This commit is contained in:
Ashwin Patil 2022-05-24 14:20:58 -07:00
Родитель 26a57bbbef
Коммит 1ace136e82
1 изменённых файлов: 3 добавлений и 3 удалений

Просмотреть файл

@ -31,10 +31,10 @@ SentinelGithub
***KQL Query***
```
let MSFTServices = (externaldata(Alert: string, Description: string, Tactics:string, Severity:string, Provider:string, DetectionService: string)
[@"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Tools/MITREATT%26CK-LayerGeneration-Notebook/MSFT-Builtin-Alerts.csv"]
let MSFTBuiltinAlerts = (externaldata(Alert: string, Description: string, Tactics:string, Severity:string, Provider:string, DetectionService: string)
[@"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Tools/MITREATT%26CK-LayerGeneration-Notebook/MSFT-Builtin-Alerts.csv"] with (format="csv", ignoreFirstRecord=True)
);
MSFTServices
MSFTBuiltinAlerts
```
## Setup