Microsoft Advanced Threat Analytics - Classification

Classifies Microsoft Advanced Threat Analytics suspicious activities

Microsoft Advanced Threat Analytics Classification

Details

ID	`Microsoft Advanced Threat Analytics`
Type	classification
Version	-1
From Version	6.0.0
Default Incident Type	Microsoft ATA Suspicious Activity
Feed	No

Source

classifier-MicrosoftAdvancedThreatAnalytics.json

Download History Raw

{
    "id": "Microsoft Advanced Threat Analytics",
    "name": "Microsoft Advanced Threat Analytics - Classification",
    "type": "classification",
    "description": "Classifies Microsoft Advanced Threat Analytics suspicious activities",
    "fromVersion": "6.0.0",
    "version": -1,
    "defaultIncidentType": "Microsoft ATA Suspicious Activity",
    "feed": false,
    "keyTypeMap": {},
    "transformer": {}
}