Forescout eyeExtend for Microsoft Sentinel

Solution: ForescoutHostPropertyMonitor

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Solutions Index

---

Attribute	Value
Publisher	Forescout Technologies
Support Tier	Partner
Support Link	https://www.forescout.com/support
Categories	Security - Network
Version	3.0.0
Author	Julian Wang - julian.wang@forescout.com
First Published	2022-06-28
Solution Folder	ForescoutHostPropertyMonitor
Marketplace	Azure Marketplace · Popularity: ⚪ Very Low (0%)

Forescout Host Property Monitor offers host property analysis, incident generation and action dispatching for hosts managed by Forescout Continuum platform.

Contents

• Data Connectors
• Tables Used
• Content Items

Data Connectors

This solution provides 1 data connector(s):

• Forescout Host Property Monitor

Tables Used

This solution uses 3 table(s):

Table	Used By Connectors	Used By Content
ForescoutComplianceStatus_CL	Forescout Host Property Monitor, Forescout Host Property Monitor (Push Connector via Codeless Connector Framework)	Workbooks
ForescoutHostProperties_CL	Forescout Host Property Monitor, Forescout Host Property Monitor (Push Connector via Codeless Connector Framework)	Analytics, Workbooks
ForescoutPolicyStatus_CL	Forescout Host Property Monitor, Forescout Host Property Monitor (Push Connector via Codeless Connector Framework)	Workbooks

Content Items

This solution includes 3 content item(s):

Content Type	Count
Analytic Rules	1
Workbooks	1
Playbooks	1

Analytic Rules

Name	Severity	Tactics	Tables Used
Forescout-DNS_Sniff_Event_Monitor	Medium	-	ForescoutHostProperties_CL

Workbooks

Name	Tables Used
ForescoutHostPropertyMonitorWorkbook	ForescoutComplianceStatus_CL ForescoutHostProperties_CL ForescoutPolicyStatus_CL

Playbooks

Name	Description	Tables Used
Forescout-DNS_Sniff_Event_Playbook	This playbook will update incident with action to perform on endpoint	-

Release Notes

Version	Date Modified (DD-MM-YYYY)	Change History
3.1.0	07-07-2026	Retained the legacy Forescout Host Property Monitor data connector alongside the new Codeless Connector Framework (CCF) push connector so the solution now ships both connector versions. The CCF connector adds a Data Collection Rule with three custom streams and tables (ForescoutHostProperties_CL, ForescoutPolicyStatus_CL, ForescoutComplianceStatus_CL). Updated solution and playbook support contact to Microsoft.
3.0.0	18-02-2025	Added new Workbook Forescout Host Property Monitor Workbook. Changes to Analytic Rules and Playbook corresponding to Customer table changes replaced HTTP Data Collector API with Log Ingestion API.
2.0.1	26-05-2022	Updated Support details from Microsoft to Forescout.
2.0.0	05-11-2023	Initial Solution Release.

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Solutions Index