WhisperASNReputation_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Tables Index


Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (11 columns)

Source: KQL validation test schema

Column Name Type
asn string
asnName string
avgThreatScore real
country string
hasThreateningPrefixes bool
maxThreatScore real
peerCount int
prefixCount int
reputationLevel string
reputationScore real
TimeGenerated datetime

Schema References

Official Microsoft Learn documentation for field/column information:

Solutions (1)

This table is used by the following solutions:


Content Items Using This Table (5)

Analytic Rules (2)

In solution Whisper:

Analytic Rule Selection Criteria
Whisper Security - ASN Reputation Degradation
Whisper Security - Newly Registered Domain on Threat ASN

Hunting Queries (1)

In solution Whisper:

Hunting Query Selection Criteria
Whisper - ASN Reputation Score Hunt

Workbooks (2)

In solution Whisper:

Workbook Selection Criteria
AsnReputationMonitoring
InfrastructureThreatLandscape

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Tables Index