RecordedFutureSandboxResults_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Internal Use Table: This table is created and used internally by the Recorded Future solution. It is written to by playbooks for solution-specific data storage.

Attribute	Value
Category	Internal
Custom Log V1	Yes 🔶 — uses type-suffixed column names
Ingestion API Supported	✓ Yes

Contents

• Schema
• Schema References
• Solutions
• Content Items

Schema (9 columns)

Source: KQL validation test schema

Column Name	Type
EmailFrom_s	string
EmailTo_s	string
FileName_s	string
SampleId_s	string
SandboxScore_s	string
SandboxVerdict_s	string
Source_s	string
SourceSystem	string
TimeGenerated	datetime

Schema References

Official Microsoft Learn documentation for field/column information:

• Data Source Schema Reference

Solutions (1)

This table is used by the following solutions:

• Recorded Future

---

Content Items Using This Table (4)

Analytic Rules (2)

In solution Recorded Future:

Analytic Rule	Selection Criteria
Recorded Future Sandbox - Malicious Email Attachment
Recorded Future Sandbox - Malicious File in Storage Account

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index