← Browse all tables
DnsInventory Schema
Table description
TableSection
TableType
TableSectionName
Description
Other hunting tables
Schema
Name
Description
Type
_BilledSize
Double
_IsBillable
String
_ResourceId
A unique identifier for the resource that the record is associated with
String
_SubscriptionId
A unique identifier for the subscription that the record is associated with
String
Computer
String
DnsSecSigned
String
DomainName
Domain name that the device that reported the event is joined to; the reporting device can be the one that blocked the access, the compromised device itself, or even a different device that is aware of the attack
String
DynamicUpdate
String
ForestName
String
NameServers
String
ResourceRecordName
String
ResourceRecordType
String
ServerIPs
String
SourceSystem
String
SubType
String
TimeGenerated
DateTime
Type
The name of the table
String
ZoneName
String
Schema changes
Date
Action
2026-10-07
Table added to tracking
2026-02-27
Table removed from tracking
2024-10-18
Table added to tracking
DnsInventory Schema
Table description
TableSection
TableType
TableSectionName
Description
Other hunting tables
Schema
Name
Description
Type
_BilledSize
Double
_IsBillable
String
_ResourceId
A unique identifier for the resource that the record is associated with
String
_SubscriptionId
A unique identifier for the subscription that the record is associated with
String
Computer
String
DnsSecSigned
String
DomainName
Domain name that the device that reported the event is joined to; the reporting device can be the one that blocked the access, the compromised device itself, or even a different device that is aware of the attack
String
DynamicUpdate
String
ForestName
String
NameServers
String
ResourceRecordName
String
ResourceRecordType
String
ServerIPs
String
SourceSystem
String
SubType
String
TimeGenerated
DateTime
Type
The name of the table
String
ZoneName
String
Schema changes
Date
Action
2026-10-07
Table added to tracking
2026-02-27
Table removed from tracking
2024-10-18
Table added to tracking