TI map IP entity to GitHub_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies a match in GitHub_CL table from any IP IOC from TI

Attribute Value
Type Analytic Rule
Solution Threat Intelligence (NEW)
ID 43d6c173-64c8-4416-b32e-636a9f318d15
Severity Medium
Kind Scheduled
Tactics CommandAndControl
Techniques T1071
Required Connectors ThreatIntelligence, ThreatIntelligenceTaxii, MicrosoftDefenderThreatIntelligence
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
GitHub_CL ? ?
ThreatIntelIndicators ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Threat Intelligence (NEW)