Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| alert_object_uid | string |
| Alert_title | string |
| alert_uid | string |
| asset_comments | string |
| category | string |
| description | string |
| first_seen | datetime |
| ip | string |
| is_third_party | bool |
| last_seen | datetime |
| notes | dynamic |
| open_ports | dynamic |
| risk_score | int |
| safe_flag_comments | string |
| safe_flag_marked_by | string |
| safe_flag_marked_date | string |
| severity | string |
| software | string |
| status | string |
| sub_category | string |
| sub_domain | string |
| TimeGenerated | datetime |
| top_domain | string |
| uid | string |
| use_cases | string |
| web_app_firewall | string |
| web_server | string |
| web_server_version | string |
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| CYFIRMA Attack Surface |
In solution Cyfirma Attack Surface:
| Analytic Rule | Selection Criteria |
|---|---|
| CYFIRMA - Attack Surface - Open Ports High Rule | |
| CYFIRMA - Attack Surface - Open Ports Medium Rule |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊