Alert Event ASIM parser
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimAlertEvent |
| Built-in Parser | _ASim_AlertEvent |
| Schema | AlertEvent |
| Schema Version | 0.1 |
| Parser Type | 📦 Union (schema-level) |
| Parser Version | 0.1.0 (version history) |
| Last Updated | Oct 18, 2024 |
| Source File | Parsers\ASimAlertEvent\Parsers\ASimAlertEvent.yaml |
Description
This ASIM parser supports normalizing Alert logs from all supported sources to the ASIM Alert normalized schema.
Products
This union parser includes parsers for the following products:
| Product | Source Parser | Solutions |
|---|---|---|
| Microsoft Defender XDR | _ASim_AlertEvent_MicrosoftDefenderXDR | |
| SentinelOne | _ASim_AlertEvent_SentinelOneSingularity |
Parameters
| Name | Type | Default |
|---|---|---|
pack |
bool | False |
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊