LastPassNativePoller_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Custom Log V1	Yes 🔶 — uses type-suffixed column names
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items

Schema (12 columns)

Source: KQL validation test schema

Column Name	Type
_ResourceId	string
Action_s	string
Computer	string
Data_s	string
IP_Address_s	string
ManagementGroupName	string
MG	string
RawData	string
Time_s	string
TimeGenerated	datetime
Type	string
Username_s	string

Solutions (1)

This table is used by the following solutions:

• Lastpass Enterprise Activity Monitoring

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
LastPass Enterprise - Reporting (Polling CCP)

---

Content Items Using This Table (8)

Analytic Rules (5)

In solution Lastpass Enterprise Activity Monitoring:

Analytic Rule	Selection Criteria
Employee account deleted
Failed sign-ins into LastPass due to MFA
Highly Sensitive Password Accessed
TI map IP entity to LastPass data
Unusual Volume of Password Updated or Removed

Hunting Queries (2)

In solution Lastpass Enterprise Activity Monitoring:

Hunting Query	Selection Criteria
Failed sign-ins into LastPass due to MFA.
Password moved to shared folders

Workbooks (1)

In solution Lastpass Enterprise Activity Monitoring:

Workbook	Selection Criteria
LastPassWorkbook

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index