Ttp_Impersonation_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items
• Parsers

Schema (15 columns)

Source: KQL validation test schema

Column Name	Type
action	string
definition	string
eventTime	datetime
hits	real
id	string
identifiers	dynamic
impersonationResults	string
messageId	string
recipientAddress	string
senderAddress	string
senderIpAddress	string
subject	string
taggedExternal	bool
taggedMalicious	bool
TimeGenerated	datetime

Solutions (1)

This table is used by the following solutions:

• Mimecast

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Mimecast Targeted Threat Protection

---

Content Items Using This Table (2)

Analytic Rules (1)

In solution Mimecast:

Analytic Rule	Selection Criteria
Mimecast Targeted Threat Protection - Impersonation Protect

Workbooks (1)

In solution Mimecast:

Workbook	Selection Criteria
Mimecast_TTP_Workbook

Parsers Using This Table (1)

Other Parsers (1)

Parser	Solution	Selection Criteria
MimecastTTPImpersonation	Mimecast

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index