Digital Shadows solution

[shikhin-metron]

---

Change(s):

• Initial PR
• Added solution by Digital Shadows for Azure Sentinel
• Contains Analytic rule yaml file, Connector Azure function, Playbook JSON file, and Workbook JSON file.

Reason for Change(s):

• Initial PR

Testing Completed:

• Yes

Checked that the validations are passing and have addressed any issues that are present:

• Yes

---

[v-sabiraj]

@shikhin-metron , please fix the typo Github to GitHub and deployement to deployment in readme.md file, thanks

[v-sabiraj]

@shikhin-metron, can you please update the README file for playbooks. Thanks.

[ds-jdcockrill]

Suggested change

	if not comment['content']:
	if not 'content' in comment:

the current version of this will error, rather than fail, if the 'content' key is missing from the comment object.

[ds-jdcockrill]

['user'] can sometimes be null.

Suggested change

	azure_obj['comments'].append({
	'user_name': comment['user']['name'],
	'content': comment['content'],
	'id': comment['id'],
	'created': comment['created']
	})
	uname = comment['user']['name'] if comment['user'] and 'name' in comment['user'] else None
	azure_obj['comments'].append({
	'user_name': uname,
	'content': comment['content'],
	'id': comment['id'],
	'created': comment['created']
	})

[v-sabiraj]

Hey @devikamehra, can you please check and approve the changes, thanks.

[ds-jdcockrill]

@v-sabiraj - are there any further approvals required or can this PR be merged?
@anki-narravula requested changes some time ago, but we also fixed the requested issues a long time ago as well so can you please tell us what is left before this PR merges?

[v-sabiraj]

Hey @shikhin-metron, the recent changes done for code change in python files are not implemented in zip folder, please check and update the zip, thanks.

[v-sabiraj]

@shikhin-metron, please move the Solution_DigitalShadowsSearchlight.json file by creating a folder named as data inside solution folder, please refer this solution for reference.

Devika already approved playbooks.