404 Client Error for Sentinel Technique Import

[rcegan]

Currently getting a bug when trying to authenticate into an environment:

python .\dettectinator.py -p TechniqueSentinelAlertRules --app_id "<redacted>" --tenant_id "<redacted>" --subscription_id "<redacted>" --resource_group "<redacted>" --workspace "<redacted>" --secret "<redacted>"

The error:

requests.exceptions.HTTPError: 404 Client Error: Not Found for url: https://management.azure.com/subscriptions/<redacted>/resourceGroups/<redacted>/providers/Microsoft.OperationalInsights/workspaces/<redacted>/providers/Microsoft.SecurityInsights/alertRules?api-version=2024-01-01-preview

Not sure if this is related to permissions but I've granted the app some additional API permissions, no difference.

[rubinatorz]

hi @rcegan

The Azure Management SecurityInsights API URL is still working on my side, but I guess some if the ID's is not correct filled in. If I use an invalid subscription_id I get a HTTP error 404. When I use an invalid workspace name or resource_group_name then I get a HTTP error 403. So I would suggest to double check the ID's given in the command line.