[Gunjan Jain (gunjanmj)]

Summary

• Adds the QCrypton PQC Engine solution for Microsoft Sentinel, including:
  • CCP data connector (connector definition, DCR, polling config, table definition)
  • 6 analytic rules (vulnerable algorithm detection, PQC downgrade, KEM failure spike, high classical client rate, policy block, policy upgrade)
  • Added Playbook: QCryptonPQC-Notify — Logic App that posts incident summary cards to Microsoft Teams
  • Added Solution package: mainTemplate.json, createUiDefinition.json, 3.0.0.zip
  • Added SolutionMetadata.json and ReleaseNotes.md

Reason for Change(s):

QCrypton PQC Scanner Agent deploys as an Azure Container App inside customer VNets to scan TLS posture on Azure resources (Key Vault keys, Entra ID certs, App Service TLS config, Application Gateway/Front Door certificates, Storage account CMK provenance). It identifies quantum-vulnerable certificates, weak TLS configurations, and classical key exchanges to prepare organizations for post-quantum cryptography migration.

Version Updated:

Yes — initial version 3.0.0

Testing Completed:

Yes — all analytic rules, data connector, workbook, and playbook validated in a Microsoft Sentinel environment with no custom parsers, functions, or tables.

Checked that the validations are passing and have addressed any issues that are present:

Yes

[Gunjan Jain (gunjanmj)]

v-atulyadav v-skharode v-maheshbh (@v-maheshbh)

[v-maheshbh (v-maheshbh)]

Hi Gunjan Jain (@gunjanmj)

Kindly check the validation failure. Thanks!

[Gunjan Jain (gunjanmj)]

v-maheshbh (@v-maheshbh) updates on this PR?