Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Type | Workbook |
| Solution | CybersecurityMaturityModelCertification(CMMC)2.0 |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
AADManagedIdentitySignInLogs |
✓ | ✗ | ✓ | |
AADNonInteractiveUserSignInLogs |
✓ | ✗ | ✓ | |
AADServicePrincipalSignInLogs |
✓ | ✗ | ✓ | |
AADUserRiskEvents |
✓ | ✗ | ✓ | |
AuditLogs |
✓ | ✗ | ✓ | |
AzureActivity |
OperationNameValue contains "Insights" |
✗ | ✗ | ✗ |
AzureDiagnostics 🔶 |
Category == "AzureFirewallApplicationRule" |
✗ | ✗ | ✗ |
BehaviorAnalytics |
✓ | ✗ | ✗ | |
ConfigurationChange |
✓ | ✗ | ✗ | |
DeviceEvents |
ActionType in "Add member to role,Add user,FileCreated,InteractiveLogon,RemoteInteractiveLogon,Reset user password,ResourceAccess,Sign-in,Update user,UsbDriveMounted" |
✓ | ✗ | ✓ |
DeviceFileEvents |
✓ | ✗ | ✓ | |
Event |
RenderedDescription contains "Hello" |
✓ | ✓ | ✗ |
IdentityInfo |
✓ | ✗ | ✓ | |
InformationProtectionLogs_CL 🔶 |
? | ✓ | ? | |
OfficeActivity |
RecordType == "MicrosoftTeams" |
✓ | ✗ | ✓ |
SecurityAlert |
ProductName == "Microsoft 365 Insider Risk Management" |
✓ | ✗ | ✓ |
SecurityBaseline |
AnalyzeResult in "Failed,Passed" |
✓ | ✗ | ✗ |
SecurityIncident |
Classification in "BenignPositive,FalsePositive,TruePositive,Undetermined"Severity == "High"Title contains "PII"Title contains "USB"Title contains "access"Title contains "account"Title contains "backdoor"Title contains "beacon"Title contains "brute"Title contains "c2"Title contains "confidential"Title contains "cred"Title contains "data"Title contains "deny"Title contains "drive"Title contains "execution"Title contains "exfil"Title contains "exploit"Title contains "file"Title contains "intellectual"Title contains "leak"Title contains "logon"Title contains "loss"Title contains "media"Title contains "removable"Title contains "restricted"Title contains "sensitive"Title contains "shared"Title contains "sign"Title contains "software"Title contains "spill"Title contains "storage"Title contains "test"Title contains "tool"Title contains "trojan"Title contains "usb"Title contains "virus"Title contains "ware" |
✓ | ✗ | ✓ |
SecurityRecommendation |
RecommendationState in "Healthy,Unhealthy" |
✓ | ✗ | ✗ |
SecurityRegulatoryCompliance |
ComplianceStandard == "NIST-SP-800-171-R2" |
✓ | ✗ | ✗ |
SigninLogs |
AuthenticationRequirement == "multiFactorAuthentication"OperationName in "Add member to role,Add user,NetworkSecurityGroupEvents,Reset user password,Update user"OperationName contains "Add"OperationName contains "Audit"OperationName contains "Change"OperationName contains "Create"OperationName contains "Delete"OperationName contains "Log"OperationName contains "Monitor"OperationName contains "PIM"OperationName contains "Remove"OperationName contains "Update"OperationName contains "Write"OperationName contains "reset" |
✓ | ✗ | ✓ |
Usage |
✗ | ✗ | ✗ |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Workbooks · Back to CybersecurityMaturityModelCertification(CMMC)2.0