WindowsFirewall

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Attribute Value
Type Workbook
Solution Windows Firewall
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
Heartbeat Solutions contains "windowsFirewall" ? ?
SecurityEvent AccountType == "User"
EventID in "4624,4625"
LogonType == "10"
SigninLogs ResultType == "0"
ResultType != "0"
WindowsFirewall DestinationPort == "3389"
FirewallAction in "ALLOW,DROP"
SourceIP !in "::1,-"
?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Workbooks · Back to Windows Firewall