Note
Access to this page requires authorization. You can try signing in or .
Access to this page requires authorization. You can try .
SecurityDetection
Table attributes
| Attribute | Value |
|---|---|
| Resource types | - |
| Categories | Security |
| Solutions | Security |
| Basic log | No |
| Ingestion-time DCR support | Yes |
| Lake-only ingestion | No |
| Sample Queries | - |
Columns
| Column | Type | Description |
|---|---|---|
| AccountsSeen | int | |
| AlertSeverity | string | |
| AlertTitle | string | |
| AssociatedResource | string | |
| _BilledSize | real | The record size in bytes |
| ChildProcess | string | |
| CommandLine | string | |
| Computer | string | |
| Description | string | |
| DetectionID | string | |
| Duration | string | |
| ExtendedProperties | string | |
| FailedAttempts | int | |
| FullPath | string | |
| InvalidAccountsSeen | int | |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
| IsFirstParty | bool | |
| LogChannel | string | |
| OccuringDatacenter | string | |
| OriginalSeverity | string | |
| ParentProcess | string | |
| ProcessName | string | |
| Provider | string | |
| RemediationSteps | string | |
| ReportingSystem | string | |
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
| ServiceId | string | |
| SubjectDomainName | string | |
| SubjectUserName | string | |
| SubscriptionId | string | |
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
| SuccessfulLogins | int | |
| SuspiciousProcess | string | |
| TimeGenerated | datetime | |
| Type | string | The name of the table |
| ValidAccountsSeen | int |
Feedback
Was this page helpful?