Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Reference for SecurityAttackPathData table in Azure Monitor Logs.
| Attribute | Value |
|---|---|
| Category | Security |
| Basic Logs Eligible | ✓ Yes (source) |
| Supports Transformations | ✓ Yes (source) |
| Ingestion API Supported | ✗ No |
| Azure Monitor Tables Reference | View Documentation |
Source: Azure Monitor documentation
| Column Name | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable isfalseingestion isn't billed to your Azure account |
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
| AdditionalRemediationSteps | string | The manual remediation steps of the attack path. |
| Assessments | dynamic | The assessments mapped to the attack path. |
| AttackPathId | string | The ID of the attack path. |
| AttackStory | string | The attack story. |
| Description | string | The description of the attack path. |
| DisplayName | string | The display name of the attack path. |
| EntrypointId | string | The ID of the attack path enry point. |
| Mitre | string | MITRE mapping of the path. |
| Path | dynamic | The nodes, edges & insights that create the path. |
| PotentialImpact | string | The potenrial impact of the attack path. |
| RiskFactors | dynamic | The risk factors of the attack path. |
| RiskLevel | string | The risk level of the attack path. |
| SourceSystem | string | The type of agent the event was collected by. For example,OpsManagerfor Windows agent, either direct connect or Operations Manager,Linuxfor all Linux agents, orAzurefor Azure Diagnostics |
| TargetId | string | The ID of the attack path target. |
| TenantId | string | The Log Analytics workspace ID |
| TimeGenerated | datetime | The date and time the attack path was exported. |
| Type | string | The name of the table |
This table collects data from the following Azure resource types:
microsoft.security/securityBrowse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊