Details
| ID | microsoft_defender_cloud_apps_ModelingRule |
|---|---|
| From Version | 8.15.0 |
| Tags | microsoft |
Schema
microsoft_defender_cloud_apps_raw
| Field | Type | Array? |
|---|---|---|
appName |
string | — |
description |
string | — |
device |
string | — |
entities |
string | — |
eventTypeValue |
string | — |
event_type_name |
string | — |
evidence |
string | — |
idValue |
int | — |
location |
string | — |
mainInfo |
string | — |
rawDataJson |
string | — |
resolutionStatusValue |
int | — |
severity |
string | — |
severityValue |
int | — |
stories |
string | — |
timestamp |
int | — |
title |
string | — |
user |
string | — |