Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _ResourceId | string |
| attr_aggregations | dynamic |
| attr_aggregations_files | dynamic |
| attr_aggregations_files_attack_tactics | dynamic |
| attr_aggregations_files_attack_techniques | dynamic |
| attr_aggregations_files_behash | dynamic |
| attr_aggregations_files_compressed_parents | dynamic |
| attr_aggregations_files_contacted_domains | dynamic |
| attr_aggregations_files_contacted_ips | dynamic |
| attr_aggregations_files_contacted_urls | dynamic |
| attr_aggregations_files_crowdsourced_ids_results | dynamic |
| attr_aggregations_files_crowdsourced_yara_results | dynamic |
| attr_aggregations_files_dropped_files_path | dynamic |
| attr_aggregations_files_dropped_files_sha256 | dynamic |
| attr_aggregations_files_embedded_domains | dynamic |
| attr_aggregations_files_embedded_ips | dynamic |
| attr_aggregations_files_embedded_urls | dynamic |
| attr_aggregations_files_execution_parents | dynamic |
| attr_aggregations_files_file_types | dynamic |
| attr_aggregations_files_filecondis_dhash | dynamic |
| attr_aggregations_files_itw_urls | dynamic |
| attr_aggregations_files_memory_pattern_urls | dynamic |
| attr_aggregations_files_mutexes_created | dynamic |
| attr_aggregations_files_parent_contacted_domains | dynamic |
| attr_aggregations_files_popular_threat_category | dynamic |
| attr_aggregations_files_popular_threat_name | dynamic |
| attr_aggregations_files_registry_keys_opened | dynamic |
| attr_aggregations_files_registry_keys_set | dynamic |
| attr_aggregations_files_sandbox_verdicts | dynamic |
| attr_aggregations_files_suggested_threat_label | string |
| attr_aggregations_files_tags | dynamic |
| attr_aggregations_files_tlshhash | dynamic |
| attr_aggregations_files_vhash | dynamic |
| attr_alt_names | dynamic |
| attr_alt_names_details | dynamic |
| attr_analysis | string |
| attr_autogenerated_tags | dynamic |
| attr_available_mitigation | dynamic |
| attr_capabilities | dynamic |
| attr_cisa_known_exploited | dynamic |
| attr_cisa_known_exploited_added_date | real |
| attr_cisa_known_exploited_due_date | real |
| attr_cisa_known_exploited_ransomware_use | string |
| attr_collection_links | dynamic |
| attr_collection_type | string |
| attr_counters | dynamic |
| attr_counters_attack_techniques | real |
| attr_counters_domains | real |
| attr_counters_files | real |
| attr_counters_iocs | real |
| attr_counters_ip_addresses | real |
| attr_counters_subscribers | real |
| attr_counters_urls | real |
| attr_cpes | dynamic |
| attr_creation_date | real |
| attr_cve_id | string |
| attr_cvss | dynamic |
| attr_cvss_cvssv2_0 | dynamic |
| attr_cvss_cvssv2_0_base_score | real |
| attr_cvss_cvssv2_0_temporal_score | real |
| attr_cvss_cvssv2_0_vector | string |
| attr_cvss_cvssv3_x | dynamic |
| attr_cvss_cvssv3_x_base_score | real |
| attr_cvss_cvssv3_x_temporal_score | real |
| attr_cvss_cvssv3_x_translated | dynamic |
| attr_cvss_cvssv3_x_translated_base_score | real |
| attr_cvss_cvssv3_x_translated_temporal_score | real |
| attr_cvss_cvssv3_x_translated_vector | string |
| attr_cvss_cvssv3_x_vector | string |
| attr_cvss_cvssv4_x | dynamic |
| attr_cvss_cvssv4_x_score | real |
| attr_cvss_cvssv4_x_supplemental | dynamic |
| attr_cvss_cvssv4_x_supplemental_automatable | string |
| attr_cvss_cvssv4_x_supplemental_provider_urgency | string |
| attr_cvss_cvssv4_x_supplemental_recovery | string |
| attr_cvss_cvssv4_x_supplemental_response_effort | string |
| attr_cvss_cvssv4_x_supplemental_safety | string |
| attr_cvss_cvssv4_x_supplemental_value_density | string |
| attr_cvss_cvssv4_x_threat | dynamic |
| attr_cvss_cvssv4_x_threat_exploit_maturity | string |
| attr_cvss_cvssv4_x_vector | string |
| attr_cwe | dynamic |
| attr_cwe_id | string |
| attr_cwe_title | string |
| attr_date_of_disclosure | real |
| attr_days_to_patch | real |
| attr_days_to_report | real |
| attr_description | string |
| attr_detection_names | dynamic |
| attr_domains_count | real |
| attr_epss | dynamic |
| attr_epss_percentile | real |
| attr_epss_score | real |
| attr_executive_summary | string |
| attr_exploit_availability | string |
| attr_exploitation | dynamic |
| attr_exploitation_consequence | string |
| attr_exploitation_exploit_release_date | real |
| attr_exploitation_first_exploitation | real |
| attr_exploitation_state | string |
| attr_exploitation_tech_details_release_date | string |
| attr_exploitation_vectors | dynamic |
| attr_field_sources | dynamic |
| attr_files_count | real |
| attr_first_seen_details | dynamic |
| attr_ip_addresses_count | real |
| attr_last_modification_date | real |
| attr_last_seen_details | dynamic |
| attr_malware_roles | dynamic |
| attr_mati_genids_dict | dynamic |
| attr_mati_genids_dict_cve_id | string |
| attr_mati_genids_dict_mve_id | string |
| attr_mati_genids_dict_report_id | string |
| attr_merged_actors | dynamic |
| attr_motivations | dynamic |
| attr_mve_id | string |
| attr_name | string |
| attr_operating_systems | dynamic |
| attr_origin | string |
| attr_predicted_risk_rating | string |
| attr_priority | string |
| attr_private | bool |
| attr_recent_activity_relative_change | real |
| attr_recent_activity_summary | dynamic |
| attr_references_count | real |
| attr_risk_factors | dynamic |
| attr_risk_rating | string |
| attr_source_regions_hierarchy | dynamic |
| attr_sources | dynamic |
| attr_status | string |
| attr_subscribers_count | real |
| attr_summary_stats | dynamic |
| attr_summary_stats_files_detections | dynamic |
| attr_summary_stats_files_detections_avg | real |
| attr_summary_stats_files_detections_max | real |
| attr_summary_stats_files_detections_min | real |
| attr_summary_stats_first_submission_date | dynamic |
| attr_summary_stats_first_submission_date_avg | real |
| attr_summary_stats_first_submission_date_max | real |
| attr_summary_stats_first_submission_date_min | real |
| attr_summary_stats_last_submission_date | dynamic |
| attr_summary_stats_last_submission_date_avg | real |
| attr_summary_stats_last_submission_date_max | real |
| attr_summary_stats_last_submission_date_min | real |
| attr_tags | dynamic |
| attr_tags_details | dynamic |
| attr_targeted_industries | dynamic |
| attr_targeted_industries_tree | dynamic |
| attr_targeted_regions | dynamic |
| attr_targeted_regions_hierarchy | dynamic |
| attr_top_icon_md5 | dynamic |
| attr_urls_count | real |
| attr_vendor_fix_references | dynamic |
| attr_version_history | dynamic |
| attr_workarounds | dynamic |
| attributes | dynamic |
| context_attr_role | string |
| context_attr_shared_with_me | bool |
| context_attributes | dynamic |
| id | string |
| links | dynamic |
| links_self | string |
| TenantId | string |
| TimeGenerated | datetime |
| Type | string |
| VulnType | string |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Google Threat Intelligence Vulnerabilities (CCF) |
In solution Google Threat Intelligence:
In solution Google Threat Intelligence:
| Workbook | Selection Criteria |
|---|---|
| GoogleThreatIntelligence |
| Parser | Solution | Selection Criteria |
|---|---|---|
| GTIVulnerabilities | Google Threat Intelligence |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊