Ttp_Url_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items
• Parsers

Schema (43 columns)

Source: KQL validation test schema

Column Name	Type
action	string
actions	dynamic
adminOverride	string
advancedPhishingResult_CredentialTheftBrands	string
advancedPhishingResult_CredentialTheftEvidence	string
advancedPhishingResult_CredentialTheftTags	string
Category	string
creationMethod	string
Date	string
emailPartsDescription	dynamic
fromUserEmailAddress	string
messageId	string
mimecastEventCategory	string
mimecastEventId	string
route	string
scanResult	string
sendingIp	string
subject	string
tagMap_AdvancedPhishing_CredentialTheftEvidence	string
tagMap_AdvancedPhishing_CredentialTheftTags	string
tagMap_AvScanning_ContentCheck_AvSignatureFileExts	string
tagMap_AvScanning_ContentCheck_AvSignatureName	string
tagMap_AvScanning_ContentCheck_UrlFileDownloadFilename	string
tagMap_AvScanning_ScannerInfo_CategoryTrigger	string
tagMap_ContentCheck_DangerousExtsUrlFileDownload	string
tagMap_ContentCheck_DangerousMimetypesUrlFileDownload	string
tagMap_CustomerManagedUrls_Blocklisted	string
tagMap_CustomerManagedUrls_ManagedUrlEntry	string
tagMap_CustomerManagedUrls_Status	string
tagMap_DangerousFileExt_ContentCheck_ContentScannersBlocked	string
tagMap_DangerousFileExt_Inspect_FileExts	string
tagMap_DangerousFileExt_Inspect_MimeTypes	string
tagMap_DangerousFileExt_Status	string
tagMap_UrlReputationScan_Status	string
tagMap_UrlReputationScan_Type	string
tagMap_UrlReputationScan_Url	string
tagMap_UrlReputationScan_UrlBlock	string
TimeGenerated	datetime
ttpDefinition	string
url	string
userAwarenessAction	string
userEmailAddress	string
userOverride	string

Solutions (1)

This table is used by the following solutions:

• Mimecast

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Mimecast Targeted Threat Protection

---

Content Items Using This Table (2)

Analytic Rules (1)

In solution Mimecast:

Analytic Rule	Selection Criteria
Mimecast Targeted Threat Protection - URL Protect

Workbooks (1)

In solution Mimecast:

Workbook	Selection Criteria
Mimecast_TTP_Workbook

Parsers Using This Table (1)

Other Parsers (1)

Parser	Solution	Selection Criteria
MimecastTTPUrl	Mimecast

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index