WhisperInfraContext_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Schema References
• Solutions
• Content Items

Schema (17 columns)

Source: KQL validation test schema

Column Name	Type
asnNames	string
asns	string
bgpStatus	string
cities	string
cohostedCount	int
countries	string
dnssecAlgorithm	string
domainAge	int
indicator	string
indicatorType	string
ipAddresses	string
nameservers	string
prefixes	string
registrant	string
registrar	string
spfIncludes	string
TimeGenerated	datetime

Schema References

Official Microsoft Learn documentation for field/column information:

• Data Source Schema Reference

Solutions (1)

This table is used by the following solutions:

• Whisper

---

Content Items Using This Table (11)

Analytic Rules (3)

In solution Whisper:

Analytic Rule	Selection Criteria
Whisper Security - Co-Hosted Malware Cluster Detection
Whisper Security - Newly Registered Domain on Threat ASN
Whisper Security - SPF Record Unauthorized Include Detection

Hunting Queries (5)

In solution Whisper:

Hunting Query	Selection Criteria
Whisper - Attack Surface Discovery
Whisper - Domain to ASN Migration
Whisper - Infrastructure Pivot Analysis
Whisper - Newly Registered Domain Hunt
Whisper - Shared Infrastructure Clustering

Workbooks (3)

In solution Whisper:

Workbook	Selection Criteria
DomainRegistrationAnomaly
ExternalAttackSurfaceOverview
InfrastructureThreatLandscape

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index