Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| AddedIOCsToDefender | bool |
| BreachTitle | string |
| DeviceId | string |
| DocumentId | string |
| ExposureLevel | string |
| HostName | string |
| IncidentId | string |
| InfectedMachineId | string |
| InfectedTime | string |
| IsolationRequested | bool |
| IsolationStatus | bool |
| MachineTagAdded | bool |
| MachineTagName | string |
| NormalizedHostName | string |
| OSPlatform | string |
| PlaybookName | string |
| RiskScore | string |
| SpyCloudPublishDate | datetime |
| TimeGenerated | datetime |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| SpyCloud Enterprise Protection Connector |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊