Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| basic_constraints_ca | bool |
| basic_constraints_path_len | long |
| certificate_curve | string |
| certificate_exponent | string |
| certificate_issuer | string |
| certificate_key_alg | string |
| certificate_key_length | long |
| certificate_key_type | string |
| certificate_not_valid_after | datetime |
| certificate_not_valid_before | datetime |
| certificate_serial | string |
| certificate_sig_alg | string |
| certificate_subject | string |
| certificate_version | long |
| client_cert | bool |
| fingerprint | string |
| host_cert | bool |
| id_orig_h | string |
| id_orig_p | int |
| id_resp_h | string |
| id_resp_p | int |
| path | string |
| san_dns | dynamic |
| san_email | dynamic |
| san_ip | dynamic |
| san_uri | dynamic |
| system_name | string |
| TimeGenerated | datetime |
| ts | datetime |
| Type | string |
| vlan | real |
| write_ts | datetime |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Corelight Connector Exporter |
In solution Corelight:
| Workbook | Selection Criteria |
|---|---|
| Corelight | |
| Corelight_Data_Explorer | |
| Corelight_Data_Insights | |
| Corelight_Security_Workflow |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_x509 | Corelight | |
| corelight_x509_red | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊