Defend rebrand from Egress to KnowBe4

[olliespires]

Required items, please complete

Change(s):

• Changed display wording from Egress to KnowBe4
• Changed file names and folders to match

Reason for Change(s):

• Egress has been purchased by KnowBe4

Version Updated:

• Yes, from 3.0.0 to 3.1.0, was this correct?

Testing Completed:

• Yes
• Tested using the V3 solution builder
• Tested in our Sentinel Dev environment, see below screenshot of events coming through

• Also tested with the UI definition sandbox as shown below, can see KnowBe4 Defend rather than Egress Defend wording:

Checked that the validations are passing and have addressed any issues that are present:

• Yes (check, will finish this when they have run)

Before the submission has been made, please look at running the KQL and Yaml Validation Checks locally.
https://github.com/Azure/Azure-Sentinel#run-kql-validation-locally

Checked that the validations are passing and have addressed any issues that are present:

• Yes/No/Need Help

Note: Let us know if you have tried fixing the validation error and need help.

References:

• Guidance for Detection checks
• General contribution guidance
• PR validation troubleshooting

---

[olliespires]

@olliespires please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@microsoft-github-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@microsoft-github-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@microsoft-github-policy-service agree company="Microsoft"

Contributor License Agreement

@microsoft-github-policy-service agree [company="KnowBe4"]

[olliespires]

@olliespires the command you issued was incorrect. Please try again.

Examples are:

@microsoft-github-policy-service agree

and

@microsoft-github-policy-service agree company="your company"

@microsoft-github-policy-service agree company="KnowBe4"

[olliespires]

Hi @v-maheshbh, I have copied the KnowBe4 logo into the workbooks logos folder, correct me if I'm wrong but from the error I think that should fix the failing Workbooks validation.

I also saw the KQL validation failed, should I be removing the DefendAuditData.txt from the parsers folder? Will this affect anything?

[v-maheshbh]

Hi @olliespires

BasePath Format:
Modify the BasePath to the following structure:
C:\GitHub\Azure-Sentinel\solutions\Solution Name
Release Notes Version:
Update the version in the ReleaseNotes to 3.0.1
Ensure that the latest version is listed first in the release notes and include an appropriate comment.
and please refer to the detailed solution and the corresponding folder structure below for further clarity
https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/CiscoMeraki

Thanks!