Prisma SAAS Security Modeling Rule

Modeling Rule

Details

ID	`Prisma_SAAS_Security_ModelingRule`
From Version	8.4.0

Schema

`paloaltonetworks_saassecurity_raw`

Field	Type	Array?
`_reporting_device_ip`	string	—
`action`	string	—
`admin_role`	string	—
`asset_id`	string	—
`cloud_app_instance`	string	—
`event_type`	string	—
`ip`	string	—
`item_type`	string	—
`location`	string	—
`log_type`	string	—
`remoteAddress`	string	—
`resource_value_new`	string	—
`resource_value_old`	string	—
`source_ip`	string	—
`target_name`	string	—
`timestamp`	datetime	—
`user`	string	—

Source

SaasSecurityEventCollector_1_3.xif SaasSecurityEventCollector_1_3.yml SaasSecurityEventCollector_1_3_schema.json

Download History Raw

fromversion: 8.4.0
id: Prisma_SAAS_Security_ModelingRule
name: Prisma SAAS Security Modeling Rule
rules: ''
schema: ''
tags: ''
supportedModules:
- xsiam