From 87b27b3b49fcf717a7ab656c391f539878d57b83 Mon Sep 17 00:00:00 2001
From: Marsell Kukuljevic <mk@spearhead.systems>
Date: Tue, 26 Nov 2024 17:58:00 +0100
Subject: [PATCH] Add support for configurable Azure Defender severity, plus
 fix a sporadic resource-group bug.

---
 check_mk-azure/azure-spearhead-0.2.3.mkp      | Bin 5695 -> 0 bytes
 check_mk-azure/azure-spearhead-0.3.0.mkp      | Bin 0 -> 6072 bytes
 .../base/plugins/agent_based/azure_common.py  |  10 ++-
 .../agents/special/agent_azure_common         |  13 +++-
 .../check_mk/web/plugins/wato/azure_common.py |  71 +++++++++++++++++-
 5 files changed, 86 insertions(+), 8 deletions(-)
 delete mode 100755 check_mk-azure/azure-spearhead-0.2.3.mkp
 create mode 100755 check_mk-azure/azure-spearhead-0.3.0.mkp

diff --git a/check_mk-azure/azure-spearhead-0.2.3.mkp b/check_mk-azure/azure-spearhead-0.2.3.mkp
deleted file mode 100755
index 8dfd2e7465454ee7604d1daea1c71601e7b95357..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 5695
zcma)<RZtWFphXEOLAo2HJC^Q{ZjeQ~my#|4fu%zlVd*aEmJS6e1*C+Pr8^}T*kxbL
zy!ZEJ-rt?Mf9LBQres_+;VD@V2I@@C-4EK;_RwGhZaXUje6EXUI{v3R372%;$pZZQ
z<0|SWOZ$pnnUprk5%+iM$$Z36U+^W1VcY2+y^v(2t@f}0<I^Z91{EK5ygnoK8d|7~
z%(lYtHcAf^bfF2VSvd*_41|U<aBV<O-Yc-2ai*bh>;I+h4ZE6+afj+=xl%))zRRc7
z(&^WoWGwI&&(Uz!aC)6Or~F~utAM=0!^c$3cG_~<jBk?AaZuo;7cKFHWB=51Nhg@K
z(vyRSJNHFY2{WXQuJRES9!@c$g%FY!;p;HYllUQXJjygcxh_e&Zvl)93&R!v&T7Z`
zs&ktzHd2pY5A=E)E4(XQcF|I2+Uww{ZjTJpoW*k9ts$elT&^mJX=ES#nK28NshIFL
z>>KOcj3FS+ftO#Q@lJXH5?2$*BrYew`VN~S_EvKcUZ1X_rgkene`h}G@f+ip{fbAc
z1{WRL)EP35xS~_;6?#31*?kA{4An}b26C`C^rDqwYWR307!~xqYj=5zi0H!!a6)ZB
zp{rugC_}^$``_43uf{7%(*<QOOltgJ*gP*!Fcww7ZQ*d%LM`h|DT3PH&*cUd{*ts6
z23GzY%i-yd;R~53l*~W@3(2pe80_ktrkw7mH6A{_<>$Q4O@~IMh0Ih76M={K4Y?;2
z%gxqJr9T2rekZvNpf%Pm^S&a)pd_Fl>AfALojEw!wb_h`j=O~4ZLE*XvOisPg!WlE
zpwiIskFVygE^Y#$V<@;!cQ<t5YUAj=%7+^0dgvm&B%QNj^+#v0#1cw(>*>OrJI&&N
z&t-lyN)@<i5`DIIzbo{q$zD8<qcZ#tvz3ss(UFV0n0WH2Bn!3b;<%6G>*9jBn4esR
zVvnI&n;S#Sq}jp4MmTb574#5ef3?_I6$$%aZ`38I7Vx6acQ~ZV=w<D)3V*|+Qc95v
zFM8d+ylF742iLQYW)Vp(6U^2zSua~zuEdd~sLx^Dd@FENvm%V!Jo-I8m@u;n;bXY~
z35UKtdk0c1zRg{O3d-qx2WajnrY=j#N`;gx84b0~-@T_pdV61Wb(uV#2Vm*{y}pc+
zm((wof1zItqtZ86$HWyUz1mm^^1|yN6P?1t&rA>Yi20XNuO<7K7qW{;vNhOECt8fF
zo!pa+C3aS>22{_Piv*CtRj^3y3M<i{vN2#>gi@S1s4R3-oez-FmPt0kg#?*h7o8|#
z^0ix8w)h+m1^S-t9t(p%`Hox~9wN?*_uiH<y%pSev#83~hte}4K{3OxCH6ah*_n?x
zLTrVqDv#o~egIfM`pPvYM)^?V8#6{N_5Sh9;5rcSf1#RiX!~jGgyt1)bw*j@!#&B9
zj#@@^gO-ls%IBK5!<joWbQUWb@~CHX=9xxtWdj8kk58;*+RmIdxK-fa2r%7S$1#}q
z;oBIW+_-w_<G;_28PDbiCb*WuxWcU`9RFOlMQkqfqnXN!$Nj0LzlBs}v>&`2D@PhJ
zoIL%}P$4)61}b4v=i^?Cd#L*B;H-U0t><=DHdBsNnxjiH!kv3<m#@mrgL|mVc7Xe8
ze3ZzS6x-<f>uE0T1zt)_+pE>ypPHxGWL4C^$qvyIGQ?X&gRmJ(XYi!H4+;cum~2aQ
zSft~Yp21s6u9daawcM&11s_QtW{j|yeGD(G(URBw_S<)pZp3;Ir=+<S-?c4d;HOa}
zB(+3_A1il{`s>xO$Pp><(lRy3Q)_0j(@uVkP8i5AGtKH?U(H637HeP&9V1;z$(alZ
z>xn{7EFAFmeZ%O|jm@u7Hi7-u$yCGqXZk0-JL}3NE_Ug$?5$4^wnF~o*o-!%##|u{
zhgr#^7_HGK=EMU4OsUC`NzvranjyFMP4-Idi#8SgayaKf`{O{QkEZtBWI%@VbH!(4
zF-mN1hqx=|dB-Ow=iI&lZ)EmeGVb2vwa_csR^OYGGmfJUXv!FgLCHpxo$t>_<k?C0
zg?xXb^9TkGtcy^qeR*_R=O7siNWe^a+njgXZe$z(5<RBMN68>4-MISCTan+NHzLEX
z@B}B-@YSDcLqF?&PLT)z@{U!|vuLQ>{Q@EMoGX#)pZ!hN&9|7z7?q?~!+<Z<8(z4x
zwdZ4LypxJ(fKzf1O;g#NiQHrc*7WdhPaW0wdVw)Bdz0|qf(u~vPj27>#^JSLe!9K<
zKm6ZTg~Ar#-AS9_hN{iAC!EF<k!;2Zhn&WnzkEw?<m;i#!3&MN`0|7t_f)_<_+jgI
zg%_Kw2=C=fDg*_UEqi{{x33FY*$Y5l*5+qyNQTVt%kbUl$Y)L0GZAKg?{!*cl4Sw3
z5TZ)Kj9I>a`e!Sf9YzhtW}qCtd2LMpGK0YrvJ*5lA0_@)R?4Kbs2$0|;n9i4V;1ia
zC5N7`yU1D*v2?&)awq($q+!^mFIfyeAlcjCN<G0Vo<|wS?1<fgPnT`)*QR<;cWWkX
zp_zB4EMPo{CkV_O2(>D+b0V+O^c7#4;-t_={1oH92do$o`gw~@&>)EV3#Q|R3BWhY
zeQQO)d^RXBS?NJtYc)9m9Jd1?KK%HvbD0ak*=hDn;O*efqd}`h-qU<<eo?B~&Z$ry
zpKYNkqWAk_?tNcA7I_N`AMMMXG9ez=P%#zB_F_#T$2SU<th=&%@@vKb!*;+99W?}n
z8^%On>C%`4mJVJ^2ltK%I@{X0+)oW7)bE~bH<jJr5`>i*?A9d~z-#Cb_Rkb*U3jP&
zFefH90kx3ra3nZFa>B2PDDdXm^FRSQ06Q<1LOpODDCFw#E8IQI27-b>z=;UDy`jF8
z1BFmIzvpYOz-KajziPbe9<rW7o48hqT}^7^9{qQVq7ucIy|9YHIN6MYdb8aSMo&Z?
za_VAodRFr^m9(6WEt}mq_&a5ddH|-~ofS)>bpTm_MJ`m=USV(RlQU%YbUa*d{QIQ9
zDvzw%5C3d9@Evct;k>F^WQBl)Fs2jhfeGRzSNKrY!9k=E6SYYJNs@w_jM3c(=Of>N
zcTxfl+llIbIcDarQieTVAh9xkmD)pFA_ufw2tPM83yQCB6@8WA?chF0pBsL4xffHF
zpS@tli0&bf;z(lgTuwQ*b--H>Chg)QSK)#Id_IEZYL^zDNL1=9?PHRke1rA84eyud
zoS=r?mD62zJV!bZyWvRm|H1fwj!m%QzA!TXKp_bF_CEpcBMvHtk54=Ac~P+Q^Dl@J
z8JRvS7S#H{z}djrIT_#DIpn$|4gKEx*|=~}$6*6>5bS2id4$L|DhBKo<mxK#NPd#g
zCE`)|u&DpnDA4dW&*q=`vTmd4)6V9-#6|qjKv;yYf3Vi$u}Qg=&P{3C15{gct1W44
z#%r3Q*{scyYojIZN~!T~dVX@62*(S?M^se^SMAOm`rE9XV+@(d(YJmMxj8?(++_#Q
z7~>EC?ByGw{6!3z-N(Q5XX*I+(7)DPgeypeNg-}`*Droh0Hjy8n^}(>^%7`2t2Igg
zAx)=oG#yMmXMi-RWR=*+KUzIAg8V4Yqns{hPc%X{&q<W1H#>h7nuUBpYm8S9xH~qF
zBJ(?FM3o+|c<zO<-wHZe7H?9n&F#DmyET2P=oJlsYZ@QxSN;7(8qqgqgChdjkYc^C
z5T$?Xs8k((G8+m%T<;M)VLlvb!q>F62Pv@t%!H%wrTYP&m$t4G)DjnM=Z~}zs+M{#
z+!x$ee=34igKC~GrerJKGGk||#~gYv=A8;jzx?jlo*vvLZrII$LqK*EHUYiZvTVHg
zr4dl;jKLqeYQ}Yh+YakZ_+SOE$cZXOS=5LrgBZz~2B#=ucQ=}(1GKJWEFQc}BN-m7
zxf7yNMEG3XUoy%kuP#s58q@z$DuI+*%YnY>*R_C=JBKlsrt<cqEL*M}BEz!HQOi;a
zTU{&&z>%9BY-h_EgY{YgOJ3Al;K!&HdWjH2+C*23iFmG+a{G|$E7Mo4X!N-!AJz3#
zJbaF=4OF9h@O*XSN<@tggZA6dIOr;E3)~E*`xm<^2)=NC71#U7)ESmh&~)&MUHe%4
z&h21^O@YLn$y9NMEt^J*H2lT;&o%W0swGvP`<%7fYb?IqcU2c}-r|5TzPuZ1+M~+C
zrK1(;AAarrzAk@(<S=c(#>W6!{9P#9&X*#wPmLVCH1v{*^`&QSzTYZAvr=m_e-NO&
za2oI3)9%`%?9R7&jWBW=Gs!U7cEU6nNME?MM_iinYJqdWx!3Sr<VY^x<*4@g3xI1U
zy^|*!ecH&;T-j+}>AGk}EdB*%OD-q{r>`tGwIL6r4pX2&{76LDFo7KYeZ%AZIwLeJ
zAG_0^V_(p%+}~ab?LCw}%YmS#w4FPMpJWpm*yRu~m)aLEC{mS($kr_<yZ7td97(%x
zxvjqs$7w~s#0v+vWV}|iN)2|VighDOYQ{|{k79L54lsl~<W1;S>z1E~972iRJ-j+Y
zEzVLK7vJss(O6K}Q{j{NKG0g^*+6ICKhWYxljuMYf^=4|$!FIS-XG~TE#Z8IR+@K>
zdQ@dxJ$HU&7AUlh=sBjXY(+Aev5(YPB_GY4JxFggq^AUk8zhb|ds_-JMJ<i0MgGXF
zg1~|&7Oqbj39ap$>`UEju~28Gb?AMD9v1y-BUD^TaJm3t>%)owD}?l{J?S$7M`$W$
z{G-(sBmGR;x;XMhMEL2QNb_lbH85iHPx$FG>kr({y|R;Bsll=Np(?zlK%wBW5$Q{d
z;+XJuM=lY5Ik*YhSyb6*_f>20Z^I<bB=e?T`J~d6z!AmR6v|IB)sRHb+TT}i^LxG+
zN5|GBs)j$(4C9SzQv`1L(NxzfXE!3irSc9+`3A5Ho_Nm7xJ}MCD%%C$Z2#I3;JXcM
zc_%1m_MZKD6$U=$v`5V@Tk-O+hOQ=Py|OV-E?w#<Qc$5>ylrr!OH_RPg3)}fNQXfl
zb{NIFy6yMClnc64iiI7Zlyfd8us}Jjwy<8)g?wJ__g(>OZ@7;rGrhSMs#c~k>Sk~R
z4d<G9c9CN*F4_<}Fm3UPB9k14q@<e%sdDOmE<W4D7&Ei3p~75UHi2)_=|A#Pnus4)
zj|sFOOx)F2_=g}fNG!|p$DqLT9-(A!CX{WG@cg~&_Al1W441xE$gjrq4~!rH@xv6l
zVSg@m5#Y=9FLzO5LCMjQWLdLj6#|ZAZ`?ln_dFD5iT8gmdE+7>ON4(uI)kXD#s2xq
zeH3GWP1Fc<(~-kYlHZ|`bvJFHuafY0;`m*Wcl(w0fp+UYsZ7k{!yBUI;gA6$JSM|8
zCGScriD_?J8HyDJeH`kt6fBvdxR%7@!Nv*Gp7duN{7feYv=S3AxXO6t*Ue`4$Z+he
zv+Nw5vDs?G+!9mQZ9D^<+0na8hS-%!G-KFdu{c=K_zO!F?>JYAv@FUv5lCps_t#oF
z`D?B6%dsMk9$`<Q9oT@Le?U!F-Msq)TJ6%DeX<?{g=@P|Spr%bwu^6Urf47hY@+@8
z`v<r3?N!mNfF_6}>t{=$uV-JdcU-d9(V5>UvLO?7R9p_6?rgc2$|p1-4#TplWsDIc
zPo=BeFYP{xsI$0v7w5FN_|U4c$X>tTZsaEb80Va@lUm40xiY*{GYFFXLZdZn4$iS6
zZc9sp&?_4SQ~wnIl%LO7e1rW85W7c7c}~vV-QJSdp&5#SDTv<qcB6#5XQ)|n-4a|S
z@_PFl$k4wxxFt#trq)}^1@hGy`r*M|6mnQ!89KsD@7)Z0NwS!8cu+-(?B}|Yp?vk)
zFTv^Cgs31+L44!1X-19npfK^YuLM4e_~iDW(++xv<b@yEn_sQ%qk_P{R~^8^rfq7s
z(PM+Up1k4qr4~N#09~z?t?MPKL~~eM`L5*}=TLNdRZXAL+^Vi{fu?yGtO9~>JP4#g
z`GunvlCO6V&nuomGNIBa?e1>QaMVdBbpL)x{SiqN@gx)U&|z9p;i_?3qhFG9Yg@8V
z3-go>y_<>Sf{Y=VjxT|-5AWZToW!4?=nDsFwN$>V6V@BHhoceHZv&mm>9BfJu_Aim
zAUf2k8HeGxgdHlR48e1kws%?82RcQ$Lx+~5LpxD?f5q-ljcY@x7DGwM`@0zAeP9YQ
z;{DS~h<Ec{$$Eh6>Bj#<ZT?q(HU+#jXPLwwcCuvFQR^T7K9!()9++M$6tzTl3#_ww
zP!JtU&o5z44Dq0L&I6kpuNBVyL$8o&sgo!;mv`EI1SVMLG9gz>-)O((*DP4?N|F!A
z-RWm=wu`k$+bXaiQ7JzLB#RR+5-R=<yb92n$qp?4;y7uz*^0kk)r1m|A1kOI*fIJd
zlER<Kz^He0xFZY`(j}w4ruvjNivNX9aK&wuh%b+E#L>(1oOv`XNQA+meVI$2n)A5b
zPhFp{pxLwalK@$nl20DLAY>xo@R((&rX;I^S&QuFrx-mKzM+2f!2!Aw4q<$bWA@OW
z`T2Sv;Tr({F`jmqxgJaQz3HrV9EA(AOxcT4Bw?~L9R3^a0(2iKp&5P=)b1VdVXM>f
zI9bP9(IjN2Yw!l<xx8<rJ02IZ*M|(5Sq?2i#dO&E27e2swiyA|8y1ld-y$!4H9&^G
zOQ^A1DJwOLQcJkGaAF}tQ1N(~hB0T2p+T>Du?ENVUY9AI6NBtD#_rn!oktT#wy?zy
zNfw6}0*wwIl93#*CkJ`2UATCE_K&pqW6IeC+tl0sbW#y8F~iYNwqD?6ZL7)HFcAUI
z(3sQReX-f?d($jEy}B;*^J?4!c7%@{{Rh?%^LvsPy-S_jSdqBT;0@-dqO~?j{Q0re
zLc`6nD%*8;fsVWlLiOP@i*6kg%lSMc*oWH3S8t?ENRX$7tz5Xe5RJnpsxUhbXjM#{
zSJ0?QeZc)W&))R5#eRx?HvQJvCX1t8sGUeaBPM0f78p=iwUWK6RCV)&dj7zEl^^IS
zH~J029>ic5dW*~Jj@@}1EYUZZLDy5!$GcX>`orTb3_D*OPpRzhHL>5-vmCiD!Cjy|
zq6b-<6c|s^BpQoj1hCnc8LB9*3u{#E_O;M`EpSNLLfJ8OPg7GtEV?FFIa;TP-0Eyx
z@N8C(|DZV|7VI9<zpgr{$lZ4qnm3tyd~t@+&ZpYzu-if`m^VD~f-oX&cm(dZGmCP5
z4s-o6pTPtWO|nS4HG13`d>i=uwD)5?iX;IMfVA+?bf(fx2&H`N!f{vI`W5N%aI_Jg
ztf=4bgA!ethDiut@4ZjLDeQq2!#SJ>`+=FWi1E7S4T9M`7FN1Ehz}RdHP)I9OsUy6
zE_Q|sK;!y*i$O<;K+Y?9r2oYmn|*=}!P848MnULwD=n5FYrWX&R7we-FI4q@&;%_=
yWK^9*QHp1<3e8`m9}h*<O_zKsF@&J|uju<fYvsSM=b>Q~dV~Ia4%#Ie+J69)79>&t

diff --git a/check_mk-azure/azure-spearhead-0.3.0.mkp b/check_mk-azure/azure-spearhead-0.3.0.mkp
new file mode 100755
index 0000000000000000000000000000000000000000..8d65f83a7d0d3d8542284605e032e95ee187410d
GIT binary patch
literal 6072
zcma)<WlS6ZfUFA(Ebhg1@nUUpFYfNJ#T|+)vbZnqF2yOdxO;JTcWH5l;=b=L@9zG*
z<nsPaGXG|h$v4!|sPB?rq^%L*XClw8YrM0M`T@wJO|rHsB~<=D4<eKP3E1w8xt=y;
z3dGAuMkj=Zfk=ZJcD!%80@^(<Y1Qjam*bu(?||8e9>m?}X0`M^$QXlvlYPQ?yEiA}
z9&l<Ny5?3kd}ddU+=bSD|8|6ukKW&T3#rOIj{v@m67YpF=Dj%erk<6IaL1handM2%
z$Cl3D4v#RX9>ydm@9=rl%Q(besgD<i!Vo~Cb(f$^$tCiV+PwF1nW_RWh)o1!^nG0E
znmGP>tLMhHO5sJ$ychtcwgzBeZiv(YVzR7TKe&rQfbi%PUpcWOYOu(h%#*v5bRlEl
zruX(WTivfD{lM{<DY}nL`RK5oLTA94D1q}ZvpeR+tru~#%{jTIk-k}ARKVGq5XNEG
z+@kY+TD%wESc}Sp!AmhYBbMI<5Kr;Ijlx2=C=lDKVZFBEu{t1OJs51N)KyG_F`v8f
zwKrmY#+pRkh}^wN5tRix<twNZ5?bKZfdLS#7Ws5J92f+LzU`V`zP<#s1Klm*TWf18
zTyJpkmoA2NSff+r6_L)IgcE=SV-n>9`U&E^WKh=Yr6hl92fZta+K*T1f~G@fZkd9%
zL#2vWn%mbBh9&kdRp6!?R~WLwol1qu;#;b=-uH@EP5Yi9gOCyi%I2Tot2I5&CDsb#
z-(d0Rlf@tJ7rYS+)GKw#PLbG1mP6c6U_2R9OGjNaXh5dkzA5-Qwo&?iK<UQX2JbbT
z)}#k~ZV1oWbZmd1=DcreZf<;oLhrrv;f~M?@mtm5<eAfJgN~D9c**4sPG!naB^ObH
zjk8LjqH|e~$C)gIL?-=Hwi1Dcm_q`GlBULyjXe)<bT2<GiPZd{3qM_M_H^h3vpUZc
zH2Kd~7Y%-jCyfSBB)*6uL(@$Lc2Yq8>7b)%Wx%aB|FK0rjs>W?OwYtEYEAbiAnA*y
za%04T9glOPl;;)gP}X14+rH?w=#$lth5t~q0zEvF$A6BQf;`(AYB@o!yo`#&&-&v=
z+CHnK3D&O+{?9+MBQqFnDTX%%!-r(4>kW=|KY!awIVug=fj0h_y{~4q*v^F=+-zE2
z-H2LT-Beiw?^AuLNlbu$?+B0$R2^q#Vw02DuEiVVtNQToQ1>{oUNKlaQBqW$ypS>d
znouGGEps*lvDxC7@iH8pzL#GfaL0h$p-ur&!G2=}RAgLzggGY5Q<UIAhi5X7Xh|AQ
zyyURIJBU%VZg(20EoWIU%Q<|un!m3x4s9!9L7RFjrn3<oH-Lur((&y#Oq%NTSY()d
z{Lyd}{`Y_z<OkuYjtq7oiT))Vs(%970;zL+wLy)*o#`QoUg9ECQ=*e3*twv)`xOHM
z>Zg(fR<Yug2QoZE1)Hi8eBX9bzhoE!<n>uUXl<jr`$tG}BKNfQ1C7OdKPCRHOu->8
zx*?$sIvPsXkb1Jt(JXLgpy}@~$?h+T9P_2M$M%o#CYv)o#5{?W;mB3gioR2HuehK~
z4m(_TI{l6^&4afYyApAjfn7mLsjC?iS`!)=n9rm2LoHvnmpf8}8@C1~7l%hO*oy<f
zN1459aY#qKKvR+!k%Tl0L~fWAVoG`=ZXnFeG4k$Db^}rvXxo>UeoTfcyo7mR;3HH}
zI^DVI%bm$7Pt2c58-wx;%HDBv9B;Vd*7^+krh$_>Wr&safiOWuUO~v;CPZ~SqG?sI
zjgC@IvaQ@yZ*|mQxIT3Z{Rn<6;ktPLrW{+j{A!ZJ=$CFXouuDpk#;gC79ySCo<ONM
zBmUMx%mzaMwgyX5P&*sCd^vK`%*bMN1KAI$($LS}KT$JcQo@3Uhz|*)&RL&!3+uj|
z{b?i8;w%lKu=u^3Ij}ls+{mjNnXhkGt?n-jJcsTNroXz3DBO)`CtAJLr)u&L39^`n
zL6}@d@5XvL_<YWvSk8#?MsKZ6$vn;W4wu%HXKkCwqeb#XyMnrRvu>Z;mo7E~ymi@w
zk<mKrDN|%BQ`41moOHmS0`(fYtQIE~V3Z$_)Y1l#r8gv0Gfj1m<a9+5Uv~jUv#~mH
zck0lx>@tDPdF4v2ct~hIB}^dipP@3{nOIpv(edI3Anfwp>d0WbhJYD^UQy-(=*#Hn
zKl1@|5@9xD-^Q_N#nsBestDHb>SL-9BzpH$+%iPI*NXFYWXCpuJ)pTF-QKJj)4K0c
zd1s3`_*on8cVShYlJ>hKCECI~C2_&ApxL1c$B;kDuDV<gk{?^!TSoh3ao$slBwY?y
zbhCmlq2Rz&J9O+F9aeP}W0uH{Cp=U-XyE&+;dF#o1>3XFG!D)iWHfk-9Pge;<^Hqy
z?L2RzkUoW471JDpIw?-9=}?Ks0@Vt@;ebG6f0Q1xD7t9>UnC+KM{Q`(oGaPb0E3fk
z>aV!sTH}g=`+z#cEe~S*OK2^W)c$aol{b^9jm8b7LBjsFaA!%Yk41wUfiECpWjd^O
z_?7)uPq3X7o>^>5lxtnJ3uo+TA$8RQOKtI)`XiY|TW_yKoorQ*>VUpk;h2(ZbN%dB
zog(~Ic|5|vl=hH4m9m~}bmTbRlc|v1$9hWe1{BI1BUi<|zp+QTWt5m8TS+r`80ECE
zj0SCz$IX4ozaN+~DC$<3)O#G=F>w4qL!m(Uh<V-UZ@~PO;*nGr@W`(;7}|DrRsY)x
z0r>@)2n!a)d=qtFy)PZgf6G!j;w-&X%sD-!dQIf6UeCR4kCf4M*@=O`;arZNk4?x&
zn7{upfym}|rh=T|#N6_KjXxML5HteJBsOuGy{CJ)!g$4%-Hu7}(WE;N0f180)EMbk
zb>DP*?eQ$O_IuND>J;vq@S3OCo<{8rw{EX*uaADZaDaMvthKkmo7YY<U-JU$U-MeB
zxs)@ea)$R_Krz2*ReLi=4^pIsTzAl_Ppnhs5||(X@1wy}eZYWYuf6!)y(M}NS+p5U
zG|Le}N1=gp^$D7Be^&aLGAs3F_tp*iJ58!do3O`m$I}A~rPI?S@ZZJHVeQ}GpLakR
z=tQIlcWvWlD1%ayKRq#+H@8M!UBCR|!z?3rW1zm}*J$#xJA%B{K){3jl<^NY?2=>D
zDV8FKoC$6y@8cKHm&;T3)mWaMK<zTNLmRe1r4*790KV>cf;2k~74uf)n%4PbX@|$@
zk5PTq={f)&2mPO6ACsoAkni$!G`D0if4D?aafp`p`UOWfHHUHdNV!V3oz6%x<e+i=
zPm2GWSSJ`3F4=O0A2_z#!L9!@UR=GL-*=9;TWcF%Q{k@G%}d%(TlP*Dry@axIp<X?
z@JC!{;Ir7k`55<|pGR0bk$ci4C(E9^rhn`*J$GE6=iE*H)o79bc3NF@nZ5sry*^i?
z!C8FB)|M|tr{Ckhhr`Rzn}sT=_KZVu%j@R!q+ZMS(V1ImtVXpKt!n;3n0p}xXG=vp
z>3P_j9s1`A0{<fSlLFSO71J~`<R*tW1BATcj-D_0dV}*pXk?%A7SGZqu}2Ku5AvqS
z+1n9Xm@WduM12Kb&K_Pbs6W`aRSj%O&5nG><yu!trr&<9OvA|<tXR*e{!GCnhjmw*
z3duA!c-xr$-el$Y4x8R_1kUBmz;5}@P&B(X)TuS78J77zso%Os$^k8R8cEZ234tJ)
zH3~=KcG38U(P<pl73s&6Js9G_!caUlb{~z}5vH(rnu@Qt%D**uoDw^MF_9~(GcDQ-
zJCF>Uj?82y7RC*TIO;dqcfVDBTEdIPx9usMN%xcntJttyu#7GjwMautpQ}fOi|rC%
z<0S*%S`lX~zvGw9Hf#fH%m^w{5?jXWYohW5zXBYSQjw=Szg5d^?JySo;s(0tH=juS
zog&YN*aD{l>a-=5rG#cjFuVA@tdY)aq0=dtszQJv98Mds)6b0_v7~rSl7XdRYr3=q
zU0R@a@E6;djRmhwX}bvvbOw1ja9;Q>C`K$9BTXri_4yC8hpah7Jdzm2LqhN4m1Y7L
z;NVKUg*AboWCw30En#%OPTu5M$FRn%AJG|Hbq^3gOWc_kDUCoeC)mxxtme|Nf$rD6
zLm@Bz$fsSJX8G$NE=x_Bw$bJI*=8?#)=k8TSz4pHR$GXe@sX+a4(ieLDOrtIJ?WB5
zuYCRM2E8|@JJ*)@*E;OP_C`)W&MZNGf{znV+U#N(QsV`*eE{Llj*1K4<GTG%U!!7I
z@94v-Fq6mRzVj5KzS{_a<ElHi_fJ}K38M^j)~(M(KsbOFXUVK5Cowp(bS^BPYn)qz
z8?nXQK0;qRhQs0|R<elP&z(%pg917A{=kUW(QIbz1nk-porO_KCBy41gRgTV*}$Gu
zfxm_A)|as=-7F@A*RI}v{1J=WgFo?~L{qEi^;m`>G_g<|q-w2oyx-15-dOZnvTg2v
z(53oZl)8K%f69FJ*C~~;X!g^gV_`Py<D#&3tkQOq=s@)0vYNgcZ4W0dF9hl57@q1`
zp~ji`KLP}Gt&bMFdc?5IyvTKnRr=$K@J_7S!8@Jy=7sa+(eIX`>9yJg9<{gyDb)#M
zFQfjBV^jRoktV&n0n3ME1)k?J4vKt`9~@ep@pc<gwyaDn7se~V?QXQY^zt}yvNd>^
zHoos_D#_$}Znfql`i5R9Al1epw*U5uR*HQebyzQoaE=_u%R4QnuSc<08&L~WXL!po
zm1H><<n)ge**Kqh+iAYvvmka+``>|ZwEV+$o{0t{_xVXu{2vql^QI%>hilj7bT7*T
zp5HHk=R4PX-4)rN?9i_P<Nru};BkyCtKtVR<dbeEFWjfGq=MlFw+l&x2G=l@t<h(1
z30W4a3ES4=2j*bc1`GnN@tNM;I2Nly^0Efs)H(3NugTtNDUg^S&L5<|F!c7zPRu!N
z+EE>UNwvIM8fE4SXlfsUr{raFaN@(>$HQhhE-fd1io%3qM<EY@SpE}JE!_U3<o)}^
zN(ZSQZJf-s({`(qd9)bE-dc^ZS~Pyz;)`DSSP1BwZsLi%58$_<JyKt_g4;(iHF{x4
zPo^a(qq%CnW?w;Z%`nG9T`@}%AKS9+##^5@_3;k_`ja-SqbuXj*R;G**AbM~<Wa~+
z^+ZuIS;8D*7&2R;HTu|H`gL7ozoj1ViNA5?y@ZfqjyT#i*Fb{_!YevPeMW@)R!)u=
zM+|6vNG!ulslhL)r5@FS-jk1LuJ!%rshtQEkg)(w)WvLmqKx~dmk3rrFz)g|7-#VW
zH)I5K+FPZUtsw2QEyVW{NlRnZ2yn?;UFm@+3xidumBX2?e)XN9z%HK5h`PHgSzE+C
zkV@}NRC2d>C~VG2y*}*VLT(VN+^2!*EB6V`k&I8{h;*>&pYgt)h?V`ZKV;sV{ZI=D
zov<lOanrx9tts;dOyBc3Ciwje50-c7F&+x^hq0`&uxBddDtpZ=5U)L%0XagkRiHr7
znRy9*OYABEpUo(Dv4=GEUNQF6o7QnEB{4>G`Xq>>Y}B#VvrRk*5+i`Tr;HS?hj<Q3
zJKxOS4n!hHycN%_ct1i^#HU}@^`K?B3_Xm{&`bvV01CDVOnX*i$apBPHg;8tbtIS6
z!C$8f`J#2BP@Ut0UAxpEcEkacULLtUs#sd<NY*mxis(MYbrdLkUyTZ=W9y6&i%}zr
z&66K-&pO7b*!Fx0NAO%RNy3@uUpZUEzr&*>S`aeX@JcmuscZRfd15459?>-n3=eIr
z8g&)vo7!M=ymc}8*x6ciDIA@M>_WdRx-6!SN3=EPFcb#`TE|WQIw!xDjnK7le~6Gq
zrV=qI7j4vx@-~iaY(-RLK<zi&EX;NLXM&s~3~=xHpkkTlAHSj?=w7Zbe;+K4yKU4-
za8<=VGo{Gz#Gy@Z&o&u6j+JgLo_is%EUaggi|8eBXy4bxX5LT}$f)mYu-XDlo>*J&
zw{tzMxNOoX)7K^~!^bJ}bLU=MS887gHe9R{jAU58Bs$N&`G5maS6~;3>VnDqz-gB$
zUoqv*{-s^uU$26k*RFZE;|DKY>JRsVFF8Vmd<5Z&&CN^yfwaFp);i!m`S$@2=NIF9
za|W?-CA779qJ9QVA$}@F-tGTRSGdT{42bRn%KD654w@UKEApz|{G6}sn0ItK_G-v@
zPMErDK5Tv<m>@h9Bzig8&inRKZ=NYd8gKS?GH}v99>6v<@y^HUE#Ts@`s|O&K>(3w
z)+1c+pbPs$*VxNN<g3{4+!grs#z9w8h)@oEML*r@jr_kD@_(bB|K?20brg=nl~=|9
zUr6~&{6@G4{4szJZoXSeKy<kX%MPvFmifxm)&YFgJ%yh;Hv5QF!Z%b(>AK*@S+83-
z2vE;AKHOoXc+a0VnPb0-V#X5Jx@(77jc_(11P&;3fLHV`1X->b#p9+q#)w}<*mP|-
zZCb8S?PK-Q(Qq~Lwui9#GE_)Zw-p}|821f?bhPVsnJ<?Gt~HhdsPq1;ENzBs)N#eK
z&oWS{935T*g^RKnx%W9qs9^_MT%1dGy{c@PR6#9O)=*s2LE+5lT7CNzU<}}PC9?>a
z7OU&ZRy3w%rv@e(!(gmqXlomzK3dvkj+m9gperCC8>4pm;&?H{BtIS;`D9`gjUvcY
zXNW1n9^~DNpO@x}yBE7qUu}$R5b$$48%9s`nU%)hz597Zd|Nq*nqrgfyPwfRMEVox
zJqd2AXl*5@-_PuS;Iffowdxlo<NKATp9DV>h%m9^BXD*UA8dKbx-Ou8VjU#2`YGVM
z0Czu?^cf;%Vt*Y>5b;oDxC`^u`iLo^!+8)e=?Id!bS$6`TxxjdwZIr6ipPRQ?e=|}
z<ay0rakuZ+@g+pHZp+U5P(Mo`#PkT&r}MH$*OWJ%2~yB2_yzwe%LqTwKej{r7vg7Q
zn{UfyZ}^uemB-w+%}(57_jO)HoHxW{K#=tK#M*ejkOb6tYhAV~p%HBDIYZBTALK~O
z3Q1KjNmQ-=G;C(Jr%hn1@QUgZKiD7L7m>_`&V@lx4p9J+nM<JI;xjSJXSOZup(T!N
zWQDrqYGi)0(#Bv717Bh43*GW~@nX<D?*_{(>v?!+_v!nqWEyGNb-}BRbwJgBU3aLc
z2H9G_;jESW=;?F)tQ>0Jyp3HSrrg+^#(pngm3hTm(;$zEvX=|Xn7_X;wJEIU)7;@a
z1M)N&-Z*b)wJ=FuTlU@<u4XDcC~&7|8<4s5G<|6>(e9k$r-WtTUx;F<3>@7%earFi
z5fO}0G^^?{oZFs2xx$iJ`L;D8*SX;DM3iAkJIhWN4)YvA!e(@S@Ik^J%p(tYYk7IB
z^z-x>@=~Pk^nCUzgs5*$MxQ99^|53tv6d`hT(%l{;!&tb^0qnVT7I1aN4}yjuP!OK
zsA}>h+Rv;lSs;Zv>~3d$dEi#^Q>8+$`}kCWrZ>!JVp_h+Y#8ZTa!Nr(?U#ZhRc<R|
zR&%m%?H7qhN;GyE1U8R-{jjbI9J(Mnl3oeBxiGf3OPY~f5j^gp6z&;~v62x<n>_Dv
z*hC+UpL9ll`W$x69v1RxXv1(K`?5D<9Il((Ge7J}5;6?;#~F0h+JzsEGbeX`Ds-1g
z2{%)`@S*f7FrV3u-ts<ri0agiTe}-mJ;Nwrx_Wo-bSc3v#H{o^d7)VZ^&Z_?)H2Z=
zzVBpn(@hQ)gS^iFRgdv~WS<d<0}ma?o9&KOmt7?q3*For;z3L!vhg$jcrznkV=WqQ
zcB#=~V!+f*NNs2TvX=xOdQV38v>-_v=RVdMd-h~i0#?eo%Mbl68W{~AH`#rhn<CHr
z$`KuT(5R&l_QI3+v;zG>t&uOpTX&+x4^De%R8lW{2WWhRU2)31cyM<dDm5%CK;?h@
b<NvR1`=62ff5kf93$-+l&)Yi^gm?c3-pbj1

literal 0
HcmV?d00001

diff --git a/check_mk-azure/local/lib/check_mk/base/plugins/agent_based/azure_common.py b/check_mk-azure/local/lib/check_mk/base/plugins/agent_based/azure_common.py
index cbe5895..e03f5ac 100644
--- a/check_mk-azure/local/lib/check_mk/base/plugins/agent_based/azure_common.py
+++ b/check_mk-azure/local/lib/check_mk/base/plugins/agent_based/azure_common.py
@@ -215,17 +215,19 @@ def check_defender(item, params, section):
     info = details["info"]
 
     if severity == "High":
-        state = State.CRIT
+        state = State(params.get("severity_high",   State.CRIT))
     elif severity == "Medium":
-        state = State.WARN
+        state = State(params.get("severity_medium", State.WARN))
     elif severity == "Low":
-        state = State.OK
+        state = State(params.get("severity_low",    State.WARN))
+    elif severity == "Informational":
+        state = State(params.get("severity_informational", State.OK))
     else:
         state = State.UNKNOWN
 
     yield Result(
         state=state,
-        summary=f"{status}: {info}: {url}"
+        summary=f"{severity}: {status}: {info}: {url}"
     )
 
 
diff --git a/check_mk-azure/local/share/check_mk/agents/special/agent_azure_common b/check_mk-azure/local/share/check_mk/agents/special/agent_azure_common
index 01225a7..60c662d 100755
--- a/check_mk-azure/local/share/check_mk/agents/special/agent_azure_common
+++ b/check_mk-azure/local/share/check_mk/agents/special/agent_azure_common
@@ -140,6 +140,13 @@ def print_json(obj):
     print(json.dumps(obj))
 
 
+def get_resource_group(obj):
+    found = re.search(RESOURCE_GROUP_RE, obj['id'])
+    if found:
+        return found[1]
+    return None
+
+
 command, tenant, username, password, proxy = get_args(sys.argv)
 token = get_token(tenant, username, password, proxy)
 
@@ -158,7 +165,7 @@ for subscription in list_subscriptions(token, proxy):
                 'type': command,
                 'name': alert['name'],
                 'location': re.search(REGION_RE, alert['id'])[1],
-                'resource_group': re.search(RESOURCE_GROUP_RE, alert['id'])[1],
+                'resource_group': get_resource_group(alert),
                 'alert': {
                     'status': status,
                     'severity': properties['severity'],
@@ -175,7 +182,7 @@ for subscription in list_subscriptions(token, proxy):
                 'type': command,
                 'name': firewall['name'],
                 'location': firewall['location'],
-                'resource_group': re.search(RESOURCE_GROUP_RE, firewall['id'])[1],
+                'resource_group': get_resource_group(firewall),
                 'metrics':  metrics_to_lookup(metrics),
             })
 
@@ -186,6 +193,6 @@ for subscription in list_subscriptions(token, proxy):
                 'type':     command,
                 'name':     vault['name'],
                 'location': vault['location'],
-                'resource_group': re.search(RESOURCE_GROUP_RE, vault['id'])[1],
+                'resource_group': get_resource_group(vault),
                 'metrics':  metrics_to_lookup(metrics),
             })
diff --git a/check_mk-azure/local/share/check_mk/web/plugins/wato/azure_common.py b/check_mk-azure/local/share/check_mk/web/plugins/wato/azure_common.py
index 5cb94db..423a9d6 100644
--- a/check_mk-azure/local/share/check_mk/web/plugins/wato/azure_common.py
+++ b/check_mk-azure/local/share/check_mk/web/plugins/wato/azure_common.py
@@ -2,6 +2,7 @@
 # Copyright (C) 2024 Spearhead Systems SRL
 
 import copy
+from cmk.base.plugins.agent_based.agent_based_api.v1 import State
 from cmk.gui.i18n import _
 from cmk.gui.plugins.wato.utils import (
     rulespec_registry,
@@ -20,7 +21,6 @@ from cmk.gui.valuespec import (
     Password
 )
 
-
 def _discovery(title):
     return Dictionary(
         title=_(title),
@@ -166,6 +166,65 @@ def _valuespec_special_agents_azure_firewall_check():
                         )
                     ]
                 )
+),
+        ],
+    )
+
+def _valuespec_special_agents_azure_defender_check():
+    return Dictionary(
+        title=_("Azure Defender Alerts Severity"),
+        elements=[
+            (
+                "severity_high",
+                DropdownChoice(
+                    title=_("Defender severity 'High'"),
+                    help=_("What CheckMK criticality should this Azure Defender severity trigger"),
+                    default_value=State.CRIT.value,
+                    choices=[
+                        (State.CRIT.value, _(State.CRIT.name)),
+                        (State.WARN.value, _(State.WARN.name)),
+                        (State.OK.value,   _(State.OK.name)),
+                    ],
+                ),
+            ),
+            (
+                "severity_medium",
+                DropdownChoice(
+                    title=_("Defender severity 'Medium'"),
+                    help=_("What CheckMK criticality should this Azure Defender severity trigger"),
+                    default_value=State.WARN.value,
+                    choices=[
+                        (State.CRIT.value, _(State.CRIT.name)),
+                        (State.WARN.value, _(State.WARN.name)),
+                        (State.OK.value,   _(State.OK.name)),
+                    ],
+                ),
+            ),
+            (
+                "severity_low",
+                DropdownChoice(
+                    title=_("Defender severity 'Low'"),
+                    help=_("What CheckMK criticality should this Azure Defender severity trigger"),
+                    default_value=State.WARN.value,
+                    choices=[
+                        (State.CRIT.value, _(State.CRIT.name)),
+                        (State.WARN.value, _(State.WARN.name)),
+                        (State.OK.value,   _(State.OK.name)),
+                    ],
+                ),
+            ),
+            (
+                "severity_informational",
+                DropdownChoice(
+                    title=_("Defender severity 'Informational'"),
+                    help=_("What CheckMK criticality should this Azure Defender severity trigger"),
+                    default_value=State.OK.value,
+                    choices=[
+                        (State.CRIT.value, _(State.CRIT.name)),
+                        (State.WARN.value, _(State.WARN.name)),
+                        (State.OK.value,   _(State.OK.name)),
+                    ],
+                ),
             ),
         ],
     )
@@ -215,3 +274,13 @@ rulespec_registry.register(
         title=lambda: _("Azure Firewall Metrics"),
     )
 )
+rulespec_registry.register(
+    CheckParameterRulespecWithItem(
+        check_group_name="azure_defender",
+        group=RulespecGroupCheckParametersApplications,
+        match_type="dict",
+        parameter_valuespec=_valuespec_special_agents_azure_defender_check,
+        item_spec=lambda: TextInput(title=_("Defender")),
+        title=lambda: _("Azure Defender Alerts Severity"),
+    )
+)