DarktraceResponseActions_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Schema References
• Solutions
• Connectors
• Content Items

Schema (26 columns)

Source: Data Collection Rule definition

Column Name	Type
action	string
alertTime	datetime
changedBy	string
codeId	int
customLabel	string
darktraceProduct	string
deviceFirstSeen	string
deviceHostname	string
deviceIp	string
deviceLabel	string
deviceLastSeen	string
deviceMac	string
deviceName	string
deviceType	string
endTime	datetime
inhibitor	string
model	string
reason	string
score	int
startTime	datetime
state	string
subnetId	int
subnetLabel	string
subnetNetwork	string
TimeGenerated	datetime
url	string

Schema References

Official Microsoft Learn documentation for field/column information:

• Data Source Schema Reference

Solutions (1)

This table is used by the following solutions:

• Darktrace

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Darktrace ActiveAI Security Platform Connector

---

Content Items Using This Table (1)

Workbooks (1)

In solution Darktrace:

Workbook	Selection Criteria
DarktraceActiveAISecurityPlatformWorkbook

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index