CrowdStrikeCasesV2_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Attribute	Value
Category	Crowdstrike
Ingestion API Supported	✓ Yes

Schema (22 columns)

Source: Connector definition

Column Name	Type	Description
AnalysisResults	dynamic	The results of analyzing the case evidence (alerts, cloud_assets, events, files, hosts, users).
AssignedTo	dynamic	Details about the user who is currently assigned to the case.
Cid	string	The unique customer account ID that the case belongs to.
Consistency	dynamic	Background processing details associated with updates made to the case.
CreatedBy	dynamic	Details about the user who created the case.
CreatedTimestamp	datetime	The date and time the case was created.
CrowdStrikeDomain	string	CrowdStrike host/domain configured for this connection; hard-coded on every record so hosts can be differentiated.
Description	string	The user-provided description of the case.
EndTimestamp	datetime	The date and time the case was ended.
Evidence	dynamic	Evidence associated with the case (alerts, events).
Id	string	The unique ID of the case.
LastUpdatedBy	dynamic	Details about the user who last updated the case.
Name	string	The user-defined case name.
ReferenceId	string	Reference identifier for the case.
Severity	int	The current user-provided severity rating of the case (1-100).
SeverityInfo	dynamic	Additional information about the severity of the case.
StartTimestamp	datetime	The date and time the case was started.
Status	string	The current status of the case (new, closed, in_progress, reopened).
Tags	dynamic	A list of user-defined labels applied to the case.
TimeGenerated	datetime
UpdatedTimestamp	datetime	The date and time the case was last updated.
Version	int	The current case version.