REFERENCE
Other hunting tables
Other hunting tables
- AADManagedIdentitySignInLogs
- AADNonInteractiveUserSignInLogs
- AADServicePrincipalSignInLogs
- ABAPAuditLog
- ABAPAuthorizationDetails
- ABAPChangeDocsLog
- ABAPTableDataLog
- ABAPUserDetails
- AggregatedSecurityAlert
- Alert
- Anomalies
- AppCenterError
- ASimAgentEventLogs
- ASimAlertEventLogs
- ASimAssetEntityLogs
- ASimAuditEventLogs
- ASimAuthenticationEventLogs
- ASimDhcpEventLogs
- ASimDnsActivityLogs
- ASimFileEventLogs
- ASimNetworkSessionLogs
- ASimProcessEventLogs
- ASimRegistryEventLogs
- ASimUserManagementActivityLogs
- ASimWebSessionLogs
- AuditLogs
- AWSALBAccessLogs
- AWSCloudTrail
- AWSCloudWatch
- AWSEKSLogs
- AWSELBFlowLogs
- AWSGuardDuty
- AWSNetworkFirewallAlert
- AWSNetworkFirewallFlow
- AWSNetworkFirewallTls
- AWSNLBAccessLogs
- AWSRoute53Resolver
- AWSS3ServerAccess
- AWSSecurityHubFindings
- AWSVPCFlow
- AWSWAF
- BehaviorAnalytics
- CommonSecurityLog
- CommunicationComplianceActivity
- ComputerGroup
- ConfidentialWatchlist
- CopilotActivity
- CrowdStrikeAlerts
- CrowdStrikeAuditEvents
- CrowdStrikeCases
- CrowdStrikeDetections
- CrowdStrikeHosts
- CrowdStrikeIncidents
- CrowdStrikeVulnerabilities
- DataSecurityBehaviors
- DataSecurityEvents
- DataverseActivity
- DeviceAlertEvents
- DnsAuditEvents
- DnsEvents
- DnsInventory
- DynamicEventCollection
- Dynamics365Activity
- DynamicSummary
- ExposureRecommendations
- GCPApigee
- GCPAuditLogs
- GCPCDN
- GCPCloudRun
- GCPCloudSQL
- GCPComputeEngine
- GCPDNS
- GCPFirewallLogs
- GCPIAM
- GCPIDS
- GCPLoadBalancer
- GCPMonitoring
- GCPNAT
- GCPNATAudit
- GCPResourceManager
- GCPVPCFlow
- GKEAPIServer
- GKEApplication
- GKEAudit
- GKEControllerManager
- GKEHPADecision
- GKEScheduler
- GoogleCloudSCC
- GoogleWorkspaceReports
- HuntingBookmark
- IlumioInsights
- LinuxAuditLog
- McasShadowItReporting
- MicrosoftGraphActivityLogs
- MicrosoftPurviewInformationProtection
- NetworkSessions
- OfficeActivity
- OktaSystemLogs
- Operation
- PowerAppsActivity
- PowerAutomateActivity
- PowerBIActivity
- PowerPlatformAdminActivity
- PowerPlatformConnectorActivity
- PowerPlatformDlpActivity
- ProjectActivity
- ProtectionStatus
- QualysKnowledgeBase
- Rapid7InsightVMCloudAssets
- Rapid7InsightVMCloudVulnerabilities
- SalesforceAuditTrail
- SalesforceLoginHistory
- SecureScoreControls
- SecureScores
- SecurityAlert
- SecurityAttackPathData
- SecurityBaseline
- SecurityBaselineSummary
- SecurityCaseEvent
- SecurityDetection
- SecurityEvent
- SecurityIncident
- SecurityNestedRecommendation
- SecurityRecommendation
- SecurityRegulatoryCompliance
- SentinelAlibabaCloudAPIGatewayLogs
- SentinelAlibabaCloudVPCFlowLogs
- SentinelAlibabaCloudWAFLogs
- SentinelAudit
- SentinelBehaviorEntities
- SentinelBehaviorInfo
- SentinelHealth
- SentinelImpervaWAFCloudV2Logs
- SigninLogs
- ThreatIntelEntities
- ThreatIntelExportOperation
- ThreatIntelIndicators
- ThreatIntelligenceIndicator
- ThreatIntelObjects
- Update
- UpdateSummary
- Usage
- UserAccessAnalytics
- UserPeerAnalytics
- Watchlist
- WindowsEvent
- WindowsFirewall