Classifies Microsoft Advanced Threat Analytics suspicious activities
Microsoft Advanced Threat Analytics
- Details
- Content
- Dependencies
- Version History
Manage suspicious activities, monitoring alerts and entities on Microsoft ATA.
Classifiers
| Name | Description |
|---|---|
Microsoft Advanced Threat Analytics - Classification | |
Microsoft Advanced Threat Analytics - Incoming Mapper | Maps Microsoft Advanced Threat Analytics suspicious activity fields. |
Incident Fields
| Name | Description |
|---|---|
Suspicious Activity End Time | |
Suspicious Activity Status | |
Suspicious Activity Severity | |
Suspicious Activity Start Time | |
Suspicious Activity ID |
Incident Types
| Name | Description |
|---|---|
Microsoft ATA Suspicious Activity |
Integrations
| Name | Description |
|---|---|
| Microsoft Advanced Threat Analytics (Deprecated) | Deprecated. No available replacement. |
Layouts
| Name | Description |
|---|---|
Microsoft ATA Suspicious Activity |
Classifiers
| Name | Description |
|---|---|
Microsoft Advanced Threat Analytics - Classification | Classifies Microsoft Advanced Threat Analytics suspicious activities |
Microsoft Advanced Threat Analytics - Incoming Mapper | Maps Microsoft Advanced Threat Analytics suspicious activity fields. |
Incident Fields
| Name | Description |
|---|---|
Suspicious Activity End Time | |
Suspicious Activity ID | |
Suspicious Activity Status | |
Suspicious Activity Start Time | |
Suspicious Activity Severity |
Incident Types
| Name | Description |
|---|---|
Microsoft ATA Suspicious Activity |
Integrations
| Name | Description |
|---|---|
| Microsoft Advanced Threat Analytics (Deprecated) | Deprecated. No available replacement. |
Modeling Rules
| Name | Description |
|---|---|
Microsoft Advanced Threat Analytics Modeling Rule |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | November 9, 2020 | |
| Last Release | June 26, 2025 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
