Skip to content

Commit ee0e806

Browse files
Merge branch 'Azure:master' into Netskope-dashboardupdate
2 parents 8e65c56 + 5eaa878 commit ee0e806

File tree

804 files changed

+41218
-7766
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

804 files changed

+41218
-7766
lines changed
Lines changed: 85 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,85 @@
1+
{
2+
"Name": "MessagePostDeliveryEvents",
3+
"Properties": [
4+
{
5+
"name": "Timestamp",
6+
"type": "Datetime"
7+
},
8+
{
9+
"name": "TeamsMessageId",
10+
"type": "String"
11+
},
12+
{
13+
"name": "Action",
14+
"type": "String"
15+
},
16+
{
17+
"name": "ActionType",
18+
"type": "String"
19+
},
20+
{
21+
"name": "ActionTrigger",
22+
"type": "String"
23+
},
24+
{
25+
"name": "ActionResult",
26+
"type": "String"
27+
},
28+
{
29+
"name": "SenderEmailAddress",
30+
"type": "String"
31+
},
32+
{
33+
"name": "RecipientDetails",
34+
"type": "Dynamic"
35+
},
36+
{
37+
"name": "IsExternalThread",
38+
"type": "Bool"
39+
},
40+
{
41+
"name": "ThreatTypes",
42+
"type": "String"
43+
},
44+
{
45+
"name": "ConfidenceLevel",
46+
"type": "Dynamic"
47+
},
48+
{
49+
"name": "DetectionMethods",
50+
"type": "Dynamic"
51+
},
52+
{
53+
"name": "LatestDeliveryLocation",
54+
"type": "String"
55+
},
56+
{
57+
"name": "ReportId",
58+
"type": "String"
59+
},
60+
{
61+
"name": "SenderObjectId",
62+
"type": "String"
63+
},
64+
{
65+
"name": "SafetyTip",
66+
"type": "String"
67+
},
68+
{
69+
"name": "TenantId",
70+
"type": "String"
71+
},
72+
{
73+
"name": "Type",
74+
"type": "String"
75+
},
76+
{
77+
"name": "SourceSystem",
78+
"type": "String"
79+
},
80+
{
81+
"name": "TimeGenerated",
82+
"type": "Datetime"
83+
}
84+
]
85+
}
Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
{
2+
"Name": "MessageUrlInfo",
3+
"Properties": [
4+
{
5+
"name": "Timestamp",
6+
"type": "Datetime"
7+
},
8+
{
9+
"name": "TeamsMessageId",
10+
"type": "String"
11+
},
12+
{
13+
"name": "Url",
14+
"type": "String"
15+
},
16+
{
17+
"name": "UrlDomain",
18+
"type": "String"
19+
},
20+
{
21+
"name": "ReportId",
22+
"type": "String"
23+
},
24+
{
25+
"name": "TenantId",
26+
"type": "String"
27+
},
28+
{
29+
"name": "Type",
30+
"type": "String"
31+
},
32+
{
33+
"name": "SourceSystem",
34+
"type": "String"
35+
},
36+
{
37+
"name": "TimeGenerated",
38+
"type": "Datetime"
39+
}
40+
]
41+
}
Lines changed: 69 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,69 @@
1+
{
2+
"Name": "SAPETDInvestigations_CL",
3+
"Properties": [
4+
{
5+
"name": "TimeGenerated",
6+
"type": "datetime"
7+
},
8+
{
9+
"name": "Version",
10+
"type": "string"
11+
},
12+
{
13+
"name": "InvestigationId",
14+
"type": "int"
15+
},
16+
{
17+
"name": "Description",
18+
"type": "string"
19+
},
20+
{
21+
"name": "Severity",
22+
"type": "string"
23+
},
24+
{
25+
"name": "Status",
26+
"type": "string"
27+
},
28+
{
29+
"name": "Processor",
30+
"type": "string"
31+
},
32+
{
33+
"name": "ManagementVisibility",
34+
"type": "string"
35+
},
36+
{
37+
"name": "CustomerNotification",
38+
"type": "boolean"
39+
},
40+
{
41+
"name": "CompletionTimestamp",
42+
"type": "datetime"
43+
},
44+
{
45+
"name": "createdAt",
46+
"type": "datetime"
47+
},
48+
{
49+
"name": "createdBy",
50+
"type": "string"
51+
},
52+
{
53+
"name": "Actions",
54+
"type": "dynamic"
55+
},
56+
{
57+
"name": "Users",
58+
"type": "dynamic"
59+
},
60+
{
61+
"name": "Systems",
62+
"type": "dynamic"
63+
},
64+
{
65+
"name": "Alerts",
66+
"type": "dynamic"
67+
}
68+
]
69+
}
Lines changed: 65 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
{
2+
"Name": "ThreatIntelExportOperation",
3+
"Properties": [
4+
{
5+
"Name": "TenantId",
6+
"Type": "string"
7+
},
8+
{
9+
"Name": "TimeGenerated",
10+
"Type": "datetime"
11+
},
12+
{
13+
"Name": "TimeExported",
14+
"Type": "datetime"
15+
},
16+
{
17+
"Name": "Id",
18+
"Type": "string"
19+
},
20+
{
21+
"Name": "StixId",
22+
"Type": "string"
23+
},
24+
{
25+
"Name": "SourceSystem",
26+
"Type": "string"
27+
},
28+
{
29+
"Name": "ExportBy",
30+
"Type": "string"
31+
},
32+
{
33+
"Name": "ExportDuration",
34+
"Type": "int"
35+
},
36+
{
37+
"Name": "ExportId",
38+
"Type": "string"
39+
},
40+
{
41+
"Name": "ExportType",
42+
"Type": "string"
43+
},
44+
{
45+
"Name": "Status",
46+
"Type": "string"
47+
},
48+
{
49+
"Name": "ErrorDetails",
50+
"Type": "string"
51+
},
52+
{
53+
"Name": "DestinationInfo",
54+
"Type": "dynamic"
55+
},
56+
{
57+
"Name": "Type",
58+
"Type": "string"
59+
},
60+
{
61+
"Name": "_ResourceId",
62+
"Type": "string"
63+
}
64+
]
65+
}

.script/tests/KqlvalidationsTests/CustomTables/UrlClickEvents.json

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,14 @@
99
"Name": "ActionType",
1010
"Type": "string"
1111
},
12+
{
13+
"Name": "AppName",
14+
"Type": "string"
15+
},
16+
{
17+
"Name": "AppVersion",
18+
"Type": "string"
19+
},
1220
{
1321
"Name": "DetectionMethods",
1422
"Type": "string"
@@ -41,6 +49,10 @@
4149
"Name": "ThreatTypes",
4250
"Type": "string"
4351
},
52+
{
53+
"Name": "Timestamp",
54+
"Type": "datetime"
55+
},
4456
{
4557
"Name": "TimeGenerated",
4658
"Type": "datetime"

0 commit comments

Comments
 (0)