← Browse all tablesLoading table information…
SecurityDetection Schema
Table description
| TableSection |
TableType |
TableSectionName |
Description |
|
|
Other hunting tables |
|
Schema
| Name |
Description |
Type |
| _BilledSize |
|
Double |
| _IsBillable |
|
String |
| _ResourceId |
A unique identifier for the resource that the record is associated with |
String |
| _SubscriptionId |
A unique identifier for the subscription that the record is associated with |
String |
| AccountsSeen |
|
Int32 |
| AlertSeverity |
|
String |
| AlertTitle |
|
String |
| AssociatedResource |
|
String |
| ChildProcess |
|
String |
| CommandLine |
|
String |
| Computer |
|
String |
| Description |
Description of the information gathered |
String |
| DetectionID |
|
String |
| Duration |
|
String |
| ExtendedProperties |
|
String |
| FailedAttempts |
|
Int32 |
| FullPath |
|
String |
| InvalidAccountsSeen |
|
Int32 |
| IsFirstParty |
|
Boolean |
| LogChannel |
|
String |
| OccuringDatacenter |
|
String |
| OriginalSeverity |
|
String |
| ParentProcess |
|
String |
| ProcessName |
The name of the process |
String |
| Provider |
|
String |
| RemediationSteps |
|
String |
| ReportingSystem |
|
String |
| ServiceId |
|
String |
| SubjectDomainName |
|
String |
| SubjectUserName |
|
String |
| SubscriptionId |
Unique identifier of the cloud service subscription |
String |
| SuccessfulLogins |
|
Int32 |
| SuspiciousProcess |
|
String |
| TimeGenerated |
|
DateTime |
| Type |
The name of the table |
String |
| ValidAccountsSeen |
|
Int32 |
Schema changes
| Date |
Action |
| 2026-10-07 |
Table added to tracking |