Skip to content

Commit 3b8c550

Browse files
Merge pull request #296863 from yelevin/yelevin/strong-identifier-examples
Fixed linter error
2 parents accc2aa + 474f096 commit 3b8c550

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/sentinel/entities-reference.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
22
title: Microsoft Sentinel entity types reference | Microsoft Docs
3-
description: This article displays the Microsoft Sentinel entity types and their required identifiers.
3+
description: This article displays the Microsoft Sentinel entity types and their identifiers, and lists strong and weak identifiers for each.
44
author: yelevin
55
ms.author: yelevin
66
ms.topic: reference
7-
ms.date: 10/16/2024
7+
ms.date: 03/24/2025
88

99

1010
#Customer intent: As a security analyst, I want to understand the entity types and identifiers in Microsoft Sentinel so that I can effectively track and investigate alerts and incidents.
@@ -32,7 +32,7 @@ You can currently use up to three identifiers for a given entity when creating a
3232
| [**Account**](#account) | Name<br>*FullName \**<br>NTDomain<br>DnsDomain<br>UPNSuffix<br>Sid<br>AadTenantId<br>AadUserId<br>PUID<br>IsDomainJoined<br>*DisplayName \**<br>ObjectGuid | Name+UPNSuffix<br>AADUserId<br>Sid [\*\*](#strong-identifiers-of-an-account-entity)<br>Sid+*Host* [\*\*](#strong-identifiers-of-an-account-entity)<br>Name+*Host*+NTDomain [\*\*](#strong-identifiers-of-an-account-entity)<br>Name+NTDomain [\*\*](#strong-identifiers-of-an-account-entity)<br>Name+DnsDomain<br>PUID<br>ObjectGuid | Name |
3333
| [**Host**](#host) | DnsDomain<br>NTDomain<br>HostName<br>*FullName \**<br>NetBiosName<br>AzureID<br>OMSAgentID<br>OSFamily<br>OSVersion<br>IsDomainJoined | HostName+NTDomain<br>HostName+DnsDomain<br>NetBiosName+NTDomain<br>NetBiosName+DnsDomain<br>AzureID<br>OMSAgentID | HostName<br>NetBiosName |
3434
| **Entity type** | **Identifiers** | **Strong identifiers** | **Weak identifiers** |
35-
| [**IP**](#ip) | Address<br>AddressScope | [Global address:](#strong-identifiers-of-an-ip-entity) Address<br>[Private address:](#strong-identifiers-of-an-ip-entity) Address+AddressScope | <br>[Private address:](#weak-identifiers-of-an-ip-entity) Address |
35+
| [**IP**](#ip) | Address<br>AddressScope | [Global address:](#strong-identifiers-of-an-ip-entity) Address\*\*<br>[Private address:](#strong-identifiers-of-an-ip-entity) Address+AddressScope\*\* | <br>[Private address:](#weak-identifiers-of-an-ip-entity) Address\*\* |
3636
| [**URL**](#url) | Url | Url *(if absolute URL)* [\*\*](#strong-identifiers-of-a-url-entity) | Url *(if relative URL)* [\*\*](#strong-identifiers-of-a-url-entity) |
3737
| [**Azure resource**](#azure-resource)<br>*(AzureResource)* | ResourceId | ResourceId | |
3838
| [**Cloud application**](#cloud-application)<br>*(CloudApplication)* | AppId<br>Name<br>InstanceName | AppId<br>Name<br>AppId+InstanceName<br>Name+InstanceName | |

0 commit comments

Comments
 (0)