Skip to content

Add Microsoft defender cloud oauth2 params for assessment - #16919

Merged
a03nikki merged 4 commits into
mainfrom
microsoft_defender_cloud-oauth2-params
Jan 12, 2026
Merged

a03nikki merged 4 commits into
mainfrom
microsoft_defender_cloud-oauth2-params

Conversation

@a03nikki

@a03nikki a03nikki commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

Proposed commit message

Add support for OAuth2Endpoint Params option for the assessment data stream.

Explanation:
The assessment data streams use the cel input type. This pull request adds the parameter along with the http mocks to test the parameters.

The configuration changes were heavily copied from previous Microsoft integration updates including #15667, #14924, #15749, and #16628.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • New default and all policy tests

How to test this PR locally

Use Kibana to validate the parameters are presented.

Related issues

Screenshots

None taken

@a03nikki a03nikki self-assigned this Jan 9, 2026
@a03nikki a03nikki added the enhancement New feature or request label Jan 9, 2026
@a03nikki
a03nikki requested a review from a team as a code owner January 9, 2026 22:06
@a03nikki a03nikki added Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:microsoft_defender_cloud Microsoft Defender for Cloud labels Jan 9, 2026
@elasticmachine

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

Comment thread packages/microsoft_defender_cloud/changelog.yml Outdated
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

cc @a03nikki

@chemamartinez chemamartinez left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@a03nikki
a03nikki merged commit 3d2f044 into main Jan 12, 2026
8 checks passed
@a03nikki
a03nikki deleted the microsoft_defender_cloud-oauth2-params branch January 12, 2026 15:07
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Package microsoft_defender_cloud - 3.2.0 containing this change is available at https://epr.elastic.co/package/microsoft_defender_cloud/3.2.0/

jakubgalecki0 pushed a commit to jakubgalecki0/integrations that referenced this pull request Feb 19, 2026
elastic#16919)

* Applied changes to MS Defender Cloud and started writing additional tests.

* Completed tests for microsoft_defender_cloud.

* Update packages/microsoft_defender_cloud/changelog.yml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request Integration:microsoft_defender_cloud Microsoft Defender for Cloud Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants