Defender For Cloud Microsoft Modeling Rule

Details

ID	`defender_for_cloud_microsoft_modeling_rule`
From Version	6.10.0
Tags	defender_for_cloud

Schema

`microsoft_defender_for_cloud_raw`

Field	Type	Array?
`AgentId`	string	—
`AlertDisplayName`	string	—
`AlertName`	string	—
`AlertSeverity`	string	—
`AlertType`	string	—
`CorrelationKey`	string	—
`Description`	string	—
`DestinationDeviceAddress`	string	—
`Entities`	string	—
`ExtendedProperties`	string	—
`ProductComponentName`	string	—
`ProductName`	string	—
`ProviderName`	string	—
`ResourceIdentifiers`	string	—
`Severity`	string	—
`SourceDeviceAddress`	string	—
`SystemAlertId`	string	—
`Tactics`	string	—
`Techniques`	string	—
`TimeGenerated`	string	—
`VendorOriginalId`	string	—
`_collector_type`	string	—
`id`	string	—
`name`	string	—
`properties`	string	—
`type`	string	—

Source

MicrosoftDefenderForCloudModelingRules.xif MicrosoftDefenderForCloudModelingRules.yml MicrosoftDefenderForCloudModelingRules_schema.json

Download History Raw

fromversion: 6.10.0
id: defender_for_cloud_microsoft_modeling_rule
name: Defender For Cloud Microsoft Modeling Rule
rules: ''
schema: ''
tags: defender_for_cloud
supportedModules:
- xsiam