Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Type | Workbook |
| Solution | CybersecurityMaturityModelCertification(CMMC)2.0 |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
AADManagedIdentitySignInLogs |
✓ | ✗ | ✓ | |
AADNonInteractiveUserSignInLogs |
✓ | ✗ | ✓ | |
AADServicePrincipalSignInLogs |
✓ | ✗ | ✓ | |
AADUserRiskEvents |
✓ | ✗ | ✓ | |
AuditLogs |
✓ | ✗ | ✓ | |
AzureActivity |
OperationName in "Add member to role,Add user,NetworkSecurityGroupEvents,Reset user password,Update user"OperationName contains "Add"OperationName contains "Audit"OperationName contains "Change"OperationName contains "Create"OperationName contains "Delete"OperationName contains "Log"OperationName contains "Monitor"OperationName contains "PIM"OperationName contains "Remove"OperationName contains "Update"OperationName contains "Write"OperationName contains "reset"OperationNameValue contains "Insights" |
✗ | ✗ | ✗ |
AzureDiagnostics 🔶 |
Category == "AzureFirewallApplicationRule" |
✗ | ✗ | ✗ |
BehaviorAnalytics |
✓ | ✗ | ? | |
ConfigurationChange |
✓ | ✗ | ? | |
DeviceEvents |
ActionType in "FileCreated,UsbDriveMounted" |
✓ | ✗ | ✓ |
DeviceFileEvents |
ActionType in "Add member to role,Add user,InteractiveLogon,RemoteInteractiveLogon,Reset user password,ResourceAccess,Sign-in,Update user" |
✓ | ✗ | ? |
Event |
RenderedDescription contains "Hello" |
✓ | ✓ | ✗ |
IdentityInfo |
✓ | ✗ | ? | |
InformationProtectionLogs_CL 🔶 |
? | ✓ | ? | |
OfficeActivity |
RecordType == "MicrosoftTeams" |
✓ | ✗ | ✓ |
SecurityAlert |
ProductName == "Microsoft 365 Insider Risk Management" |
✓ | ✗ | ✓ |
SecurityBaseline |
AnalyzeResult in "Failed,Passed" |
✓ | ✗ | ? |
SecurityIncident |
Classification in "BenignPositive,FalsePositive,TruePositive,Undetermined"Severity == "High"Title contains "PII"Title contains "USB"Title contains "access"Title contains "account"Title contains "backdoor"Title contains "beacon"Title contains "brute"Title contains "c2"Title contains "confidential"Title contains "cred"Title contains "data"Title contains "deny"Title contains "drive"Title contains "execution"Title contains "exfil"Title contains "exploit"Title contains "file"Title contains "intellectual"Title contains "leak"Title contains "logon"Title contains "loss"Title contains "media"Title contains "removable"Title contains "restricted"Title contains "sensitive"Title contains "shared"Title contains "sign"Title contains "software"Title contains "spill"Title contains "storage"Title contains "test"Title contains "tool"Title contains "trojan"Title contains "usb"Title contains "virus"Title contains "ware" |
✓ | ✗ | ✓ |
SecurityRecommendation |
RecommendationState in "Healthy,Unhealthy" |
✓ | ✗ | ? |
SecurityRegulatoryCompliance |
ComplianceStandard == "NIST-SP-800-171-R2" |
✓ | ✗ | ? |
SigninLogs |
AuthenticationRequirement == "multiFactorAuthentication" |
✓ | ✗ | ✓ |
Usage |
? | ✗ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Workbooks · Back to CybersecurityMaturityModelCertification(CMMC)2.0