WindowsFirewall

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


Attribute Value
Type Workbook
Solution Windows Firewall
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
Heartbeat Solutions contains "windowsFirewall" ✗ ✗ ✗
SecurityEvent AccountType == "User"
EventID in "4624,4625"
LogonType == "10"
✓ ✓ ✓
SigninLogs ResultType == "0"
ResultType != "0"
✓ ✗ ✓
WindowsFirewall DestinationPort == "3389"
FirewallAction in "ALLOW,DROP"
SourceIP !in "::1,-"
✓ ✗ ✓

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Workbooks · Back to Windows Firewall