Edit

dnsEntityMapping resource type

Namespace: microsoft.graph.security

Represents a mapping from columns in a custom detection rule query result to a DNS entity that is attached to the resulting alert.

Base type: entityMapping.

Properties

Property Type Description
domainNameColumn String Name of the detection query column that maps to the domain name of the alert entity.
hostIpAddressColumn String Name of the detection query column that maps to the host IP address of the alert entity.
serverIpColumn String Name of the detection query column that maps to the server IP address of the alert entity.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.dnsEntityMapping",
  "domainNameColumn": "String",
  "hostIpAddressColumn": "String",
  "serverIpColumn": "String"
}