sentinel-attack
sentinel-attack copied to clipboard
post-deployment configuration will fail if you enter any upper case characters for your workspace
When running post-deployment:
https://github.com/BlueTeamLabs/sentinel-attack/wiki/Sysmon-Threat-Hunting-workbook---post-deployment-configuration
the ARM template prompts you for your workspace name.
However the template uses your workspace name to create a storage account, which only allows lower case letters.
So the template creation fails with the error: