Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _ResourceId | string |
| attributes_crowdsourced_ids_results | dynamic |
| attributes_detected_brands | dynamic |
| attributes_expiration | real |
| attributes_gti_assessment | dynamic |
| attributes_gti_assessment_contributing_factors | dynamic |
| attributes_gti_assessment_description | string |
| attributes_gti_assessment_severity | dynamic |
| attributes_gti_assessment_severity_value | string |
| attributes_gti_assessment_threat_score | dynamic |
| attributes_gti_assessment_threat_score_value | real |
| attributes_gti_assessment_verdict | dynamic |
| attributes_gti_assessment_verdict_value | string |
| attributes_gti_cf_gti_confidence_score | real |
| attributes_gti_cf_mandiant_confidence_score | real |
| attributes_gti_cf_pervasive_indicator | bool |
| attributes_gti_cf_safebrowsing_verdict | string |
| attributes_html_meta | dynamic |
| attributes_html_meta_viewport | dynamic |
| attributes_last_final_url | string |
| attributes_last_http_response_code | real |
| attributes_last_http_response_content_length | real |
| attributes_last_http_response_content_sha256 | string |
| attributes_last_http_response_headers | dynamic |
| attributes_last_http_response_headers_age | string |
| attributes_last_http_response_headers_allow | string |
| attributes_last_http_response_headers_cf_cache_status | string |
| attributes_last_http_response_headers_cf_ray | string |
| attributes_last_http_response_headers_content_encoding | string |
| attributes_last_http_response_headers_content_type | string |
| attributes_last_http_response_headers_date | string |
| attributes_last_http_response_headers_last_modified | string |
| attributes_last_http_response_headers_server | string |
| attributes_outgoing_links | dynamic |
| attributes_private | bool |
| attributes_redirection_chain | dynamic |
| attributes_sandbox_verdicts | dynamic |
| attributes_sigma_analysis_results | dynamic |
| attributes_sigma_analysis_summary | dynamic |
| attributes_tags | dynamic |
| attributes_title | string |
| attributes_tld | string |
| attributes_trackers | dynamic |
| attributes_url | string |
| context_attributes_role | string |
| context_attributes_shared_with_me | bool |
| id | string |
| links_self | string |
| TenantId | string |
| TimeGenerated | datetime |
| Type | string |
| UrlType | string |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
In solution Google Threat Intelligence:
| Workbook | Selection Criteria |
|---|---|
| GoogleThreatIntelligence |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊