Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Type | Workbook |
| Solution | DORA Compliance |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
DeviceFileEvents |
✓ | ✗ | ? | |
DeviceNetworkEvents |
✓ | ✗ | ? | |
Event |
EventID in "1001,1069,1205"EventLevelName == "Error"RenderedDescription has_any "failover" |
✓ | ✓ | ✗ |
Heartbeat |
? | ✗ | ? | |
SecurityAlert |
AlertName has_any "Backup Failure"AlertName has_any "Blocked"AlertName has_any "Compliance Violation"AlertName has_any "Credential Access"AlertName has_any "Data Exfiltration"AlertName has_any "Incident Reported"AlertName has_any "Malware"AlertName has_any "Policy Change"AlertName has_any "Service Outage"AlertName has_any "Suspicious Login"AlertName has_any "TLPT"AlertName has_any "Third-Party"AlertName has_any "Threat Intelligence"AlertName has_any "Unauthorized Access"AlertName has_any "Vulnerability Exploitation" |
✓ | ✗ | ✓ |
SecurityIncident |
✓ | ✗ | ✓ | |
ThreatIntelIndicators |
ObservableKey contains "file:hashes."ObservableKey contains "network-traffic" |
✓ | ✓ | ✗ |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊