Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| action_s | string |
| actions_s | string |
| adminOverride_s | string |
| advancedPhishingResult_CredentialTheftBrands_s | string |
| advancedPhishingResult_CredentialTheftEvidence_s | string |
| advancedPhishingResult_CredentialTheftTags_s | string |
| category_s | string |
| creationMethod_s | string |
| date_t | datetime |
| emailPartsDescription_s | string |
| fromUserEmailAddress_s | string |
| messageId_s | string |
| mimecastEventCategory_s | string |
| mimecastEventId_s | string |
| route_s | string |
| scanResult_s | string |
| sendingIp_s | string |
| subject_s | string |
| time_generated | datetime |
| TimeGenerated | datetime |
| ttpDefinition_s | string |
| url_s | string |
| userAwarenessAction_s | string |
| userEmailAddress_s | string |
| userOverride_s | string |
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Mimecast Targeted Threat Protection |
In solution MimecastTTP:
| Analytic Rule | Selection Criteria |
|---|---|
| Mimecast Targeted Threat Protection - URL Protect |
In solution MimecastTTP:
| Workbook | Selection Criteria |
|---|---|
| MimecastTTPWorkbook |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊