TheomAlerts_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Attribute	Value
Custom Log V1	Yes 🔶 — uses type-suffixed column names
Ingestion API Supported	✓ Yes

Schema (23 columns)

Source: KQL validation test schema

Column Name	Type
accountId_s	string
customProps_AssetCriticality_s	string
customProps_AssetCriticalityReason_s	string
customProps_AssetDeepLink_s	string
customProps_AssetName_s	string
customProps_AssetNERValue_s	string
customProps_AssetType_s	string
customProps_LastTriggered_s	string
customProps_NumTriggered_s	string
customProps_Region_s	string
customProps_RemediationIds_s	string
customProps_RuleId_s	string
customProps_RulePriority_s	string
customProps_TheomRemoteId_s	string
customProps_TheomRule_s	string
deepLink_s	string
details_s	string
id_s	string
priority_s	string
summary_s	string
tags_s	string
TimeGenerated	datetime
type_s	string

This table is used by the following solutions:

This table is ingested by the following connectors:

Connector	Selection Criteria
Theom

In solution Theom:

Analytic Rule	Selection Criteria
Theom - Critical data in API headers or body
Theom - Dark Data with large fin value
Theom - Dev secrets exposed
Theom - Dev secrets unencrypted
Theom - Financial data exposed
Theom - Financial data unencrypted
Theom - Healthcare data exposed
Theom - Healthcare data unencrypted
Theom - Least priv large value shadow DB
Theom - National IDs exposed
Theom - National IDs unencrypted
Theom - Overprovisioned Roles Shadow DB
Theom - Shadow DB large datastore value
Theom - Shadow DB with atypical accesses
Theom - Unencrypted public data stores
Theom Critical Risks
Theom High Risks
Theom Insights
Theom Low Risks
Theom Medium Risks

In solution Theom:

Workbook	Selection Criteria
Theom

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊