Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Namespace: microsoft.graph.security
Represents a mapping from columns in a custom detection rule query result to a host entity that is attached to the resulting alert.
Base type: entityMapping.
Properties
| Property | Type | Description |
|---|---|---|
| deviceIdColumn | String | Name of the detection query column that maps to the device ID of the alert entity. |
| dnsDomainColumn | String | Name of the detection query column that maps to the DNS domain of the alert entity. |
| nameColumn | String | Name of the detection query column that maps to the name of the alert entity. |
| netBiosNameColumn | String | Name of the detection query column that maps to the NetBIOS name of the alert entity. |
| ntDomainColumn | String | Name of the detection query column that maps to the NT domain of the alert entity. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.hostEntityMapping",
"deviceIdColumn": "String",
"dnsDomainColumn": "String",
"nameColumn": "String",
"netBiosNameColumn": "String",
"ntDomainColumn": "String"
}