Microsoft Graph Security Modeling Rules

Details

ID	`Microsoft_Graph_Security_ModelingRule`
From Version	8.2.0

Schema

`msft_graph_security_alerts_raw`

Field	Type	Array?
`_reporting_device_name`	string	—
`alertWebUrl`	string	—
`category`	string	—
`classification`	string	—
`createdDateTime`	string	—
`description`	string	—
`detectionSource`	string	—
`detectorId`	string	—
`determination`	string	—
`evidence`	string	—
`id`	string	—
`incidentId`	string	—
`incidentWebUrl`	string	—
`mitreTechniques`	string	—
`productName`	string	—
`providerAlertId`	string	—
`serviceSource`	string	—
`severity`	string	—
`status`	string	—
`tenantId`	string	—
`title`	string	—

Source

MicrosoftGraphSecurity.xif MicrosoftGraphSecurity.yml MicrosoftGraphSecurity_schema.json

Download History Raw

fromversion: 8.2.0
id: Microsoft_Graph_Security_ModelingRule
name: Microsoft Graph Security Modeling Rules
rules: ''
schema: ''
supportedModules:
- xsiam
tags: ''