LookoutMtdV2_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items
• Parsers

Schema (31 columns)

Source: KQL validation test schema

Column Name	Type
actor	dynamic
audit	dynamic
audit_attribute_changes	dynamic
change_type	string
client_lookout_sdk_version	string
client_ota_version	string
client_package_name	string
client_package_version	string
device	dynamic
device_activated_at	datetime
device_activation_status	string
device_checkin_time	datetime
device_customer_id	string
device_deactivated_at	datetime
device_group_guid	string
device_permissions	dynamic
device_settings	dynamic
device_vulns	dynamic
enterprise_guid	string
event_type	string
id	string
log_type	string
mdm_connector_id	string
mdm_connector_uuid	string
mdm_external_id	string
risky_config	dynamic
smishing_alert	dynamic
smishing_detections	dynamic
target	dynamic
threat	dynamic
TimeGenerated	datetime

Solutions (1)

This table is used by the following solutions:

• Lookout

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Lookout Mobile Threat Detection Connector (via Codeless Connector Framework) (Preview)

---

Content Items Using This Table (10)

Analytic Rules (4)

In solution Lookout:

Analytic Rule	Selection Criteria
Lookout - Critical Audit and Policy Changes (v2)
Lookout - Critical Smishing and Phishing Alerts (v2)
Lookout - Device Compliance and Security Status Changes (v2)
Lookout - High Severity Mobile Threats Detected (v2)

Hunting Queries (1)

In solution Lookout:

Hunting Query	Selection Criteria
Lookout Advanced Threat Hunting - Multi-Vector Attacks

Workbooks (5)

In solution Lookout:

Workbook	Selection Criteria
LookoutEvents
LookoutEventsV2
LookoutExecutiveDashboard
LookoutIOAInvestigationDashboard
LookoutSecurityInvestigationDashboard

Parsers Using This Table (1)

Other Parsers (1)

Parser	Solution	Selection Criteria
LookoutEvents	Lookout

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index