WIP on add_new_user_in_microsoft_teams

add_new_user_in_microsoft_teams/README.md

@@ -0,0 +1,8 @@
+# Analyze Domains Through Multiple Sources
+
+Investigate suspicious domains and identify false positives by leveraging threat intelligence tools, including URLhaus, VirusTotal, and URLScan, to gather more context and respond faster.
+
+## Usage
+
+- Add your APIVoid, IP2Location, Urlscan and Virustotal API key to `flowpipe.pvars`
+- Run the pipeline and specify `domain`, e.g.,  `flowpipe pipeline run domains_review_through_multiple_sources --pipeline-arg 'domain=example.com'`

add_new_user_in_microsoft_teams/add_new_user_in_microsoft_teams.hcl

@@ -0,0 +1,82 @@
+pipeline "add_new_user_in_microsoft_teams" {
+  title       = "Add a new user in Microsoft Office 365"
+  description = "Add a new user in Microsoft Office 365."
+
+  param "teams_access_token" {
+    type        = string
+    description = "The MS Team access token to use for the API request."
+    default     = var.teams_access_token
+  }
+
+  param "display_name" {
+    type        = string
+    description = "The name to display in the address book for the user."
+  }
+
+  param "account_enabled" {
+    type        = bool
+    description = "If the account is enabled then true; otherwise, false."
+  }
+
+  param "mail_nickname" {
+    type        = string
+    description = "The mail alias for the user."
+  }
+
+  param "user_principal_name" {
+    type        = string
+    description = "The user principal name ([email protected])."
+  }
+
+  param "password" {
+    type        = string
+    description = "The password for the user."
+  }
+
+  param "license_sku_ids" {
+    type        = list(string)
+    description = "The unique identifier for the available licenses."
+  }
+
+  # Create user
+  step "pipeline" "create_user" {
+    pipeline = teams.pipeline.create_user
+    args = {
+      access_token        = param.teams_access_token
+      password            = param.password
+      user_principal_name = param.user_principal_name
+      mail_nickname       = param.mail_nickname
+      account_enabled     = param.account_enabled
+      display_name        = param.display_name
+
+    }
+  }
+
+  # Asign license to the user
+  step "pipeline" "assign_licenses_to_user" {
+    depends_on = [step.pipeline.create_user]
+    pipeline   = teams.pipeline.assign_licenses_to_user
+    args = {
+      access_token = param.teams_access_token
+      sku_ids      = param.license_sku_ids
+      user_id      = param.user_principal_name
+    }
+  }
+
+  # Create JIRA issue
+  step "pipeline" "create_issue" {
+    depends_on = [step.pipeline.assign_licenses_to_user]
+    pipeline   = jira.pipeline.create_issue
+    args = {
+      api_base_url = param.api_base_url
+      token        = param.token
+      user_email   = param.user_email
+      project_key  = param.project_key
+      summary      = "Added a new user: ${step.pipeline.create_user.output.create_user.userPrincipalName}"
+      description  = step.pipeline.create_user.output.create_user
+      issue_type   = param.issue_type
+    }
+  }
+
+
+}

add_new_user_in_microsoft_teams/flowpipe.pvars.example

@@ -0,0 +1,4 @@
+apivoid_api_key=<APIVoid_API_Key>
+ip2location_api_key=<IP2Location_API_Key>
+urlscan_api_key=<Urlscan_API_Key>
+virustotal_api_key=<Virustotal_API_Key>

add_new_user_in_microsoft_teams/mod.hcl

@@ -0,0 +1,22 @@
+mod "add_new_user_in_microsoft_teams" {
+  title       = "Add a new user in Microsoft Office 365"
+  description = "Add a new user in Microsoft Office 365."
+
+  require {
+    mod "github.com/turbot/flowpipe-mod-teams" {
+      version = "v0.0.1-rc.6"
+      args = {
+        access_token = var.teams_access_token
+      }
+    }
+    mod "github.com/turbot/flowpipe-mod-jira" {
+      version = "v0.0.1-rc.2"
+      args = {
+        token        = var.jira_token
+        user_email   = var.jira_user_email
+        api_base_url = var.jira_api_base_url
+        project_key  = var.jira_project_key
+      }
+    }
+  }
+}

add_new_user_in_microsoft_teams/variables.hcl

@@ -0,0 +1,29 @@
+variable "jira_token" {
+  type        = string
+  description = "Jira API access token."
+  # TODO: Add once supported
+  # sensitive  = true
+}
+
+variable "jira_user_email" {
+  type        = string
+  description = "Email-id of the Jira user."
+}
+
+variable "jira_api_base_url" {
+  type        = string
+  description = "Jira API base URL."
+}
+
+variable "jira_project_key" {
+  type        = string
+  description = "The key identifying the Jira project."
+}
+
+variable "teams_access_token" {
+  description = "The Microsoft personal security access_token to authenticate to the Microsoft graph APIs."
+  type        = string
+  # TODO: Add once supported
+  #sensitive  = true
+  default = "eyJ0eXAiOiJKV1QiLCJub25jZSI6IlgwUnNUV2ZPcVNLMXFSOTBLOWJ2a2JrQl95aG9zMmdkMjZsdHNfT25DdkEiLCJhbGciOiJSUzI1NiIsIng1dCI6IlQxU3QtZExUdnlXUmd4Ql82NzZ1OGtyWFMtSSIsImtpZCI6IlQxU3QtZExUdnlXUmd4Ql82NzZ1OGtyWFMtSSJ9.eyJhdWQiOiIwMDAwMDAwMy0wMDAwLTAwMDAtYzAwMC0wMDAwMDAwMDAwMDAiLCJpc3MiOiJodHRwczovL3N0cy53aW5kb3dzLm5ldC9mZGRiM2QwNC1hZDYxLTRiMGMtYWY1YS0yOTMyYTI3N2QyYmMvIiwiaWF0IjoxNzAwNjU2MTI4LCJuYmYiOjE3MDA2NTYxMjgsImV4cCI6MTcwMDc0MjgyOCwiYWNjdCI6MCwiYWNyIjoiMSIsImFpbyI6IkFUUUF5LzhWQUFBQXFCeSsvcGxwbFc4MFFZQ2FpWlJScGNmcTJsV2pIZnc0cFltblVzK0g3TnkrNVBlU1dvVDVVMWxsZldhZURJd3giLCJhbXIiOlsicHdkIl0sImFwcF9kaXNwbGF5bmFtZSI6IkdyYXBoIEV4cGxvcmVyIiwiYXBwaWQiOiJkZThiYzhiNS1kOWY5LTQ4YjEtYThhZC1iNzQ4ZGE3MjUwNjQiLCJhcHBpZGFjciI6IjAiLCJmYW1pbHlfbmFtZSI6Ik8zNjUiLCJnaXZlbl9uYW1lIjoiU3RlYW1waXBlIiwiaWR0eXAiOiJ1c2VyIiwiaXBhZGRyIjoiNDkuMzcuNTQuMjQiLCJuYW1lIjoiU3RlYW1waXBlIE8zNjUiLCJvaWQiOiI5NDRhOGUxNC03YTZmLTQ4YzYtODgwNS02ZTkzNjEyZjZjMmIiLCJwbGF0ZiI6IjUiLCJwdWlkIjoiMTAwMzIwMDIwNkM1Mzk1RiIsInJoIjoiMC5BWHdBQkQzYl9XR3RERXV2V2lreW9uZlN2QU1BQUFBQUFBQUF3QUFBQUFBQUFBQjhBSTguIiwic2NwIjoiQVBJQ29ubmVjdG9ycy5SZWFkV3JpdGUuQWxsIEF1ZGl0TG9nLlJlYWQuQWxsIENhbGVuZGFycy5SZWFkIENoYW5uZWwuQ3JlYXRlIENoYW5uZWxNZXNzYWdlLlJlYWRXcml0ZSBDaGFubmVsTWVzc2FnZS5TZW5kIENoYW5uZWxTZXR0aW5ncy5SZWFkLkFsbCBDaGFubmVsU2V0dGluZ3MuUmVhZFdyaXRlLkFsbCBDaGF0LkNyZWF0ZSBDaGF0LlJlYWRXcml0ZSBDb250YWN0cy5SZWFkIERldmljZU1hbmFnZW1lbnRDb25maWd1cmF0aW9uLlJlYWQuQWxsIERldmljZU1hbmFnZW1lbnRDb25maWd1cmF0aW9uLlJlYWRXcml0ZS5BbGwgRGV2aWNlTWFuYWdlbWVudE1hbmFnZWREZXZpY2VzLlByaXZpbGVnZWRPcGVyYXRpb25zLkFsbCBEaXJlY3RvcnkuUmVhZC5BbGwgRGlyZWN0b3J5LlJlYWRXcml0ZS5BbGwgRmlsZXMuUmVhZC5BbGwgR3JvdXAuUmVhZC5BbGwgR3JvdXAuUmVhZFdyaXRlLkFsbCBJZGVudGl0eVJpc2tFdmVudC5SZWFkLkFsbCBJbmZvcm1hdGlvblByb3RlY3Rpb25Qb2xpY3kuUmVhZCBNYWlsLlJlYWQgTWFpbC5TZW5kIE1haWxib3hTZXR0aW5ncy5SZWFkIE1hbmFnZWRUZW5hbnRzLlJlYWQuQWxsIE5vdGVzLlJlYWQuQWxsIG9wZW5pZCBQZW9wbGUuUmVhZCBQb2xpY3kuUmVhZC5BbGwgUG9saWN5LlJlYWRXcml0ZS5BdXRoZW50aWNhdGlvbk1ldGhvZCBwcm9maWxlIFJlcG9ydFNldHRpbmdzLlJlYWQuQWxsIFJvbGVNYW5hZ2VtZW50LlJlYWQuQWxsIFNlY3VyaXR5RXZlbnRzLlJlYWQuQWxsIFNlY3VyaXR5RXZlbnRzLlJlYWRXcml0ZS5BbGwgU2hhcmVQb2ludFRlbmFudFNldHRpbmdzLlJlYWQuQWxsIFRlYW0uQ3JlYXRlIFRlYW0uUmVhZEJhc2ljLkFsbCBUZWFtTWVtYmVyLlJlYWQuQWxsIFRlYW1NZW1iZXIuUmVhZFdyaXRlLkFsbCBUZWFtU2V0dGluZ3MuUmVhZC5BbGwgVGVhbVNldHRpbmdzLlJlYWRXcml0ZS5BbGwgVGVhbXdvcmtBcHBTZXR0aW5ncy5SZWFkLkFsbCBUZWFtd29ya1RhZy5SZWFkV3JpdGUgVGhyZWF0U3VibWlzc2lvbi5SZWFkIFRocmVhdFN1Ym1pc3Npb24uUmVhZC5BbGwgVXNlci5SZWFkIFVzZXIuUmVhZC5BbGwgVXNlci5SZWFkQmFzaWMuQWxsIFVzZXIuUmVhZFdyaXRlLkFsbCBVc2VyQXV0aGVudGljYXRpb25NZXRob2QuUmVhZCBVc2VyQXV0aGVudGljYXRpb25NZXRob2QuUmVhZC5BbGwgVXNlckF1dGhlbnRpY2F0aW9uTWV0aG9kLlJlYWRXcml0ZSBVc2VyQXV0aGVudGljYXRpb25NZXRob2QuUmVhZFdyaXRlLkFsbCBlbWFpbCIsInN1YiI6IkRMVElWdzBmZ0pLSGRDTHNoUGNhSnlOVVBZeGF4bXdwX0VoaWFMTzRUWXMiLCJ0ZW5hbnRfcmVnaW9uX3Njb3BlIjoiTkEiLCJ0aWQiOiJmZGRiM2QwNC1hZDYxLTRiMGMtYWY1YS0yOTMyYTI3N2QyYmMiLCJ1bmlxdWVfbmFtZSI6InN0ZWFtcGlwZUB0dXJib3RvZmZpY2Uub25taWNyb3NvZnQuY29tIiwidXBuIjoic3RlYW1waXBlQHR1cmJvdG9mZmljZS5vbm1pY3Jvc29mdC5jb20iLCJ1dGkiOiJnX2NxTkp5emRreXU1TTNVenJsdEFBIiwidmVyIjoiMS4wIiwid2lkcyI6WyI2MmU5MDM5NC02OWY1LTQyMzctOTE5MC0wMTIxNzcxNDVlMTAiLCJiNzlmYmY0ZC0zZWY5LTQ2ODktODE0My03NmIxOTRlODU1MDkiXSwieG1zX2NjIjpbIkNQMSJdLCJ4bXNfc3NtIjoiMSIsInhtc19zdCI6eyJzdWIiOiJKb2Z1bWlLcTJzeGI3ZVlXaE5hTTZUSWVOOUdxeVMxd2otQTJkc2xmR0o0In0sInhtc190Y2R0IjoxNjE2Njk2MjM0fQ.CNPrVVUAIH6mi9ZnC6xt5jCW9gLneDqqk5AkuC2LUZ1V8f6aU4F4VrJwW3kNCeT3qucI09RALPfcHnNtpMGE6CxLrwoo_hXtUDI5PcJCMrQxO-iLJjmbNVMRr7HDZUgRO8QAd62vbWARjXiz_aX41sYfYuTt-KKw21A_HCkzrK7SjZ1Y2iCa1S0W5LENfUAPJJ2yCLtfJjCal8s9QbADbCdX7U8my_tiWJlrcHpi-rCIMQ7L17n9AU1cNu_e-vJmaQX__e4NQMo9LKwOfsM-HX7HIDM_TCXa9vrZP6KrB_-5jLTI8K4EDWlizeNiNcIRYguPnTJJADu4_sIeVLzITg"
+}