Skip to content

Commit 1d5ace0

Browse files
committed
improve data type
1 parent 8eab7f5 commit 1d5ace0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

defender-xdr/advanced-hunting-datasecurityevents-table.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ For information on other tables in the advanced hunting schema, [see the advance
7070
|`IPAddress`| `string`| IP addresses of the clients on which the activity was performed; can contain multiple Ips if related to Microsoft Defender for Cloud Apps alerts|
7171
|`Timestamp`| `datetime`| Date and time when the event was recorded|
7272
|`DeviceSourceLocationType`| `int`| Indicates the type of location where the endpoint signals originated from; values can be: 0 (Unknown), 1 (Local), 2 (Remote), 3 (Removable), 4 (Cloud), 5 (File share)|
73-
|`DeviceDestinationLocationType`| Int| Indicates the type of location where the endpoint signals connected to; values can be: 0 (Unknown), 1 (Local), 2 (Remote), 3 (Removable), 4 (Cloud), 5 (File share)|
73+
|`DeviceDestinationLocationType`| `int`| Indicates the type of location where the endpoint signals connected to; values can be: 0 (Unknown), 1 (Local), 2 (Remote), 3 (Removable), 4 (Cloud), 5 (File share)|
7474
|`IrmPolicyMatchInfo`| `dynamic`| Details of Insider Risk Management policy matches for the content involved in the event; in JSON array format |
7575
|`UnallowedUrlDomains`| `string`| Websites or service URLs involved in this event that are configured as Unallowed in Insider Risk Management global settings|
7676
|`ExternalUrlDomains`| `string`| Websites or service URLs involved in this event that are classified as External in Insider Risk Management global settings|

0 commit comments

Comments
 (0)