Skip to main content

Clawscan: Configuration and Installation Guide

Welcome to the official deployment documentation of Clawscan. Follow this guide sequentially to ensure a successful infrastructure setup within your Azure tenant.

📋 Installation Workflow​

The installation is divided into four logical steps. Please complete them in the following order:

StepDocumentSubject
[1]Shared Mailbox SetupProvision the dedicated email account for scan inputs/outputs.
[2]Azure Resource Group CreationEstablish the logical container for all Clawscan cloud resources.
[3]Azure AI Foundry ConfigurationSet up the AI/ML environment for advanced threat analysis.
[4]Azure Container Job SetupDeploy and configure the core scanning engine environment.

Shared Mailbox Setup [1]

This step involves preparing the data entry point for Clawscan. The shared mailbox will receive emails to be analyzed and serve as the outgoing interface for scan reports.

1. Create the Shared Mailbox​

Log in to the Microsoft 365 Admin Center.

  • Navigate to Teams & groups > Shared mailboxes.
  • Click + Add a shared mailbox.
  • Name: Clawscan Engine
  • Email: scan@your-domain.com

2. Register Application for API Access​

  1. Go to Azure Portal > Microsoft Entra ID > App Registrations.
  2. Click + New Registration named Clawscan-Mail-Access.
  3. Copy the Application (client) ID and Directory (tenant) ID.
  4. Under Certificates & secrets, create a New client secret and save its Value securely.

3. Set Advanced API Permissions​

TypeName
Application LevelMail.ReadWrite
User DelegateMail.Read.Shared

[!IMPORTANT] Vous devez cliquer sur Grant admin consent for [Your Organization] pour activer ces droits.

Azure Resource Group Creation [2]

To create a Azure Ressource Group, follow these steps :

Create a new ressource an choose Ressource Group. rg1

Choose you subscription, the name of the ressource group (here ClawScanInstallationDemo) and the region. rg3

Click on create.

Azure AI Foundry Creation Guide [3]

1. Create the Resource​

Go to the Azure Portal, click Create a resource, search for "Foundry," and select Microsoft Foundry.

create.png f1.png f2.png

2. Basics Configuration​

f3.png

3. Project Creation​

f4.png

4. Access the Resource​

f5.png

5. Launch the Portal​

f6.png

6. Model Catalog​

f7.png

7. Model Selection​

f8.png f9.png

8. Deployment Settings​

f10.png

9. Retrieve Credentials​

f11.png

[!WARNING] Conservez précieusement l'URI cible et la clé API pour l'étape 4.

Azure Container Job Creation Guide [4]

1. Create a New Resource​

create c1.png c1b.png

2. Project Details​

c2.png

3. Region & Environment​

c4.png

4. Environment Configuration​

c6.png

5. Image Source Registry​

c16.png

6. Credentials & Authentication​

c17.png

8. Environment Variables​

c18.png

VariablesValues
SHARED_MAILBOXES****************
TENANT_ID****************
GRAPH_CLIENT_ID****************
GRAPH_CLIENT_SECRET****************
FOUNDRY_API_KEY****************
FOUNDRY_URL****************
GET_CONFIG_URL[Lien de config]
POST_RESULT_URL[Lien de résultat]

WARNING : Replace the value ***************************************** by your credentials

Telemetry and logs [+]

To enable the logs go througt Loggin options under the section Monitoring m1.png

Check the option Azure Log Analytics m2.png

KQL Query​

ContainerAppConsoleLogs_CL
| where RevisionName_s == "votre-revision"
| extend log = parse_json(Log_s)
| where log.service == "CLAWSCAN-WORKER"
| where log.level == "ERROR"
| project TimeGenerated, log.code, log.message, log.severity, log.mailboxId, log.correlationId
| sort by TimeGenerated desc
Last updated on