Add Entra Service Principal GUID Resolver Plugin

[inwafula]

Summary

Adds a new community plugin under Plugins/Community Based Plugins/Microsoft Graph API plugins/GUID Resolution/ that resolves GUIDs from security alerts to Microsoft Entra service principal (Enterprise Application) display names via the Microsoft Graph API.

Files Added

• sp guid resolver-plugin.yaml - Plugin manifest with AAD Delegated auth
• sp guid resolver-plugin-spec.yaml - OpenAPI spec with two operations: lookup by Object ID and lookup by Application (Client) ID / appId
• Readme.md - Documentation with overview, setup instructions, and example prompts

Features

• Resolve a service principal by Object ID (commonly found in alert Caller fields)
• Resolve a service principal by Application (Client) ID / appId
• Returns display name, Object ID, appId, service principal type, account enabled status, and publisher name
• Can also be used as a tool when building a Security Copilot Custom Agent