Knowledge base of customer-defined vulnerabilities, with one record per vulnerability definition in your organization rather than per-device findings. Join with DeviceCustomVulnerabilities on CustomVulnerabilityId to retrieve device correlations. Available under Vulnerability management in Advanced Hunting for eligible tenants when customer exposure is enabled and you have vulnerability management reader permissions. Definitions are available across your organization and are not filtered by device groups; device correlations from DeviceCustomVulnerabilities remain restricted to your allowed device groups. Data from other tenants is excluded.
Schema
Name
Description
Type
CustomVulnerabilityId
Identifier of the customer-defined vulnerability definition. Join with DeviceCustomVulnerabilities on CustomVulnerabilityId to retrieve device correlations
String
IsDeleted
Indicates whether the custom vulnerability definition is marked as deleted, not the deletion status of an individual device correlation
Boolean
LastModifiedTime
Date and time when the custom vulnerability definition was last modified
DateTime
OrgId
Identifier of the organization that owns the custom vulnerability definition
String
ProductName
Name of the product associated with the custom vulnerability definition
String
Scope
Scope specified in the custom vulnerability definition
String
SourceSystem
String
TenantId
String
TimeGenerated
DateTime
Timestamp
Date and time when the custom vulnerability definition record was generated
DateTime
Title
Title of the customer-defined vulnerability
String
Type
String
VulnerabilityDescription
Description supplied in the custom vulnerability definition
String
VulnerabilityTags
Tags associated with the custom vulnerability definition