Azure IP Ranges and Service Tags – Public Cloud from json

[TommiK]

What configuration to use to get these Azure Services in own output nodes?

https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

[xhoms]

Hi @TommiK,

the following SimpleJSON class based prototype is doing the job for me.

age_out:
    default: null
    interval: 257
    sudden_death: true
attributes:
    confidence: 100
    share_level: green
    type: IPv4
extractor: values[].properties.addressPrefixes[].{indicator:@}
prefix: azure
source_name: azure
url: https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Public_20181001.json

If you want to mine prefixes for specific system services then you'll have to adjust the JMESPath expression to suit your needs.

[TommiK]

Ok, thanks for the info, with correct link it will work. Seems that the problem is with that link, it's not "static".

Current link: https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Publi...

File has date 20181001 included, so I assume that it will change.

[xhoms]

Hi @TommiK,

you're right. The backend file name will change overnight without previous notification. Time ago I build the MS Article for MineMeld that can dynamically extract references in MS Articles and download them. It currently wraps the CSVFT class so only works for CSV formated downloads.

Someone could be interested on contributing to the extension to create a SimpleJSON wrapper as well.

[JerBi]

Hello PA community,

One of the guys at our company made a script to help with this, here's the github repo he decided to make public

https://github.com/enzo-g/azureIPranges