Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

Update OktaV2_CL.json

This commit is contained in:
v-sabiraj 2024-04-22 18:55:09 +05:30
Родитель 4d42ccf3cd
Коммит e589ed046c
1 изменённых файлов: 231 добавлений и 231 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

462
.script/tests/KqlvalidationsTests/CustomTables/OktaV2_CL.json
Просмотреть файл

@ -1,233 +1,233 @@
{
"Name": "OktaV2_CL",
"Properties": [
{
"name": "ActingAppName",
"type": "String"
},
{
"name": "ActingAppType",
"type": "String"
},
{
"name": "ActorDetailEntry",
"type": "Dynamic"
},
{
"name": "ActorDisplayName",
"type": "String"
},
{
"name": "ActorSessionId",
"type": "String"
},
{
"name": "ActorUserId",
"type": "String"
},
{
"name": "ActorUserIdType",
"type": "String"
},
{
"name": "ActorUsername",
"type": "String"
},
{
"name": "ActorUsernameType",
"type": "String"
},
{
"name": "ActorUserType",
"type": "String"
},
{
"name": "AuthenticationContextAuthenticationProvider",
"type": "String"
},
{
"name": "AuthenticationContextAuthenticationStep",
"type": "Int"
},
{
"name": "AuthenticationContextCredentialProvider",
"type": "String"
},
{
"name": "AuthenticationContextInterface",
"type": "String"
},
{
"name": "AuthenticationContextIssuerId",
"type": "String"
},
{
"name": "AuthenticationContextIssuerType",
"type": "String"
},
{
"name": "DebugData",
"type": "Dynamic"
},
{
"name": "DvcAction",
"type": "String"
},
{
"name": "EventMessage",
"type": "String"
},
{
"name": "EventOriginalResultDetails",
"type": "String"
},
{
"name": "EventOriginalType",
"type": "String"
},
{
"name": "EventOriginalUid",
"type": "String"
},
{
"name": "EventResult",
"type": "String"
},
{
"name": "EventSeverity",
"type": "String"
},
{
"name": "HttpUserAgent",
"type": "String"
},
{
"name": "LegacyEventType",
"type": "String"
},
{
"name": "LogonMethod",
"type": "String"
},
{
"name": "OriginalActorAlternateId",
"type": "String"
},
{
"name": "OriginalClientDevice",
"type": "String"
},
{
"name": "OriginalOutcomeResult",
"type": "String"
},
{
"name": "OriginalSeverity",
"type": "String"
},
{
"name": "OriginalTarget",
"type": "dynamic"
},
{
"name": "OriginalUserId",
"type": "String"
},
{
"name": "OriginalUserType",
"type": "String"
},
{
"name": "Request",
"type": "Dynamic"
},
{
"name": "SecurityContextAsNumber",
"type": "Int"
},
{
"name": "SecurityContextAsOrg",
"type": "String"
},
{
"name": "SecurityContextDomain",
"type": "String"
},
{
"name": "SecurityContextIsProxy",
"type": "Boolean"
},
{
"name": "SrcDeviceType",
"type": "String"
},
{
"name": "SrcDvcId",
"type": "String"
},
{
"name": "SrcDvcOs",
"type": "String"
},
{
"name": "SrcGeoCity",
"type": "String"
},
{
"name": "SrcGeoCountry",
"type": "String"
},
{
"name": "SrcGeoLatitude",
"type": "Real"
},
{
"name": "SrcGeoLongtitude",
"type": "Real"
},
{
"name": "SrcGeoPostalCode",
"type": "String"
},
{
"name": "SrcGeoRegion",
"type": "String"
},
{
"name": "SrcIpAddr",
"type": "String"
},
{
"name": "SrcIsp",
"type": "String"
},
{
"name": "SrcZone",
"type": "String"
},
{
"name": "TimeGenerated",
"type": "DateTime"
},
{
"name": "TransactionDetail",
"type": "Dynamic"
},
{
"name": "TransactionId",
"type": "String"
},
{
"name": "TransactionType",
"type": "String"
},
{
"name": "Version",
"type": "String"
},
{
"name": "SrcDvcIdType",
"type": "String"
}
]
"Name": "OktaV2_CL",
"Properties": [
{
"name": "ActingAppName",
"type": "String"
},
{
"name": "ActingAppType",
"type": "String"
},
{
"name": "ActorDetailEntry",
"type": "string"
},
{
"name": "ActorDisplayName",
"type": "String"
},
{
"name": "ActorSessionId",
"type": "String"
},
{
"name": "ActorUserId",
"type": "String"
},
{
"name": "ActorUserIdType",
"type": "String"
},
{
"name": "ActorUsername",
"type": "String"
},
{
"name": "ActorUsernameType",
"type": "String"
},
{
"name": "ActorUserType",
"type": "String"
},
{
"name": "AuthenticationContextAuthenticationProvider",
"type": "String"
},
{
"name": "AuthenticationContextAuthenticationStep",
"type": "Real"
},
{
"name": "AuthenticationContextCredentialProvider",
"type": "String"
},
{
"name": "AuthenticationContextInterface",
"type": "String"
},
{
"name": "AuthenticationContextIssuerId",
"type": "String"
},
{
"name": "AuthenticationContextIssuerType",
"type": "String"
},
{
"name": "DebugData",
"type": "string"
},
{
"name": "DvcAction",
"type": "String"
},
{
"name": "EventMessage",
"type": "String"
},
{
"name": "EventOriginalResultDetails",
"type": "String"
},
{
"name": "EventOriginalType",
"type": "String"
},
{
"name": "EventOriginalUid",
"type": "String"
},
{
"name": "EventResult",
"type": "String"
},
{
"name": "EventSeverity",
"type": "String"
},
{
"name": "HttpUserAgent",
"type": "String"
},
{
"name": "LegacyEventType",
"type": "String"
},
{
"name": "LogonMethod",
"type": "String"
},
{
"name": "OriginalActorAlternateId",
"type": "String"
},
{
"name": "OriginalClientDevice",
"type": "String"
},
{
"name": "OriginalOutcomeResult",
"type": "String"
},
{
"name": "OriginalSeverity",
"type": "String"
},
{
"name": "OriginalTarget",
"type": "String"
},
{
"name": "OriginalUserId",
"type": "String"
},
{
"name": "OriginalUserType",
"type": "String"
},
{
"name": "Request",
"type": "String"
},
{
"name": "SecurityContextAsNumber",
"type": "Real"
},
{
"name": "SecurityContextAsOrg",
"type": "String"
},
{
"name": "SecurityContextDomain",
"type": "String"
},
{
"name": "SecurityContextIsProxy",
"type": "Boolean"
},
{
"name": "SrcDeviceType",
"type": "String"
},
{
"name": "SrcDvcId",
"type": "String"
},
{
"name": "SrcDvcOs",
"type": "String"
},
{
"name": "SrcGeoCity",
"type": "String"
},
{
"name": "SrcGeoCountry",
"type": "String"
},
{
"name": "SrcGeoLatitude",
"type": "Real"
},
{
"name": "SrcGeoLongtitude",
"type": "Real"
},
{
"name": "SrcGeoPostalCode",
"type": "String"
},
{
"name": "SrcGeoRegion",
"type": "String"
},
{
"name": "SrcIpAddr",
"type": "String"
},
{
"name": "SrcIsp",
"type": "String"
},
{
"name": "SrcZone",
"type": "String"
},
{
"name": "TimeGenerated",
"type": "DateTime"
},
{
"name": "TransactionDetail",
"type": "String"
},
{
"name": "TransactionId",
"type": "String"
},
{
"name": "TransactionType",
"type": "String"
},
{
"name": "Version",
"type": "String"
},
{
"name": "SrcDvcIdType",
"type": "String"
}
]
}