weixian-zhang / panorama Goto Github PK

A Workbook to show all VMs and their running processes.
Each process shows the CPU, Memory and Network Bytes information for each process.
Dependency Service Map - Explore data of Service Map whether aforementioned features are feasible to build

Firewall Insights Workbook to be able to filter by Firewall name

Instead of showing all IPs which likely includes Azure DC Ip ranges and Public IPs from Internet, to filter by VNet Private IP ranges

Able to filter by:

• Firewall name
• Signin Account Type = User
• User Name

WAF Insights Workbook able to view WAF logs in tabular format for

• Application Gateway
• Front Door

Ref:

• https://docs.microsoft.com/en-us/azure/application-gateway/log-analytics
• https://docs.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-monitor

Able to filter by:

• Signin Account Type = User
• User Name

Explore the possibility and built:
Table to show filterable User sign-ins records through Bastion with Azure-Username in addition to VM-Username

A workbook on Key Vault showing audit logs of Who-did-What on Vault, Secret, Key and Certificate.

A new tab to show data captured from ActivityLogs-ResourceHealth to get planned (customer initiated) and unplanned VM restarts

Sample query to retrieve IDPS logs from Firewall Premium

AzureDiagnostics
| where ResourceType == "AZUREFIREWALLS"
| where OperationName == "AzureFirewallIDSLog"
| parse msg_s with Protocol " request from " SourceIP ":" SourcePort " to " DestIP ":" DestPort "." Action "." SignatureID "." Message

Able to filter Writes & Delete Activities by:

• ResourceCategory
• Resource
• Writes only, Deletes only or both
• Signin Account Type = User
• User Name