search

Cloud-Architekt / AzureAD-Attack-Defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
2k stars 295 forks source link

Importing Workbook #35

Closed MikJagger closed 1 year ago

MikJagger commented 1 year ago

Hi Guys! When working through the setup I'am encountering an issue with the Workbook creation. Adding the Workbook based on the add Sentinel Workbook procedure and copy/pasting the raw workbook code in the advanced settings doesn't let me save the workbook because of error:

'Cannot load from JSON: This item type is 1 (text), but the JSON provided was undefined (Unknown)'

Structure of the paste looks good and is aligned with the original layout from the github repo. Maybe you guys have any ideas/suggestions?

Thanks in advance!

DeanGross commented 1 year ago

@MikJagger I just did this and it worked fine, but I initially saved it to my new resource group for this project which kept it from showing up in the Sentinel workbook screen. reimporting and saving to my regular sentinel resource group solved that problem.

Did you get the first and last braces { }? also, make sure that you overwrite ALL of the sample text on the Gallery Template page and then click Apply before trying to save.

MikJagger commented 1 year ago

Thanks for the support! It was my bad (offcourse), I opened-up the advanced-editor wiithin the pre-configured 'text' item that is created automatically when creating new workbook. Offcourse I needed to use the 'advanced-editor' from the top level menu as shown in screenshot below.

The provided Workbook template works as a charm!

screen

DeanGross commented 1 year ago

Glad you were able to get it working. This looks like it will be very useful

Cloud-Architekt commented 1 year ago

Thanks @DeanGross for supporting @MikJagger regarding this question! We really appreciate it...