SecurityDetection
Table attributes
Attribute | Value |
---|---|
Resource types | - |
Categories | Security |
Solutions | Security |
Basic log | No |
Ingestion-time transformation | Yes |
Sample Queries | - |
Columns
Column | Type | Description |
---|---|---|
AccountsSeen | int | |
AlertSeverity | string | |
AlertTitle | string | |
AssociatedResource | string | |
_BilledSize | real | The record size in bytes |
ChildProcess | string | |
CommandLine | string | |
Computer | string | |
Description | string | |
DetectionID | string | |
Duration | string | |
ExtendedProperties | string | |
FailedAttempts | int | |
FullPath | string | |
InvalidAccountsSeen | int | |
_IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
IsFirstParty | bool | |
LogChannel | string | |
OccuringDatacenter | string | |
OriginalSeverity | string | |
ParentProcess | string | |
ProcessName | string | |
Provider | string | |
RemediationSteps | string | |
ReportingSystem | string | |
_ResourceId | string | A unique identifier for the resource that the record is associated with |
ServiceId | string | |
SubjectDomainName | string | |
SubjectUserName | string | |
SubscriptionId | string | |
_SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
SuccessfulLogins | int | |
SuspiciousProcess | string | |
TimeGenerated | datetime | |
Type | string | The name of the table |
ValidAccountsSeen | int |