HalcyonEventsV2_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (39 columns)

Source: Connector definition

Column Name Type
action string
action_id int
activity_id int
activity_name string
actor dynamic
answers dynamic
app dynamic
category_name string
category_uid int
class_name string
class_uid int
device dynamic
disposition string
disposition_id int
driver dynamic
dst_endpoint dynamic
file dynamic
HalcyonEventId string
HalcyonSourceTime datetime
message string
metadata dynamic
module dynamic
process dynamic
query dynamic
raw_data string
raw_record string
rcode string
rcode_id int
severity string
severity_id int
src_endpoint dynamic
status string
status_id int
TimeGenerated datetime
traffic dynamic
type_name string
type_uid long
unmapped dynamic
user dynamic

Schema References

Official Microsoft Learn documentation for field/column information:

Solutions (1)

This table is used by the following solutions:

Connectors (1)

This table is ingested by the following connectors:

Connector Selection Criteria
Halcyon Connector (v2)

Parsers Using This Table (7)

Other Parsers (7)

Parser Solution Selection Criteria
Halcyon_OCSF_ApplicationLifecycle Halcyon
Halcyon_OCSF_Authentication Halcyon
Halcyon_OCSF_DnsActivity Halcyon
Halcyon_OCSF_FileActivity Halcyon
Halcyon_OCSF_KernelActivity Halcyon
Halcyon_OCSF_NetworkActivity Halcyon
Halcyon_OCSF_ProcessActivity Halcyon

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index