Skip to content

[ASIM] ProcessEvent - Microsoft365D Parser changes #13411

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
yummyblabla merged 7 commits into from
Jan 13, 2026
Merged

[ASIM] ProcessEvent - Microsoft365D Parser changes #13411

yummyblabla merged 7 commits into from
Jan 13, 2026

Conversation

@yummyblabla
Copy link
Collaborator

@yummyblabla yummyblabla commented Jan 9, 2026

Fixes:

  • Use project instead of project-away
  • Change use of TimeGenerated to Timestamp instead

Additions:

  • TargetUsernameType
  • ActorUsernameType

Removal:

  • Unnormalized column: MDE-MachineGroup

@yummyblabla yummyblabla requested review from a team as code owners January 9, 2026 00:59
@contentautomationbot
Copy link

contentautomationbot bot commented Jan 9, 2026

ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files.
To find the new ARM templates, pull your branch.

@v-shukore v-shukore added the ASIM label Jan 9, 2026
oshezaf
oshezaf requested changes Jan 10, 2026
View reviewed changes
@yummyblabla yummyblabla merged commit 7e4c9ee into master Jan 13, 2026
27 of 29 checks passed
@yummyblabla yummyblabla deleted the derricklee/asim-processevent-microsoft365 branch January 13, 2026 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@oshezaf oshezaf oshezaf approved these changes

Assignees

@v-atulyadav v-atulyadav

Labels

ASIM

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@yummyblabla @oshezaf @v-atulyadav @v-shukore