/resourceGroups/rgname/providers/Microsoft.OperationalInsights/workspaces/testsoc/providers/Microsoft.SecurityInsights/AlertRuleTemplates/14f6da04-2f96-44ee-9210-9ccc1be6401e",
  "name": "14f6da04-2f96-44ee-9210-9ccc1be6401e",
  "type": "Microsoft.SecurityInsights/AlertRuleTemplates",
  "kind": "NRT",
  "properties": {
    "version": "1.0.0",
    "severity": "Low",
    "query": "AuditLogs\n| where Category =~ \"RoleManagement\"\n| where OperationName has \"Add member to role outside of PIM\"\n        or (LoggedByService == \"Core Directory\" and OperationName == \"Add member to role\" and Identity != \"MS-PIM\")\n| extend AccountCustomEntity = tostring(TargetResources[0].userPrincipalName), IPCustomEntity = tostring(parse_json(tostring(InitiatedBy.user)).ipAddress)",
    "entityMappings": [
      {
        "entityType": "Account",
        "fieldMappings": [
          {
            "identifier": "FullName",
            "columnName": "AccountCustomEntity"
          }
        ]
      },
      {
        "entityType": "IP",
        "fieldMappings": [
          {
            "identifier": "Address",
            "columnName": "IPCustomEntity"
          }
        ]
      }
    ],
    "tactics": [
      "PrivilegeEscalation"
    ],
    "displayName": "NRT Privileged Role Assigned Outside PIM",
    "description": "Identifies a privileged role being assigned to a user outside of PIM\nRef : https://docs.microsoft.com/azure/active-directory/fundamentals/security-operations-privileged-accounts#things-to-monitor-1",
    "lastUpdatedDateUTC": "2022-08-30T00:00:00Z",
    "createdDateUTC": "2021-10-28T00:00:00Z",
    "status": "Available",
    "requiredDataConnectors": [
      {
        "connectorId": "AzureActiveDirectory",
        "dataTypes": [
          "AuditLogs"
        ]
      }
    ],
    "alertRulesCreatedByTemplateCount": 1
  }
}

ResponseCreated:
BeforeResponseDispatch:
Finally:
CmdletAfterAPICall:
[CmdletProcessRecordAsyncEnd]: Finish HTTP process
CmdletProcessRecordAsyncEnd:
CmdletProcessRecordEnd:
AzureQoSEvent:  Module: Az.SecurityInsights:3.0.0; CommandName: Get-AzSentinelAlertRuleTemplate; PSVersion: 2022.11.2; IsSuccess: True; Duration: 00:00:00.5245535


### Environment data

```PowerShell
Name                           Value
----                           -----
PSVersion                      7.3.0
PSEdition                      Core
GitCommitId                    7.3.0
OS                             Microsoft Windows 10.0.22621
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Module versions

ModuleType Version    PreRelease Name                                ExportedCommands
---------- -------    ---------- ----                                ----------------
Script     2.10.3                Az.Accounts                         {Add-AzEnvironment, Clear-AzConfig, Clear-AzContext, Clear-AzDefault…}
Script     0.2.0                 Az.ADDomainServices                 {Get-AzADDomainService, New-AzADDomainService, New-AzADDomainServiceForestTrustObject, New-AzADDo…
Script     2.0.0                 Az.Advisor                          {Disable-AzAdvisorRecommendation, Enable-AzAdvisorRecommendation, Get-AzAdvisorConfiguration, Get…
Script     0.5.0                 Az.AlertsManagement                 {Get-AzAlert, Get-AzAlertObjectHistory, Get-AzAlertProcessingRule, Get-AzSmartGroup…}
Script     1.1.4                 Az.AnalysisServices                 {Add-AzAnalysisServicesAccount, Export-AzAnalysisServicesInstanceLog, Get-AzAnalysisServicesServe…
Script     4.0.0                 Az.ApiManagement                    {Add-AzApiManagementApiToGateway, Add-AzApiManagementApiToProduct, Add-AzApiManagementProductToGr…
Script     0.1.0                 Az.App                              {Disable-AzContainerAppRevision, Enable-AzContainerAppRevision, Get-AzContainerApp, Get-AzContain…
Script     1.2.0                 Az.AppConfiguration                 {Clear-AzAppConfigurationDeletedStore, Get-AzAppConfigurationDeletedStore, Get-AzAppConfiguration…
Script     2.1.0                 Az.ApplicationInsights              {Get-AzApplicationInsights, Get-AzApplicationInsightsApiKey, Get-AzApplicationInsightsContinuousE…
Script     2.0.0                 Az.Attestation                      {Add-AzAttestationPolicySigner, Get-AzAttestationPolicy, Get-AzAttestationPolicySigners, Remove-A…
Script     0.1.0                 Az.Automanage                       {Get-AzAutomanageBestPractice, Get-AzAutomanageConfigProfile, Get-AzAutomanageConfigProfileAssign…
Script     1.8.0                 Az.Automation                       {Export-AzAutomationDscConfiguration, Export-AzAutomationDscNodeReportContent, Export-AzAutomatio…
Script     0.1.0                 Az.BareMetal                        {Get-AzBareMetal, Update-AzBareMetal}
Script     3.2.1                 Az.Batch                            {Disable-AzBatchAutoScale, Disable-AzBatchComputeNodeScheduling, Disable-AzBatchJob, Disable-AzBa…
Script     2.0.0                 Az.Billing                          {Get-AzBillingAccount, Get-AzBillingInvoice, Get-AzBillingPeriod, Get-AzBillingProfile…}
Script     0.4.1                 Az.Blueprint                        {Export-AzBlueprintWithArtifact, Get-AzBlueprint, Get-AzBlueprintArtifact, Get-AzBlueprintAssignm…
Script     0.4.0                 Az.BotService                       {Export-AzBotServiceApp, Get-AzBotService, Initialize-AzBotServicePrepareDeploy, New-AzBotService…
Script     2.1.0                 Az.Cdn                              {Clear-AzCdnEndpointContent, Clear-AzFrontDoorCdnEndpointContent, Disable-AzCdnCustomDomainCustom…
Script     0.1.0                 Az.ChangeAnalysis                   Get-AzChangeAnalysis
Script     1.1.0                 Az.CloudService                     {Get-AzCloudService, Get-AzCloudServiceInstanceView, Get-AzCloudServiceNetworkInterface, Get-AzCl…
Script     1.12.0                Az.CognitiveServices                {Add-AzCognitiveServicesAccountNetworkRule, Get-AzCognitiveServicesAccount, Get-AzCognitiveServic…
Script     0.2.0                 Az.Communication                    {Get-AzCommunicationService, Get-AzCommunicationServiceKey, New-AzCommunicationService, New-AzCom…
Script     5.1.0                 Az.Compute                          {Add-AzImageDataDisk, Add-AzVhd, Add-AzVMAdditionalUnattendContent, Add-AzVMDataDisk…}
Script     1.0.0                 Az.ConfidentialLedger               {Get-AzConfidentialLedger, New-AzConfidentialLedger, New-AzConfidentialLedgerAADBasedSecurityPrin…
Script     0.2.0                 Az.Confluent                        {Get-AzConfluentMarketplaceAgreement, Get-AzConfluentOrganization, New-AzConfluentOrganization, R…
Script     0.5.0                 Az.ConnectedKubernetes              {Get-AzConnectedKubernetes, Get-AzConnectedKubernetesUserCredential, New-AzConnectedKubernetes, R…
Script     0.4.1                 Az.ConnectedMachine                 {Connect-AzConnectedMachine, Get-AzConnectedMachine, Get-AzConnectedMachineExtension, Get-AzConne…
Script     0.1.0                 Az.ConnectedNetwork                 {Get-AzConnectedNetworkDevice, Get-AzConnectedNetworkDeviceRegistrationKey, Get-AzConnectedNetwor…
Script     3.1.0                 Az.ContainerInstance                {Add-AzContainerInstanceOutput, Get-AzContainerGroup, Get-AzContainerInstanceCachedImage, Get-AzC…
Script     3.0.0                 Az.ContainerRegistry                {Connect-AzContainerRegistry, Get-AzContainerRegistry, Get-AzContainerRegistryCredential, Get-AzC…
Script     1.8.2                 Az.CosmosDB                         {Get-AzCosmosDBAccount, Get-AzCosmosDBAccountKey, Get-AzCosmosDBCassandraKeyspace, Get-AzCosmosDB…
Script     0.3.0                 Az.CostManagement                   {Get-AzCostManagementExport, Get-AzCostManagementExportExecutionHistory, Invoke-AzCostManagementE…
Script     0.1.0                 Az.CustomLocation                   {Get-AzCustomLocation, Get-AzCustomLocationEnabledResourceType, New-AzCustomLocation, Remove-AzCu…
Script     0.1.0                 Az.CustomProviders                  {Get-AzCustomProvider, Get-AzCustomProviderAssociation, New-AzCustomProvider, New-AzCustomProvide…
Script     0.1.1                 Az.Dashboard                        {Get-AzGrafana, New-AzGrafana, New-AzGrafanaMonitorWorkspaceIntegrationObject, Remove-AzGrafana…} 
Script     0.2.0                 Az.DataBox                          {Get-AzDataBoxJob, Get-AzDataBoxJobCredential, New-AzDataBoxContactDetailsObject, New-AzDataBoxDi…
Script     1.1.0                 Az.DataBoxEdge                      {Get-AzDataBoxEdgeBandwidthSchedule, Get-AzDataBoxEdgeDevice, Get-AzDataBoxEdgeJob, Get-AzDataBox…
Script     1.4.0                 Az.Databricks                       {Get-AzDatabricksAccessConnector, Get-AzDatabricksOutboundNetworkDependenciesEndpoint, Get-AzData…
Script     0.1.0                 Az.Datadog                          {Get-AzDatadogMarketplaceAgreement, Get-AzDatadogMonitor, Get-AzDatadogMonitorApiKey, Get-AzDatad…
Script     1.16.10               Az.DataFactory                      {Add-AzDataFactoryV2DataFlowDebugSessionPackage, Add-AzDataFactoryV2TriggerSubscription, Get-AzDa…
Script     1.0.2                 Az.DataLakeAnalytics                {Add-AzDataLakeAnalyticsDataSource, Add-AzDataLakeAnalyticsFirewallRule, Get-AzDataLakeAnalyticsA…
Script     1.3.0                 Az.DataLakeStore                    {Add-AzDataLakeStoreFirewallRule, Add-AzDataLakeStoreItemContent, Add-AzDataLakeStoreTrustedIdPro…
Script     0.12.0                Az.DataMigration                    {Get-AzDataMigrationProject, Get-AzDataMigrationService, Get-AzDataMigrationTask, Invoke-AzDataMi…
Script     1.0.0                 Az.DataProtection                   {Backup-AzDataProtectionBackupInstanceAdhoc, Edit-AzDataProtectionPolicyRetentionRuleClientObject…
Script     1.0.1                 Az.DataShare                        {Get-AzDataShare, Get-AzDataShareAccount, Get-AzDataShareDataSet, Get-AzDataShareDataSetMapping…} 
Script     0.3.0                 Az.DedicatedHsm                     {Get-AzDedicatedHsm, Get-AzDedicatedHsmOutboundNetworkDependencyEndpoint, New-AzDedicatedHsm, Rem…
Script     1.1.0                 Az.DeploymentManager                {Get-AzDeploymentManagerArtifactSource, Get-AzDeploymentManagerRollout, Get-AzDeploymentManagerSe…
Script     3.1.1                 Az.DesktopVirtualization            {Disconnect-AzWvdUserSession, Expand-AzWvdMsixImage, Get-AzWvdApplication, Get-AzWvdApplicationGr…
Script     0.10.0                Az.DeviceProvisioningServices       {Add-AzIoTDeviceProvisioningServiceAccessPolicy, Add-AzIoTDeviceProvisioningServiceCertificate, A…
Script     0.1.0                 Az.DeviceUpdate                     {Get-AzDeviceUpdateAccount, Get-AzDeviceUpdateInstance, New-AzDeviceUpdateAccount, New-AzDeviceUp…
Script     0.7.3                 Az.DevSpaces                        {Get-AzDevSpacesController, New-AzDevSpacesController, Remove-AzDevSpacesController, Update-AzDev…
Script     1.0.2                 Az.DevTestLabs                      {Get-AzDtlAllowedVMSizesPolicy, Get-AzDtlAutoShutdownPolicy, Get-AzDtlAutoStartPolicy, Get-AzDtlV…
Script     0.1.0                 Az.DigitalTwins                     {Get-AzDigitalTwinsEndpoint, Get-AzDigitalTwinsInstance, New-AzDigitalTwinsCheckNameRequestObject…
Script     0.3.0                 Az.DiskPool                         {Get-AzDiskPool, Get-AzDiskPoolIscsiTarget, Get-AzDiskPoolOutboundNetworkDependencyEndpoint, Get-…
Script     1.1.2                 Az.Dns                              {Add-AzDnsRecordConfig, Get-AzDnsRecordSet, Get-AzDnsZone, New-AzDnsRecordConfig…}
Script     0.2.1                 Az.DnsResolver                      {Get-AzDnsForwardingRuleset, Get-AzDnsForwardingRulesetForwardingRule, Get-AzDnsForwardingRuleset…
Script     0.1.0                 Az.DynatraceObservability           {Get-AzDynatraceMonitor, Get-AzDynatraceMonitorAppService, Get-AzDynatraceMonitoredResource, Get-…
Script     0.1.0                 Az.EdgeOrder                        {Get-AzEdgeOrder, Get-AzEdgeOrderAddress, Get-AzEdgeOrderConfiguration, Get-AzEdgeOrderItem…}     
Script     0.1.0                 Az.Elastic                          {Get-AzElasticDeploymentInfo, Get-AzElasticDetailVMIngestion, Get-AzElasticMonitor, Get-AzElastic…
Script     0.1.0                 Az.ElasticSan                       {Add-AzElasticSanVolumeGroupNetworkRule, Get-AzElasticSan, Get-AzElasticSanSkuList, Get-AzElastic…
Script     1.5.0                 Az.EventGrid                        {Enable-AzEventGridPartnerTopic, Get-AzEventGridChannel, Get-AzEventGridDomain, Get-AzEventGridDo…
Script     3.1.0                 Az.EventHub                         {Add-AzEventHubIPRule, Add-AzEventHubVirtualNetworkRule, Get-AzEventHubNamespace, New-AzEventHubA…
Script     0.1.0                 Az.FluidRelay                       {Get-AzFluidRelayContainer, Get-AzFluidRelayServer, Get-AzFluidRelayServerKey, New-AzFluidRelaySe…
Script     1.9.0                 Az.FrontDoor                        {Disable-AzFrontDoorCustomDomainHttps, Enable-AzFrontDoorCustomDomainHttps, Get-AzFrontDoor, Get-…
Script     4.0.6                 Az.Functions                        {Get-AzFunctionApp, Get-AzFunctionAppAvailableLocation, Get-AzFunctionAppPlan, Get-AzFunctionAppS…
Script     0.11.0                Az.GuestConfiguration               {Get-AzGuestConfigurationAssignment, Get-AzGuestConfigurationAssignmentReport, New-AzGuestConfigu…
Script     0.3.0                 Az.HanaOnAzure                      {Get-AzSapMonitor, Get-AzSapMonitorProviderInstance, New-AzSapMonitor, New-AzSapMonitorProviderIn…
Script     5.0.1                 Az.HDInsight                        {Add-AzHDInsightClusterIdentity, Add-AzHDInsightComponentVersion, Add-AzHDInsightConfigValue, Add…
Script     0.1.0                 Az.HealthBot                        {Get-AzHealthBot, New-AzHealthBot, Remove-AzHealthBot, Update-AzHealthBot}
Script     2.0.0                 Az.HealthcareApis                   {Get-AzHealthcareApisService, Get-AzHealthcareApisWorkspace, Get-AzHealthcareDicomService, Get-Az…
Script     0.1.1                 Az.HPCCache                         {Get-AzHpcCache, Get-AzHpcCacheSku, Get-AzHpcCacheStorageTarget, Get-AzHpcCacheUsageModel…}       
Script     0.3.0                 Az.ImageBuilder                     {Get-AzImageBuilderTemplate, Get-AzImageBuilderTemplateRunOutput, New-AzImageBuilderTemplate, New…
Script     0.1.0                 Az.ImportExport                     {Get-AzImportExport, Get-AzImportExportBitLockerKey, Get-AzImportExportLocation, New-AzImportExpo…
Script     0.10.0                Az.IotCentral                       {Get-AzIotCentralApp, New-AzIotCentralApp, Remove-AzIotCentralApp, Set-AzIotCentralApp}
Script     2.7.4                 Az.IotHub                           {Add-AzIotHubCertificate, Add-AzIotHubConfiguration, Add-AzIotHubDeployment, Add-AzIotHubDevice…} 
Script     4.9.0                 Az.KeyVault                         {Add-AzKeyVaultCertificate, Add-AzKeyVaultCertificateContact, Add-AzKeyVaultKey, Add-AzKeyVaultMa…
Script     0.6.0                 Az.KubernetesConfiguration          {Get-AzKubernetesConfigFluxOperationStatus, Get-AzKubernetesConfiguration, Get-AzKubernetesConfig…
Script     2.1.0                 Az.Kusto                            {Add-AzKustoClusterLanguageExtension, Add-AzKustoDatabasePrincipal, Get-AzKustoAttachedDatabaseCo…
Script     0.1.0                 Az.LabServices                      {Add-AzLabServicesUserQuota, Get-AzLabServicesLab, Get-AzLabServicesLabForVM, Get-AzLabServicesLa…
Script     1.5.0                 Az.LogicApp                         {Get-AzIntegrationAccount, Get-AzIntegrationAccountAgreement, Get-AzIntegrationAccountAssembly, G…
Script     0.1.0                 Az.Logz                             {Get-AzLogzMonitor, Get-AzLogzMonitoredResource, Get-AzLogzMonitorSSOConfiguration, Get-AzLogzMon…
Script     1.1.3                 Az.MachineLearning                  {Add-AzMlWebServiceRegionalProperty, Export-AzMlWebService, Get-AzMlCommitmentAssociation, Get-Az…
Script     0.1.0                 Az.MachineLearningServices          {Get-AzMLServiceQuota, Get-AzMLServiceUsage, Get-AzMLServiceVMSize, Get-AzMLWorkspace…}
Script     1.2.0                 Az.Maintenance                      {Get-AzApplyUpdate, Get-AzConfigurationAssignment, Get-AzMaintenanceConfiguration, Get-AzMaintena…
Script     1.1.0                 Az.ManagedServiceIdentity           {Get-AzFederatedIdentityCredentials, Get-AzSystemAssignedIdentity, Get-AzUserAssignedIdentity, Ge…
Script     3.0.0                 Az.ManagedServices                  {Get-AzManagedServicesAssignment, Get-AzManagedServicesDefinition, Get-AzManagedServicesMarketpla…
Script     0.7.2                 Az.ManagementPartner                {Get-AzManagementPartner, New-AzManagementPartner, Remove-AzManagementPartner, Update-AzManagemen…
Script     0.8.0                 Az.Maps                             {Get-AzMapsAccount, Get-AzMapsAccountKey, Get-AzMapsCreator, Get-AzMapsSubscriptionOperation…}    
Script     0.2.0                 Az.MariaDb                          {Get-AzMariaDbConfiguration, Get-AzMariaDbConnectionString, Get-AzMariaDbFirewallRule, Get-AzMari…
Script     0.3.0                 Az.Marketplace                      {Get-AzMarketplacePrivateStore, Get-AzMarketplacePrivateStoreOffer, Remove-AzMarketplacePrivateSt…
Script     2.0.0                 Az.MarketplaceOrdering              {Get-AzMarketplaceTerms, Invoke-AzMarketplaceSignTerms, Set-AzMarketplaceTerms, Stop-AzMarketplac…
Script     1.1.1                 Az.Media                            {Get-AzMediaService, Get-AzMediaServiceKey, Get-AzMediaServiceNameAvailability, New-AzMediaServic…
Script     2.1.0                 Az.Migrate                          {Get-AzMigrateDiscoveredServer, Get-AzMigrateJob, Get-AzMigrateProject, Get-AzMigrateReplicationF…
Script     0.1.4                 Az.MixedReality                     {Get-AzRemoteRenderingAccount, Get-AzRemoteRenderingAccountKey, Get-AzSpatialAnchorsAccount, Get-…
Script     4.2.0                 Az.Monitor                          {Add-AzLogProfile, Add-AzMetricAlertRule, Add-AzMetricAlertRuleV2, Add-AzWebtestAlertRule…}       
Script     0.1.0                 Az.MonitoringSolutions              {Get-AzMonitorLogAnalyticsSolution, New-AzMonitorLogAnalyticsSolution, Remove-AzMonitorLogAnalyti…
Script     1.1.0                 Az.MySql                            {Get-AzMySqlConfiguration, Get-AzMySqlConnectionString, Get-AzMySqlFirewallRule, Get-AzMySqlFlexi…
Script     0.10.0                Az.NetAppFiles                      {Approve-AzNetAppFilesReplication, Get-AzNetAppFilesAccount, Get-AzNetAppFilesActiveDirectory, Ge…
Script     5.1.0                 Az.Network                          {Add-AzApplicationGatewayAuthenticationCertificate, Add-AzApplicationGatewayBackendAddressPool, A…
Script     0.1.2                 Az.NetworkFunction                  {Get-AzNetworkFunctionCollectorPolicy, Get-AzNetworkFunctionTrafficCollector, New-AzNetworkFuncti…
Script     0.1.0                 Az.Nginx                            {Get-AzNginxCertificate, Get-AzNginxConfiguration, Get-AzNginxDeployment, New-AzNginxCertificate…}
Script     1.1.1                 Az.NotificationHubs                 {Get-AzNotificationHub, Get-AzNotificationHubAuthorizationRule, Get-AzNotificationHubListKey, Get…
Script     3.2.0                 Az.OperationalInsights              {Disable-AzOperationalInsightsIISLogCollection, Disable-AzOperationalInsightsLinuxCustomLogCollec…
Script     0.1.0                 Az.Orbital                          {Get-AzOrbitalAvailableGroundStation, Get-AzOrbitalAvailableSpacecraftContact, Get-AzOrbitalConta…
Script     0.3.0                 Az.Peering                          {Get-AzLegacyPeering, Get-AzPeerAsn, Get-AzPeering, Get-AzPeeringCdnPeeringPrefix…}
Script     1.5.1                 Az.PolicyInsights                   {Get-AzPolicyEvent, Get-AzPolicyMetadata, Get-AzPolicyRemediation, Get-AzPolicyState…}
Script     0.1.0                 Az.Portal                           {Get-AzPortalDashboard, New-AzPortalDashboard, Remove-AzPortalDashboard, Set-AzPortalDashboard…}  
Script     1.1.0                 Az.PostgreSql                       {Get-AzPostgreSqlConfiguration, Get-AzPostgreSqlConnectionString, Get-AzPostgreSqlFirewallRule, G…
Script     1.2.0                 Az.PowerBIEmbedded                  {Get-AzPowerBIEmbeddedCapacity, Get-AzPowerBIWorkspace, Get-AzPowerBIWorkspaceCollection, Get-AzP…
Script     1.0.3                 Az.PrivateDns                       {Add-AzPrivateDnsRecordConfig, Get-AzPrivateDnsRecordSet, Get-AzPrivateDnsVirtualNetworkLink, Get…
Script     0.2.0                 Az.ProviderHub                      {Get-AzProviderHubCustomRollout, Get-AzProviderHubDefaultRollout, Get-AzProviderHubNotificationRe…
Manifest   0.2.0                 Az.Purview                          {Add-AzPurviewAccountRootCollectionAdmin, Get-AzPurviewAccount, Get-AzPurviewAccountKey, Get-AzPu…
Script     0.1.0                 Az.Quota                            {Get-AzQuota, Get-AzQuotaOperation, Get-AzQuotaRequestStatus, Get-AzQuotaUsage…}
Script     6.1.0                 Az.RecoveryServices                 {Add-AzRecoveryServicesAsrReplicationProtectedItemDisk, Backup-AzRecoveryServicesBackupItem, Copy…
Script     1.6.0                 Az.RedisCache                       {Export-AzRedisCache, Get-AzRedisCache, Get-AzRedisCacheFirewallRule, Get-AzRedisCacheKey…}       
Script     1.1.0                 Az.RedisEnterpriseCache             {Export-AzRedisEnterpriseCache, Get-AzRedisEnterpriseCache, Get-AzRedisEnterpriseCacheDatabase, G…
Script     1.0.3                 Az.Relay                            {Get-AzRelayAuthorizationRule, Get-AzRelayHybridConnection, Get-AzRelayKey, Get-AzRelayNamespace…}
Script     0.11.0                Az.Reservations                     {Get-AzReservation, Get-AzReservationAvailableScope, Get-AzReservationCatalog, Get-AzReservationH…
Script     0.13.0                Az.ResourceGraph                    {Search-AzGraph, Get-AzResourceGraphQuery, New-AzResourceGraphQuery, Remove-AzResourceGraphQuery…}
Script     1.1.0                 Az.ResourceMover                    {Add-AzResourceMoverMoveResource, Get-AzResourceMoverMoveCollection, Get-AzResourceMoverMoveResou…
Script     6.4.0                 Az.Resources                        {Export-AzResourceGroup, Export-AzTemplateSpec, Get-AzDenyAssignment, Get-AzDeployment…}
Script     0.8.0                 Az.Search                           {Get-AzSearchAdminKeyPair, Get-AzSearchPrivateEndpointConnection, Get-AzSearchPrivateLinkResource…
Script     1.3.0                 Az.Security                         {Add-AzSecurityAdaptiveNetworkHardening, Add-AzSecuritySqlVulnerabilityAssessmentBaseline, Confir…
Script     3.0.0                 Az.SecurityInsights                 {Get-AzSentinelAlertRule, Get-AzSentinelAlertRuleAction, Get-AzSentinelAlertRuleTemplate, Get-AzS…
Script     2.0.0                 Az.ServiceBus                       {Add-AzServiceBusIPRule, Add-AzServiceBusVirtualNetworkRule, Get-AzServiceBusNamespace, Get-AzSer…
Script     3.1.0                 Az.ServiceFabric                    {Add-AzServiceFabricClientCertificate, Add-AzServiceFabricManagedClusterClientCertificate, Add-Az…
Script     0.1.0                 Az.ServiceLinker                    {Get-AzServiceLinkerConfigurationForContainerApp, Get-AzServiceLinkerConfigurationForSpringCloud,…
Script     1.4.1                 Az.SignalR                          {Get-AzSignalR, Get-AzSignalRKey, Get-AzSignalRUsage, New-AzSignalR…}
Script     0.3.0                 Az.SpringCloud                      {Deploy-AzSpringCloudApp, Disable-AzSpringCloudTestEndpoint, Enable-AzSpringCloudTestEndpoint, Ge…
Script     4.1.0                 Az.Sql                              {Add-AzSqlDatabaseToFailoverGroup, Add-AzSqlElasticJobStep, Add-AzSqlElasticJobTarget, Add-AzSqlI…
Script     1.1.0                 Az.SqlVirtualMachine                {Get-AzAvailabilityGroupListener, Get-AzSqlVM, Get-AzSqlVMGroup, New-AzAvailabilityGroupListener…}
Script     0.1.0                 Az.Ssh                              {Enter-AzVM, Export-AzSshConfig}
Script     1.3.2                 Az.StackHCI                         {Add-AzStackHCIVMAttestation, Disable-AzStackHCIAttestation, Disable-AzStackHCIRemoteSupport, Ena…
Script     5.1.0                 Az.Storage                          {Add-AzRmStorageContainerLegalHold, Add-AzStorageAccountManagementPolicyAction, Add-AzStorageAcco…
Script     0.1.0                 Az.StorageMover                     {Get-AzStorageMover, Get-AzStorageMoverAgent, Get-AzStorageMoverEndpoint, Get-AzStorageMoverJobDe…
Script     1.7.0                 Az.StorageSync                      {Get-AzStorageSyncCloudEndpoint, Get-AzStorageSyncGroup, Get-AzStorageSyncServer, Get-AzStorageSy…
Script     2.0.0                 Az.StreamAnalytics                  {Get-AzStreamAnalyticsCluster, Get-AzStreamAnalyticsClusterStreamingJob, Get-AzStreamAnalyticsDef…
Script     0.8.1                 Az.Subscription                     {Get-AzSubscriptionAlias, New-AzSubscriptionAlias, Remove-AzSubscriptionAlias, Update-AzSubscript…
Script     1.0.0                 Az.Support                          {Get-AzSupportProblemClassification, Get-AzSupportService, Get-AzSupportTicket, Get-AzSupportTick…
Script     2.0.0                 Az.Synapse                          {Add-AzSynapseDataFlowDebugSessionPackage, Add-AzSynapseTriggerSubscription, Clear-AzSynapseSqlPo…
Script     0.2.0                 Az.TimeSeriesInsights               {Get-AzTimeSeriesInsightsAccessPolicy, Get-AzTimeSeriesInsightsEnvironment, Get-AzTimeSeriesInsig…
Script     1.1.0                 Az.TrafficManager                   {Add-AzTrafficManagerCustomHeaderToEndpoint, Add-AzTrafficManagerCustomHeaderToProfile, Add-AzTra…
Script     0.5.0                 Az.VMware                           {Get-AzVMwareAddon, Get-AzVMwareAuthorization, Get-AzVMwareCloudLink, Get-AzVMwareCluster…}       
Script     2.11.5                Az.Websites                         {Add-AzWebAppAccessRestrictionRule, Add-AzWebAppTrafficRouting, Edit-AzWebAppBackupConfiguration,…
Script     0.1.0                 Az.WindowsIotServices               {Get-AzWindowsIotServicesDevice, New-AzWindowsIotServicesDevice, Remove-AzWindowsIotServicesDevic…
Script     9.1.0                 AzPreview



### Error output

_No response_
Kaloszer commented 1 year ago

Possible to get it using the newest api call:

$content = (Invoke-AzRestMethod -Uri 'https://management.azure.com/subscriptions/000000000000000-0000000-00000/resourceGroups/rgname/providers/Microsoft.OperationalInsights/workspaces/workspacename/providers/Microsoft.SecurityInsights/alertRuleTemplates/ruleid?api-version=2022-11-01-preview').content | ConvertFrom-Json

image

dingmeng-xue commented 1 year ago

@Kaloszer , thanks for information. It is feature request and needs module owner to upgrade API version.