Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Type | Workbook |
| Solution | Microsoft Defender XDR |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
DeviceEvents |
ActionType in "AntivirusDetection,PnpDeviceConnected"ActionType endswith "Audited"ActionType endswith "Blocked"ActionType startswith "Asr" |
✓ | ✗ | ? |
DeviceFileCertificateInfo |
✓ | ✗ | ? | |
DeviceFileEvents |
✓ | ✗ | ? | |
DeviceImageLoadEvents |
✓ | ✗ | ? | |
DeviceInfo |
ActionType in "FileCreated,UsbDriveMounted" |
✓ | ✗ | ? |
DeviceLogonEvents |
✓ | ✗ | ? | |
DeviceNetworkEvents |
✓ | ✗ | ? | |
DeviceNetworkInfo |
✓ | ✗ | ? | |
DeviceProcessEvents |
✓ | ✗ | ? | |
DeviceRegistryEvents |
✓ | ✗ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊