mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
63 lines
2.2 KiB
Markdown
63 lines
2.2 KiB
Markdown
# API Reference: Implementing Azure Defender for Cloud
|
|
|
|
## Libraries
|
|
|
|
### azure-mgmt-security
|
|
- **Install**: `pip install azure-mgmt-security azure-identity`
|
|
- **Docs**: https://learn.microsoft.com/en-us/python/api/azure-mgmt-security/
|
|
|
|
### azure-identity
|
|
- **Install**: `pip install azure-identity`
|
|
- `DefaultAzureCredential()` -- Auto-detect credentials (CLI, managed identity, env vars)
|
|
|
|
## SecurityCenter Client Methods
|
|
|
|
| Method | Description |
|
|
|--------|-------------|
|
|
| `pricings.list()` | List Defender plan pricing tiers |
|
|
| `pricings.update()` | Enable/disable a Defender plan |
|
|
| `secure_scores.list()` | Get current secure score |
|
|
| `secure_score_controls.list()` | List score controls with health counts |
|
|
| `assessments.list(scope)` | List security assessments for a scope |
|
|
| `assessments.get(resource_id, name)` | Get specific assessment details |
|
|
| `alerts.list()` | List all security alerts |
|
|
| `alerts.update_subscription_level_state_to_dismiss()` | Dismiss an alert |
|
|
| `regulatory_compliance_standards.list()` | List compliance standards |
|
|
| `regulatory_compliance_controls.list()` | Controls per standard |
|
|
| `jit_network_access_policies.list()` | JIT VM access policies |
|
|
| `jit_network_access_policies.initiate()` | Request JIT access |
|
|
| `auto_provisioning_settings.list()` | Auto-provisioning status |
|
|
|
|
## Defender Plan Names
|
|
|
|
| Plan | `name` Parameter |
|
|
|------|-----------------|
|
|
| CSPM | `CloudPosture` |
|
|
| Servers | `VirtualMachines` |
|
|
| Containers | `Containers` |
|
|
| Storage | `StorageAccounts` |
|
|
| SQL | `SqlServers` |
|
|
| Key Vault | `KeyVaults` |
|
|
| App Service | `AppServices` |
|
|
| DNS | `Dns` |
|
|
|
|
## Severity Levels
|
|
- `High`, `Medium`, `Low`
|
|
|
|
## Compliance Standards
|
|
- CIS Azure 2.0: `CIS-Azure-2.0`
|
|
- PCI DSS 4.0: `PCI-DSS-4.0`
|
|
- NIST 800-53 r5: `NIST-SP-800-53-R5`
|
|
- SOC 2: `SOC-2`
|
|
|
|
## Azure CLI Equivalents
|
|
- `az security pricing create --name VirtualMachines --tier standard`
|
|
- `az security assessment list`
|
|
- `az security alert list`
|
|
- `az security secure-score list`
|
|
|
|
## External References
|
|
- Defender for Cloud Docs: https://learn.microsoft.com/en-us/azure/defender-for-cloud/
|
|
- Python SDK Reference: https://learn.microsoft.com/en-us/python/api/azure-mgmt-security/
|
|
- REST API: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
|