SpyCloud_ConditionalAccessLogsV2_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Schema References
• Solutions
• Connectors

Schema (14 columns)

Source: KQL validation test schema

Column Name	Type
BreachTitle	string
CAgroup	bool
DocumentId	string
ForcedPasswordResetOnNextSignIn	bool
IncidentId	string
InfectedMachineId	string
InfectedTime	string
PlaybookName	string
SpyCloudPublishDate	datetime
TimeGenerated	datetime
UserDisabled	bool
UserEmail	string
Username	string
UserSessionsRevoked	bool

Schema References

Official Microsoft Learn documentation for field/column information:

• Data Source Schema Reference

Solutions (1)

This table is used by the following solutions:

• SpyCloud Enterprise Protection CCF

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
SpyCloud Enterprise Protection Connector

---

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index