SecurityBaseline

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Reference for SecurityBaseline table in Azure Monitor Logs.

Attribute	Value
Category	Security
Basic Logs Eligible	✗ No (source)
Supports Transformations	✓ Yes (source)
Ingestion API Supported	✗ No
Azure Monitor Tables Reference	View Documentation

Contents

• Schema
• Solutions
• Content Items
• Resource Types

Schema (31 columns)

Source: Azure Monitor documentation

Column Name	Type	Description
_BilledSize	real	The record size in bytes
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable isfalseingestion isn't billed to your Azure account
_ResourceId	string	A unique identifier for the resource that the record is associated with
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
ActualResult	string
AnalyzeOperation	string
AnalyzeResult	string
AssessmentId	string
AzId	string
BaselineRuleType	string
BaselineType	string
CceId	string
Computer	string
ComputerEnvironment	string
Description	string
ExpectedResult	string
ManagementGroupName	string
OSName	string
Resource	string
ResourceGroup	string
ResourceId	string
ResourceProvider	string
ResourceType	string
RuleSetting	string
RuleSeverity	string
SitePath	string
SourceComputerId	string
SourceSystem	string	The type of agent the event was collected by. For example,OpsManagerfor Windows agent, either direct connect or Operations Manager,Linuxfor all Linux agents, orAzurefor Azure Diagnostics
SubscriptionId	string
TimeGenerated	datetime
Type	string	The name of the table

Solutions (7)

This table is used by the following solutions:

• AzureSecurityBenchmark
• ContinuousDiagnostics&Mitigation
• CybersecurityMaturityModelCertification(CMMC)2.0
• NISTSP80053
• SOC Handbook
• ThreatAnalysis&Response
• ZeroTrust(TIC3.0)

---

Content Items Using This Table (11)

Workbooks (11)

In solution AzureSecurityBenchmark:

Workbook	Selection Criteria
AzureSecurityBenchmark

In solution ContinuousDiagnostics&Mitigation:

Workbook	Selection Criteria
ContinuousDiagnostics&Mitigation

In solution CybersecurityMaturityModelCertification(CMMC)2.0:

Workbook	Selection Criteria
CybersecurityMaturityModelCertification_CMMCV2

In solution NISTSP80053:

Workbook	Selection Criteria
NISTSP80053

In solution SOC Handbook:

Workbook	Selection Criteria
InvestigationInsights

In solution ThreatAnalysis&Response:

Workbook	Selection Criteria
DynamicThreatModeling&Response

In solution ZeroTrust(TIC3.0):

Workbook	Selection Criteria
ZeroTrustTIC3

GitHub Only:

Workbook	Selection Criteria
ASC-ComplianceandProtection
DoDZeroTrustWorkbook
InvestigationInsights
ZeroTrustStrategyWorkbook

Resource Types

This table collects data from the following Azure resource types:

• microsoft.compute/virtualmachines
• microsoft.conenctedvmwarevsphere/virtualmachines
• microsoft.azurestackhci/virtualmachines
• microsoft.scvmm/virtualmachines
• microsoft.compute/virtualmachinescalesets

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index