Created
January 29, 2026 11:03
-
-
Save vaclav-dvorak/5c8e1e61687fbe5bc809e0caf8dc49d3 to your computer and use it in GitHub Desktop.
Superset orphan analysis report - 2026-01-29
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "summary": { | |
| "total_charts": 4389, | |
| "total_datasets": 3318, | |
| "total_databases": 41, | |
| "total_dashboards": 229, | |
| "orphan_charts": 382, | |
| "orphan_datasets": 1322, | |
| "orphan_databases": 11 | |
| }, | |
| "orphan_charts": [ | |
| { | |
| "name": "access_review_idc_user_direct_roles", | |
| "path": "charts/cloudtrail/campaigns/access_review_idc_user_direct_roles.yaml", | |
| "dataset": "idc_user_direct_role_assignments" | |
| }, | |
| { | |
| "name": "access_review_idc_user_group_roles", | |
| "path": "charts/cloudtrail/campaigns/access_review_idc_user_group_roles.yaml", | |
| "dataset": "idc_user_group_role_assignments" | |
| }, | |
| { | |
| "name": "accesslogs_custom_threat_finding_actor_location_table", | |
| "path": "charts/accesslogsdetector/blueprints/accesslogs_custom_threat_finding_actor_location_table.yaml", | |
| "dataset": "accesslogs_custom_threat_finding_actor_location" | |
| }, | |
| { | |
| "name": "accesslogs_custom_threat_finding_events_grouped_timeline", | |
| "path": "charts/accesslogsdetector/blueprints/accesslogs_custom_threat_finding_events_grouped_timeline.yaml", | |
| "dataset": "accesslogs_custom_threat_finding_events" | |
| }, | |
| { | |
| "name": "accesslogs_custom_threat_finding_events_table", | |
| "path": "charts/accesslogsdetector/blueprints/accesslogs_custom_threat_finding_events_table.yaml", | |
| "dataset": "accesslogs_custom_threat_finding_events" | |
| }, | |
| { | |
| "name": "accesslogs_custom_threat_finding_identity_offending_actions_other_principal_table", | |
| "path": "charts/accesslogsdetector/blueprints/accesslogs_custom_threat_finding_identity_offending_actions_other_principal_table.yaml", | |
| "dataset": "accesslogs_custom_threat_finding_identity_offending_actions_other_principal" | |
| }, | |
| { | |
| "name": "accesslogs_custom_threat_finding_identity_offending_actions_table", | |
| "path": "charts/accesslogsdetector/blueprints/accesslogs_custom_threat_finding_identity_offending_actions_table.yaml", | |
| "dataset": "accesslogs_custom_threat_finding_identity_offending_actions" | |
| }, | |
| { | |
| "name": "accesslogs_threat_finding_actor_location_table", | |
| "path": "charts/accesslogsdetector/blueprints/accesslogs_threat_finding_actor_location_table.yaml", | |
| "dataset": "accesslogs_threat_finding_actor_location" | |
| }, | |
| { | |
| "name": "accesslogs_threat_finding_identity_past_admin_events_resources_table", | |
| "path": "charts/accesslogsdetector/blueprints/accesslogs_threat_finding_identity_past_admin_events_resources_table.yaml", | |
| "dataset": "accesslogs_threat_finding_identity_past_admin_events_resources" | |
| }, | |
| { | |
| "name": "aws_threat_finding_exabot_detect_handlebars", | |
| "path": "charts/cloudtrail/threathunt/aws_threat_finding_exabot_detect_handlebars.yaml", | |
| "dataset": "aws_threat_finding_llm_info" | |
| }, | |
| { | |
| "name": "aws_threat_finding_exabot_detection_banner", | |
| "path": "charts/cloudtrail/blueprints/aws_threat_finding_exabot_detection_banner.yaml", | |
| "dataset": "aws_threat_finding_exabot_detection_banner" | |
| }, | |
| { | |
| "name": "aws_threat_finding_historical_findings_handlebars", | |
| "path": "charts/cloudtrail/threathunt/aws_threat_finding_historical_findings_handlebars.yaml", | |
| "dataset": "aws_threat_finding_llm_info" | |
| }, | |
| { | |
| "name": "aws_threat_finding_historical_similar_findings_table", | |
| "path": "charts/cloudtrail/threathunt/aws_threat_finding_historical_similar_findings_table.yaml", | |
| "dataset": "aws_threat_finding_historical_similar_findings" | |
| }, | |
| { | |
| "name": "aws_threat_finding_info_jsx", | |
| "path": "charts/cloudtrail/threathunt/aws_threat_finding_info_jsx.yaml", | |
| "dataset": "aws_threat_finding_info" | |
| }, | |
| { | |
| "name": "aws_threat_finding_related_group_findings_info_handlebars", | |
| "path": "charts/cloudtrail/threathunt/aws_threat_finding_related_group_findings_info_handlebars.yaml", | |
| "dataset": "aws_threat_finding_related_group_findings" | |
| }, | |
| { | |
| "name": "aws_threat_finding_related_group_findings_table", | |
| "path": "charts/cloudtrail/threathunt/aws_threat_finding_related_group_findings_table.yaml", | |
| "dataset": "aws_threat_finding_related_group_findings" | |
| }, | |
| { | |
| "name": "azure_resource_graph", | |
| "path": "charts/azuredetector/iaas_resources/azure_resource_graph.yaml", | |
| "dataset": "azure_resource_activity_logs_resources" | |
| }, | |
| { | |
| "name": "change_attention_accounts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_accounts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_asn_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_asn_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_auth_chain", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_auth_chain.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_aws_region_pie", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_aws_region_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_city_stacked", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_city_stacked.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_console_login_pie", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_console_login_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_country_map", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_country_map.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_country_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_country_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_events_category", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_events_category_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_guardduty_findings_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_guardduty_findings_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_origin_identity_stacked_parts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_origin_identity_stacked_parts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_origin_identity_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_origin_identity_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_pie", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_resource_svc_stacked_parts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_resource_svc_stacked_parts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_resources_operation", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_resources_operation.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_resources_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_resources_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_resources_type", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_resources_type.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_ri_top_risks_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_ri_top_risks_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_session_identity_stacked_parts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_session_identity_stacked_parts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_session_identity_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_session_identity_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_source_ip_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_ip_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_src_aws_region_pie", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_src_aws_region_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_src_svc_pie", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_src_svc_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_threat_pie", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_threat_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_threat_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_threat_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_top_error_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_top_error_table.yaml", | |
| "dataset": "error_events_events" | |
| }, | |
| { | |
| "name": "change_attention_tree", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_tree.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_ua_client_stacked_parts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_ua_client_stacked_parts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_ua_device_family_stacked_parts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_ua_device_family_stacked_parts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_ua_os_type_stacked_parts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_ua_device_os_type_parts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_useragent_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_useragent_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_useragent_type_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_useragent_type_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_using_vpc_endpoint_pie", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_using_vpc_endpoint_pie.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "change_attention_vpc_id_table", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_vpc_id_table.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "conditional_visibility_dataset", | |
| "path": "charts/githubdetector/workflows/workflows_and_related_prs_chart.yaml", | |
| "dataset": "conditional_visibility_dataset" | |
| }, | |
| { | |
| "name": "crowdstrike_threat_finding_enterprise_user_exf_tags", | |
| "path": "charts/crowdstrikedetector/blueprints/crowdstrike_threat_finding_enterprise_user_exf_tags.yaml", | |
| "dataset": "crowdstrike_threat_finding_enterprise_user_info" | |
| }, | |
| { | |
| "name": "data_source_onboarding_status", | |
| "path": "charts/system/data_sources/data_source_onboarding_status.yaml", | |
| "dataset": "data_sources_data_source_onboarding_status" | |
| }, | |
| { | |
| "name": "device_investigate_details_applications_stacked", | |
| "path": "charts/system/device_investigate/device_investigate_details_applications_stacked.yaml", | |
| "dataset": "universal_devices_kandji_device_applications" | |
| }, | |
| { | |
| "name": "device_investigate_details_mac_address_table", | |
| "path": "charts/system/device_investigate/device_investigate_details_mac_address_table.yaml", | |
| "dataset": "universal_devices_universal_devices" | |
| }, | |
| { | |
| "name": "device_investigate_vulnerability_severity_pie", | |
| "path": "charts/system/device_investigate/device_investigate_vulnerability_severity_pie.yaml", | |
| "dataset": "universal_devices_kandji_device_vulnerabilities" | |
| }, | |
| { | |
| "name": "eks_threat_finding_exabot_detection_banner", | |
| "path": "charts/k8s/blueprints/eks_threat_finding_exabot_detection_banner.yaml", | |
| "dataset": "eks_threat_finding_exabot_detection_banner" | |
| }, | |
| { | |
| "name": "eks_threat_finding_identity_impacted_resources_table", | |
| "path": "charts/k8s/blueprints/eks_threat_finding_identity_impacted_resources_table.yaml", | |
| "dataset": "eks_threat_finding_identity_impacted_resources" | |
| }, | |
| { | |
| "name": "eks_threat_finding_other_principal_successfull_login_events_user_agents_table", | |
| "path": "charts/k8s/blueprints/eks_threat_finding_other_principal_successfull_login_events_user_agents_table.yaml", | |
| "dataset": "eks_threat_finding_other_principal_successfull_login_events_user_agents" | |
| }, | |
| { | |
| "name": "eks_threat_finding_principal_multiple_user_agents_table", | |
| "path": "charts/k8s/blueprints/eks_threat_finding_principal_multiple_user_agents_table.yaml", | |
| "dataset": "eks_threat_finding_principal_multiple_user_agents" | |
| }, | |
| { | |
| "name": "eks_threat_finding_principal_new_user_agents_table", | |
| "path": "charts/k8s/blueprints/eks_threat_finding_principal_new_user_agents_table.yaml", | |
| "dataset": "eks_threat_finding_principal_new_user_agents" | |
| }, | |
| { | |
| "name": "event_stats_p_accountId_pie", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_accountId_pie.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_accountId_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_accountId_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_awsRegion_pie", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_awsRegion_pie.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_eventCategory_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_eventCategory_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_eventName_pie", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_eventName_pie.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_eventType_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_eventType_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_eventVersion_pie", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_eventVersion_pie.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_hasAdditionalEventData_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_hasAdditionalEventData_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_hasExfSession_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_hasExfSession_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_hasRequestParameters_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_hasRequestParameters_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_hasResources_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_hasResources_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_hasResponseElements_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_hasResponseElements_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_hasServiceEventDetails_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_hasServiceEventDetails_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_idType_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_idType_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_isError_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_isError_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_managementEvent_pie", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_managementEvent_pie.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_managementEvent_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_managementEvent_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_readOnly_table", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_readOnly_table.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "event_stats_p_recipientAccountId_pie", | |
| "path": "charts/cloudtrail/event_stats/event_stats_p_recipientAccountId_pie.yaml", | |
| "dataset": "event_stats" | |
| }, | |
| { | |
| "name": "exabot_detections_beta_type_pie", | |
| "path": "charts/system/exabot_detections_beta/exabot_detections_beta_type_pie.yaml", | |
| "dataset": "exabot_detections_beta_exabot_detections_beta" | |
| }, | |
| { | |
| "name": "exabot_detections_type_pie", | |
| "path": "charts/system/exabot_detections/exabot_detections_type_pie.yaml", | |
| "dataset": "exabot_detections_exabot_detections" | |
| }, | |
| { | |
| "name": "filtered_findings_alltime_tree_map", | |
| "path": "charts/cloudtrail/session/filtered_findings_alltime_tree_map.yaml", | |
| "dataset": "filtered_session_findings_alltime" | |
| }, | |
| { | |
| "name": "filtered_findings_console", | |
| "path": "charts/cloudtrail/session_detections/filtered_findings_console.yaml", | |
| "dataset": "s_detections_sel_sessions" | |
| }, | |
| { | |
| "name": "filtered_findings_identity", | |
| "path": "charts/cloudtrail/session_detections/filtered_findings_identity.yaml", | |
| "dataset": "s_detections_session_detections" | |
| }, | |
| { | |
| "name": "filtered_findings_service", | |
| "path": "charts/cloudtrail/session_detections/filtered_findings_service.yaml", | |
| "dataset": "s_detections_session_detections" | |
| }, | |
| { | |
| "name": "filtered_findings_vpcid", | |
| "path": "charts/cloudtrail/session_detections/filtered_findings_vpcid.yaml", | |
| "dataset": "s_detections_session_detections" | |
| }, | |
| { | |
| "name": "fireblocks_threat_finding_identity_past_all_events_resources_table", | |
| "path": "charts/fireblocksdetector/blueprints/fireblocks_threat_finding_identity_past_all_events_resources_table.yaml", | |
| "dataset": "fireblocks_threat_finding_events" | |
| }, | |
| { | |
| "name": "fireblocks_threat_finding_principal_actions_location_table", | |
| "path": "charts/fireblocksdetector/blueprints/fireblocks_threat_finding_principal_actions_location_table.yaml", | |
| "dataset": "fireblocks_threat_finding_principal_actions_location" | |
| }, | |
| { | |
| "name": "gcp_resources_events_table", | |
| "path": "charts/gcloud/resources/resources_events_table.yaml", | |
| "dataset": "gcp_resources_audit_logs_resources" | |
| }, | |
| { | |
| "name": "gcp_threat_finding_enterprise_user_exf_tags", | |
| "path": "charts/gcloud/blueprints/gcp_threat_finding_enterprise_user_exf_tags.yaml", | |
| "dataset": "gcp_threat_finding_enterprise_user_info" | |
| }, | |
| { | |
| "name": "gcp_threat_finding_initiator_target_graph", | |
| "path": "charts/gcloud/blueprints/gcp_threat_finding_initiator_target_graph.yaml", | |
| "dataset": "gcp_finding_initiator_target_graph" | |
| }, | |
| { | |
| "name": "generic_threat_finding_identity_action_same_resource_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_identity_action_same_resource_table.yaml", | |
| "dataset": "generic_threat_finding_identity_action_same_resource" | |
| }, | |
| { | |
| "name": "generic_threat_finding_identity_impacted_drives_files_resources_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_identity_impacted_drives_files_resources_table.yaml", | |
| "dataset": "generic_threat_finding_identity_impacted_drives_files_resources" | |
| }, | |
| { | |
| "name": "generic_threat_finding_identity_impacted_resources_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_identity_impacted_resources_table.yaml", | |
| "dataset": "generic_threat_finding_identity_impacted_resources" | |
| }, | |
| { | |
| "name": "generic_threat_finding_identity_past_admin_events_resources_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_identity_past_admin_events_resources_table.yaml", | |
| "dataset": "generic_threat_finding_identity_past_admin_events_resources" | |
| }, | |
| { | |
| "name": "generic_threat_finding_identity_past_all_events_resources_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_identity_past_all_events_resources_table.yaml", | |
| "dataset": "generic_threat_finding_identity_past_all_events_resources" | |
| }, | |
| { | |
| "name": "generic_threat_finding_locations_principal_asn_table copy", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_locations_principal_asn_table copy.yaml", | |
| "dataset": "generic_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "generic_threat_finding_locations_principal_city_stacked_parts copy", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_locations_principal_city_stacked_parts copy.yaml", | |
| "dataset": "generic_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "generic_threat_finding_locations_principal_country_table copy", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_locations_principal_country_table copy.yaml", | |
| "dataset": "generic_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "generic_threat_finding_locations_principal_data_source_table copy", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_locations_principal_data_source_table copy.yaml", | |
| "dataset": "generic_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "generic_threat_finding_locations_principal_locations_map copy", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_locations_principal_locations_map copy.yaml", | |
| "dataset": "generic_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "generic_threat_finding_other_principal_successfull_login_events_user_agents_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_other_principal_successfull_login_events_user_agents_table.yaml", | |
| "dataset": "generic_threat_finding_other_principal_successfull_login_events_user_agents" | |
| }, | |
| { | |
| "name": "generic_threat_finding_principal_actions_location_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_principal_actions_location_table.yaml", | |
| "dataset": "generic_threat_finding_principal_actions_location" | |
| }, | |
| { | |
| "name": "generic_threat_finding_principal_multiple_user_agents_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_principal_multiple_user_agents_table.yaml", | |
| "dataset": "generic_threat_finding_principal_multiple_user_agents" | |
| }, | |
| { | |
| "name": "generic_threat_finding_principal_new_user_agents_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_principal_new_user_agents_table.yaml", | |
| "dataset": "generic_threat_finding_principal_new_user_agents" | |
| }, | |
| { | |
| "name": "generic_threat_finding_user_agents_table", | |
| "path": "charts/genericdetector/blueprints/generic_threat_finding_user_agents_table.yaml", | |
| "dataset": "generic_threat_finding_user_agents" | |
| }, | |
| { | |
| "name": "github_actor_info", | |
| "path": "charts/githubdetector/users/github_actor_info.yaml", | |
| "dataset": "github_actor_info" | |
| }, | |
| { | |
| "name": "github_eks_workloads_container", | |
| "path": "charts/githubdetector/users/github_eks_workloads_container.yaml", | |
| "dataset": "code_and_workloads_exf_github_prs_packages_containers_workloads" | |
| }, | |
| { | |
| "name": "github_eks_workloads_package", | |
| "path": "charts/githubdetector/users/github_eks_workloads_package.yaml", | |
| "dataset": "code_and_workloads_exf_github_prs_packages_containers_workloads" | |
| }, | |
| { | |
| "name": "github_eks_workloads_workload", | |
| "path": "charts/githubdetector/users/github_eks_workloads_workload.yaml", | |
| "dataset": "code_and_workloads_exf_github_prs_packages_containers_workloads" | |
| }, | |
| { | |
| "name": "github_pr_activity_events_container", | |
| "path": "charts/githubdetector/users/github_pr_activity_events_container.yaml", | |
| "dataset": "github_pr_details" | |
| }, | |
| { | |
| "name": "github_pr_activity_events_repository", | |
| "path": "charts/githubdetector/users/github_pr_activity_events_repository.yaml", | |
| "dataset": "github_pr_details" | |
| }, | |
| { | |
| "name": "github_pr_activity_events_timeline", | |
| "path": "charts/githubdetector/users/github_pr_activity_events_timeline.yaml", | |
| "dataset": "code_and_workloads_exf_github_prs_packages_containers_workloads" | |
| }, | |
| { | |
| "name": "github_pr_activity_events_workload", | |
| "path": "charts/githubdetector/users/github_pr_activity_events_workload.yaml", | |
| "dataset": "github_pr_details" | |
| }, | |
| { | |
| "name": "github_pr_particulars", | |
| "path": "charts/githubdetector/users/github_pr_particulars.yaml", | |
| "dataset": "code_and_workloads_exf_github_prs_packages_containers_workloads" | |
| }, | |
| { | |
| "name": "github_repo_overview", | |
| "path": "charts/githubdetector/repos/details/github_repo_overview.yaml", | |
| "dataset": "github_repo_overview" | |
| }, | |
| { | |
| "name": "github_repo_protected_branches", | |
| "path": "charts/githubdetector/repos/details/github_repo_protected_branches.yaml", | |
| "dataset": "github_github_repo_protected_branches" | |
| }, | |
| { | |
| "name": "github_user_activity_pr_branch_by_user", | |
| "path": "charts/githubdetector/users/github_user_activity_pr_branch_by_user.yaml", | |
| "dataset": "code_and_workloads_exf_github_prs_packages_containers_workloads" | |
| }, | |
| { | |
| "name": "github_user_activity_pr_repository_by_user", | |
| "path": "charts/githubdetector/users/github_user_activity_pr_repository_by_user.yaml", | |
| "dataset": "code_and_workloads_exf_github_prs_packages_containers_workloads" | |
| }, | |
| { | |
| "name": "github_users_risks", | |
| "path": "charts/githubdetector/users/github_users_risks.yaml", | |
| "dataset": "github_users_risks" | |
| }, | |
| { | |
| "name": "guardduty_action_anomaly", | |
| "path": "charts/cloudtrail/guardduty/guardduty_action_anomaly.yaml", | |
| "dataset": "guardduty_action_anomaly" | |
| }, | |
| { | |
| "name": "guardduty_action_anomaly_table", | |
| "path": "charts/cloudtrail/threathunt/guardduty_action_anomaly_table.yaml", | |
| "dataset": "threathunt_finding_offending_actions_only" | |
| }, | |
| { | |
| "name": "guardduty_action_handlebars", | |
| "path": "charts/cloudtrail/guardduty/guardduty_action_handlebars.yaml", | |
| "dataset": "guardduty_finding" | |
| }, | |
| { | |
| "name": "guardduty_actor_location_handlebars", | |
| "path": "charts/k8s/guardduty/guardduty_actor_location_handlebars.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_finding_aws_guardduty_detector_findings_table", | |
| "path": "charts/k8s/guardduty/guardduty_finding_aws_guardduty_detector_findings_table.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_finding_pod_origin_sessions", | |
| "path": "charts/cloudtrail/guardduty/guardduty_finding_pod_origin_sessions.yaml", | |
| "dataset": "guardduty_finding_pod_origin_sessions" | |
| }, | |
| { | |
| "name": "guardduty_finding_s3_past_activity_bucket", | |
| "path": "charts/cloudtrail/guardduty/guardduty_finding_s3_past_activity_bucket.yaml", | |
| "dataset": "guardduty_s3_past_activity_bucket" | |
| }, | |
| { | |
| "name": "guardduty_k8s_config_info_jsx", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_config_info_jsx.yaml", | |
| "dataset": "guardduty_finding_guardduty_k8s_config_info" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_allows_privilege_escalation", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_allows_privilege_escalation.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_has_not_dropped_def_cap", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_has_not_dropped_def_cap.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_has_privileged_access", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_has_privileged_access.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_has_rw_filesystem", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_has_rw_filesystem.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_has_sysadmin_capability", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_has_sysadmin_capability.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_pod_age", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_pod_age.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_pod_change", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_pod_change.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_serviceaccount_age", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_serviceaccount_age.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_serviceaccount_change", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_serviceaccount_change.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_container_workload_change", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_container_workload_change.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "guardduty_k8s_session_exec_events", | |
| "path": "charts/k8s/guardduty/guardduty_k8s_session_exec_events.yaml", | |
| "dataset": "guardduty_finding_k8s_exec_session_events" | |
| }, | |
| { | |
| "name": "guardduty_workload_events", | |
| "path": "charts/k8s/guardduty/guardduty_workload_events.yaml", | |
| "dataset": "guardduty_finding_workload_events" | |
| }, | |
| { | |
| "name": "gws_resource_IP_threat_pie", | |
| "path": "charts/gwsdetector/drive_resources/gws_resource_IP_threat_pie.yaml", | |
| "dataset": "gws_events" | |
| }, | |
| { | |
| "name": "gws_resource_IP_threat_table", | |
| "path": "charts/gwsdetector/drive_resources/gws_resource_IP_threat_table.yaml", | |
| "dataset": "gws_events" | |
| }, | |
| { | |
| "name": "gws_resource_asn_table", | |
| "path": "charts/gwsdetector/drive_resources/gws_resource_asn_table.yaml", | |
| "dataset": "gws_events" | |
| }, | |
| { | |
| "name": "gws_resource_city_stacked", | |
| "path": "charts/gwsdetector/drive_resources/gws_resource_city_stacked.yaml", | |
| "dataset": "gws_events" | |
| }, | |
| { | |
| "name": "gws_resource_country_map", | |
| "path": "charts/gwsdetector/drive_resources/gws_resource_country_map.yaml", | |
| "dataset": "gws_events" | |
| }, | |
| { | |
| "name": "gws_resource_country_table", | |
| "path": "charts/gwsdetector/drive_resources/gws_resource_country_table.yaml", | |
| "dataset": "gws_events" | |
| }, | |
| { | |
| "name": "gws_resource_src_ip_table", | |
| "path": "charts/gwsdetector/drive_resources/gws_resource_src_ip_table.yaml", | |
| "dataset": "gws_events" | |
| }, | |
| { | |
| "name": "gws_resource_threat_finding_sensitive_info_table", | |
| "path": "charts/gwsdetector/blueprints/gws_resource_threat_finding_sensitive_info_table.yaml", | |
| "dataset": "gws_resource_threat_findings_sensitivity_info" | |
| }, | |
| { | |
| "name": "gws_resources_events_table", | |
| "path": "charts/gwsdetector/drive_resources/gws_resources_events_table.yaml", | |
| "dataset": "drive_resources_events" | |
| }, | |
| { | |
| "name": "gws_resources_operation", | |
| "path": "charts/gwsdetector/drive_resources/gws_resources_operation.yaml", | |
| "dataset": "drive_resources_events" | |
| }, | |
| { | |
| "name": "gws_threat_finding_identity_impacted_resources_with_enhancements", | |
| "path": "charts/gwsdetector/blueprints/gws_threat_finding_identity_impacted_resources_with_enhancements.yaml", | |
| "dataset": "gws_threat_finding_identity_impacted_resources_with_enhancements" | |
| }, | |
| { | |
| "name": "iam_identity_remediation_table", | |
| "path": "charts/cloudtrail/identity/iam_identity_remediation_table.yaml", | |
| "dataset": "iam_identity_remediation" | |
| }, | |
| { | |
| "name": "iam_users_risks_table", | |
| "path": "charts/cloudtrail/identity/iam_users_risks_table.yaml", | |
| "dataset": "iam_users_risks" | |
| }, | |
| { | |
| "name": "identities_by_access", | |
| "path": "charts/githubdetector/repos/details/identities_by_access.yaml", | |
| "dataset": "github_exf_github_repo_users" | |
| }, | |
| { | |
| "name": "identities_have_accessed_resource_table", | |
| "path": "charts/cloudtrail/resource/identities_have_accessed_resource_table.yaml", | |
| "dataset": "resource_sessions_events_resources" | |
| }, | |
| { | |
| "name": "identity_city_stacked", | |
| "path": "charts/gcloud/identity/identity_city_stacked.yaml", | |
| "dataset": "gcp_identity_identity_table_locations" | |
| }, | |
| { | |
| "name": "identity_configured_roles_table", | |
| "path": "charts/cloudtrail/identity/identity_configured_roles_table.yaml", | |
| "dataset": "identity_configured_roles" | |
| }, | |
| { | |
| "name": "identity_info_dataset_placeholder", | |
| "path": "charts/cloudtrail/identity/identity_info_dataset_placeholder.yaml", | |
| "dataset": "identity_info" | |
| }, | |
| { | |
| "name": "identity_investigate_groups_text", | |
| "path": "charts/system/identity_investigate/identity_investigate_groups_text.yaml", | |
| "dataset": "system_empty_dataset" | |
| }, | |
| { | |
| "name": "identity_investigate_keys_text", | |
| "path": "charts/system/identity_investigate/identity_investigate_keys_text.yaml", | |
| "dataset": "system_empty_dataset" | |
| }, | |
| { | |
| "name": "identity_investigate_main_table", | |
| "path": "charts/system/identity_investigate/identity_investigate_main_table.yaml", | |
| "dataset": "identities_investigate_identities_investigate" | |
| }, | |
| { | |
| "name": "identity_overview_info_ancestors", | |
| "path": "charts/cloudtrail/identity/identity_overview_info_ancestors.yaml", | |
| "dataset": "identity_info_new" | |
| }, | |
| { | |
| "name": "identity_overview_info_events_by_this_identity", | |
| "path": "charts/cloudtrail/identity/identity_overview_info_events_by_this_identity.yaml", | |
| "dataset": "identity_summary" | |
| }, | |
| { | |
| "name": "identity_permissions_attached_policies_table", | |
| "path": "charts/gcloud/identity/identity_permissions_attached_policies_table.yaml", | |
| "dataset": "gcp_identity_roles_permissions_identity_table_resource_service_permissions" | |
| }, | |
| { | |
| "name": "identity_permissions_histogram", | |
| "path": "charts/gcloud/identity/identity_permissions_histogram.yaml", | |
| "dataset": "gcp_identity_roles_permissions_identity_roles_permissions_permissions_counts" | |
| }, | |
| { | |
| "name": "identity_permissions_permissions_table", | |
| "path": "charts/gcloud/identity/identity_permissions_permissions_table.yaml", | |
| "dataset": "gcp_identity_roles_permissions_identity_table_resource_service_permissions" | |
| }, | |
| { | |
| "name": "identity_permissions_user_assumed_roles_table", | |
| "path": "charts/gcloud/identity/identity_permissions_user_assumed_roles_table.yaml", | |
| "dataset": "gcp_identity_roles_permissions_main_identity_table" | |
| }, | |
| { | |
| "name": "identity_sessions_descendents_roles", | |
| "path": "charts/cloudtrail/identity/identity_sessions_descendents_roles.yaml", | |
| "dataset": "identity_sessions_descendents_roles" | |
| }, | |
| { | |
| "name": "idp_admin_app_activity_events_timeline", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_activity_events_timeline.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_asn_table", | |
| "path": "charts/oktadetector/applications/idp_admin_app_asn_table.yaml", | |
| "dataset": "okta_apps_idp_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_city_stacked", | |
| "path": "charts/oktadetector/applications/idp_admin_app_city_stacked.yaml", | |
| "dataset": "okta_apps_idp_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_country_map", | |
| "path": "charts/oktadetector/applications/idp_admin_app_country_map.yaml", | |
| "dataset": "okta_apps_idp_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_country_table", | |
| "path": "charts/oktadetector/applications/idp_admin_app_country_table.yaml", | |
| "dataset": "okta_apps_idp_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_events_table", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_events_table.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_ip_threat_pie", | |
| "path": "charts/oktadetector/applications/idp_admin_app_ip_threat_pie.yaml", | |
| "dataset": "okta_apps_idp_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_ip_threat_table", | |
| "path": "charts/oktadetector/applications/idp_admin_app_ip_threat_table.yaml", | |
| "dataset": "okta_apps_idp_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_src_ip_table", | |
| "path": "charts/oktadetector/applications/idp_admin_app_src_ip_table.yaml", | |
| "dataset": "okta_apps_idp_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_user_activity_heatmap", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_user_activity_heatmap.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_user_stacked", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_user_stacked.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_useragent_client_stacked", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_useragent_client_stacked.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_useragent_device_pie", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_useragent_device_pie.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_useragent_os_stacked", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_useragent_os_stacked.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_admin_app_useragent_raw_table", | |
| "path": "charts/gwsdetector/saas_apps/idp_admin_app_useragent_raw.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_app_scope_identities_table", | |
| "path": "charts/oktadetector/applications/idp_app_scope_identities_table.yaml", | |
| "dataset": "okta_apps_okta_apps_inactive_users" | |
| }, | |
| { | |
| "name": "idp_app_scope_identity_table", | |
| "path": "charts/cloudtrail/applications/idp_app_scope_identity_table.yaml", | |
| "dataset": "idp_apps_idp_apps_scopes" | |
| }, | |
| { | |
| "name": "idp_app_useragent_raw_table", | |
| "path": "charts/gwsdetector/saas_apps/idp_app_useragent_raw.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_group_useragent_raw", | |
| "path": "charts/gwsdetector/groups/idp_group_useragent_raw_table.yaml", | |
| "dataset": "gws_groups_group_details" | |
| }, | |
| { | |
| "name": "idp_runtime_app_activity_events_timeline", | |
| "path": "charts/gwsdetector/saas_apps/idp_runtime_app_activity_events_timeline.yaml", | |
| "dataset": "gws_apps_events" | |
| }, | |
| { | |
| "name": "idp_sessions_from_different_location_previously", | |
| "path": "charts/cloudtrail/guardduty/idp_sessions_from_different_location_previously.yaml", | |
| "dataset": "idp_sessions_from_different_location_previously" | |
| }, | |
| { | |
| "name": "idp_sessions_from_same_location_previously", | |
| "path": "charts/cloudtrail/guardduty/idp_sessions_from_same_location_previously.yaml", | |
| "dataset": "idp_sessions_from_same_location_previously" | |
| }, | |
| { | |
| "name": "k8s_anomaly_action", | |
| "path": "charts/k8s/guardduty/k8s_anomaly_action.yaml", | |
| "dataset": "guardduty_finding_k8s_anomaly_action" | |
| }, | |
| { | |
| "name": "k8s_cluster_events_grouped_timeline", | |
| "path": "charts/k8s/clusters/k8s_cluster_events_grouped_timeline.yaml", | |
| "dataset": "k8s_cluster_resources_k8s_events" | |
| }, | |
| { | |
| "name": "k8s_cluster_events_table", | |
| "path": "charts/k8s/clusters/k8s_cluster_events_table.yaml", | |
| "dataset": "k8s_cluster_resources_k8s_events" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_containers_table", | |
| "path": "charts/k8s/clusters/k8s_cluster_resources_containers_table.yaml", | |
| "dataset": "k8s_cluster_resources_k8s_pod_containers" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_origin_identity_table", | |
| "path": "charts/k8s/clusters/k8s_cluster_resources_origin_identity_table.yaml", | |
| "dataset": "k8s_cluster_resources_k8s_resource_sessions_addresses_root_identity" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_origin_identity_type", | |
| "path": "charts/k8s/clusters/k8s_cluster_resources_origin_identity_type.yaml", | |
| "dataset": "k8s_cluster_resources_k8s_resource_sessions_addresses_root_identity" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_risks_findings_table", | |
| "path": "charts/k8s/clusters/k8s_cluster_resources_risks_findings_table.yaml", | |
| "dataset": "k8s_cluster_resources_k8s_risk_entities" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_table", | |
| "path": "charts/k8s/clusters/k8s_cluster_resources_table.yaml", | |
| "dataset": "k8s_cluster_resources_k8s_cluster_resources" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_threat_findings", | |
| "path": "charts/k8s/clusters/k8s_cluster_resources_threat_findings.yaml", | |
| "dataset": "k8s_cluster_resources_threat_findings" | |
| }, | |
| { | |
| "name": "k8s_pod_events_identity_id", | |
| "path": "charts/k8s/workloads/k8s_pod_events_identity_id.yaml", | |
| "dataset": "k8s_pod_events" | |
| }, | |
| { | |
| "name": "k8s_pod_events_identity_type", | |
| "path": "charts/k8s/workloads/k8s_pod_events_identity_type.yaml", | |
| "dataset": "k8s_pod_events" | |
| }, | |
| { | |
| "name": "k8s_pod_events_ip_address", | |
| "path": "charts/k8s/workloads/k8s_pod_events_ip_address.yaml", | |
| "dataset": "k8s_pod_events" | |
| }, | |
| { | |
| "name": "k8s_pod_events_operation", | |
| "path": "charts/k8s/workloads/k8s_pod_events_operation.yaml", | |
| "dataset": "k8s_pod_events" | |
| }, | |
| { | |
| "name": "k8s_pod_events_session_name", | |
| "path": "charts/k8s/workloads/k8s_pod_events_session_name.yaml", | |
| "dataset": "k8s_pod_events" | |
| }, | |
| { | |
| "name": "k8s_pod_events_subresource", | |
| "path": "charts/k8s/workloads/k8s_pod_events_subresource.yaml", | |
| "dataset": "k8s_pod_events" | |
| }, | |
| { | |
| "name": "k8s_resource_attached_others_config_table", | |
| "path": "charts/k8s/workloads/k8s_resource_attached_others_config_table.yaml", | |
| "dataset": "resource_attached_k8s" | |
| }, | |
| { | |
| "name": "kandji_users", | |
| "path": "charts/kandjidetector/users/kandji_users.yaml", | |
| "dataset": "kandji_users_kandji_users" | |
| }, | |
| { | |
| "name": "log_ingestion_size_timeseries", | |
| "path": "charts/system/data_sources/log_ingestion_size_timeseries.yaml", | |
| "dataset": "log_ingestion_datasource_types" | |
| }, | |
| { | |
| "name": "long_term_credentials_table", | |
| "path": "charts/cloudtrail/identity/long_term_credentials.yaml", | |
| "dataset": "long_term_credentials" | |
| }, | |
| { | |
| "name": "microsoft365_resource_IP_threat_pie", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_IP_threat_pie.yaml", | |
| "dataset": "microsoft365_events" | |
| }, | |
| { | |
| "name": "microsoft365_resource_IP_threat_table", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_IP_threat_table.yaml", | |
| "dataset": "microsoft365_events" | |
| }, | |
| { | |
| "name": "microsoft365_resource_asn_table", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_asn_table.yaml", | |
| "dataset": "microsoft365_events" | |
| }, | |
| { | |
| "name": "microsoft365_resource_city_stacked", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_city_stacked.yaml", | |
| "dataset": "microsoft365_events" | |
| }, | |
| { | |
| "name": "microsoft365_resource_country_map", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_country_map.yaml", | |
| "dataset": "microsoft365_events" | |
| }, | |
| { | |
| "name": "microsoft365_resource_country_table", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_country_table.yaml", | |
| "dataset": "microsoft365_events" | |
| }, | |
| { | |
| "name": "microsoft365_resource_src_ip_table", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_src_ip_table.yaml", | |
| "dataset": "microsoft365_events" | |
| }, | |
| { | |
| "name": "microsoft365_resource_type_table", | |
| "path": "charts/microsoft365detector/drive_resources/microsoft365_resource_type_table.yaml", | |
| "dataset": "microsoft365_saas_resources" | |
| }, | |
| { | |
| "name": "microsoft365_threat_finding_identity_impacted_resources_with_enhancements", | |
| "path": "charts/microsoft365detector/blueprints/microsoft365_threat_finding_identity_impacted_resources_with_enhancements.yaml", | |
| "dataset": "microsoft365_threat_finding_identity_impacted_resources_with_enhancements" | |
| }, | |
| { | |
| "name": "microsoft365_threat_finding_locations_principal_asn_table copy", | |
| "path": "charts/microsoft365detector/blueprints/microsoft365_threat_finding_locations_principal_asn_table copy.yaml", | |
| "dataset": "microsoft365_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "microsoft365_threat_finding_locations_principal_city_stacked_parts copy", | |
| "path": "charts/microsoft365detector/blueprints/microsoft365_threat_finding_locations_principal_city_stacked_parts copy.yaml", | |
| "dataset": "microsoft365_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "microsoft365_threat_finding_locations_principal_country_table copy", | |
| "path": "charts/microsoft365detector/blueprints/microsoft365_threat_finding_locations_principal_country_table copy.yaml", | |
| "dataset": "microsoft365_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "microsoft365_threat_finding_locations_principal_data_source_table copy", | |
| "path": "charts/microsoft365detector/blueprints/microsoft365_threat_finding_locations_principal_data_source_table copy.yaml", | |
| "dataset": "microsoft365_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "microsoft365_threat_finding_locations_principal_locations_map copy", | |
| "path": "charts/microsoft365detector/blueprints/microsoft365_threat_finding_locations_principal_locations_map copy.yaml", | |
| "dataset": "microsoft365_threat_finding_principal_universal_locations" | |
| }, | |
| { | |
| "name": "microsoft365_threat_finding_principal_actions_location_table", | |
| "path": "charts/microsoft365detector/blueprints/microsoft365_threat_finding_principal_actions_location_table.yaml", | |
| "dataset": "microsoft365_threat_finding_principal_actions_location" | |
| }, | |
| { | |
| "name": "microsoftdefenderforoffice365_threat_finding_info_jsx", | |
| "path": "charts/azuredetector/blueprints/microsoftdefenderforoffice365_threat_finding_info_jsx.yaml", | |
| "dataset": "azure_threat_finding_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_allows_privilege_escalation", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_allows_privilege_escalation.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_capabilities" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_has_not_dropped_def_capabilities", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_has_not_dropped_def_capabilities.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_capabilities" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_has_privileged_access", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_has_privileged_access.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_capabilities" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_has_rw_filesystem", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_has_rw_filesystem.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_capabilities" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_has_sysadmin_capability", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_has_sysadmin_capability.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_capabilities" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_pod_age", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_pod_age.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_update_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_pod_change", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_pod_change.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_update_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_serviceaccount_age", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_serviceaccount_age.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_update_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_serviceaccount_change", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_serviceaccount_change.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_update_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_container_workload_change", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_container_workload_change.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_container_update_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_enterprise_user_exf_tags", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_enterprise_user_exf_tags.yaml", | |
| "dataset": "microsoftedr_threat_finding_enterprise_user_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_identity_impacted_resources_table", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_identity_impacted_resources_table.yaml", | |
| "dataset": "microsoftedr_threat_finding_identity_impacted_resources" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_k8s_config_info_jsx", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_k8s_config_info_jsx.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_config_info" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_k8s_eks_session_events", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_k8s_eks_session_events.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_eks_session_events" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_k8s_exec_pod_events", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_k8s_exec_pod_events.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_exec_pod_events" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_k8s_exec_session_events", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_k8s_exec_session_events.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_exec_session_events" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_k8s_exec_session_events_graph", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_k8s_exec_session_events_graph.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_exec_session_events_graph" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_k8s_sa_rbac_jsx", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_k8s_sa_rbac_jsx.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_sa_rbac" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_k8s_workloads_info_jsx", | |
| "path": "charts/microsoftedrdetector/blueprints/microsoftedr_threat_finding_k8s_workloads_info_jsx.yaml", | |
| "dataset": "microsoftedr_threat_finding_k8s_resources" | |
| }, | |
| { | |
| "name": "okta_threat_insights_finding_info_jsx", | |
| "path": "charts/oktadetector/blueprints/okta_threat_insights_finding_info_jsx.yaml", | |
| "dataset": "okta_threat_insights_finding_info" | |
| }, | |
| { | |
| "name": "parent_info", | |
| "path": "charts/k8s/guardduty/parent_info.yaml", | |
| "dataset": "guardduty_finding_parent_info" | |
| }, | |
| { | |
| "name": "permission_check_details", | |
| "path": "charts/k8s/guardduty/permission_check_details.yaml", | |
| "dataset": "guardduty_finding_k8s_action_details" | |
| }, | |
| { | |
| "name": "principal_info", | |
| "path": "charts/cloudtrail/guardduty/principal_info.yaml", | |
| "dataset": "guardduty_finding" | |
| }, | |
| { | |
| "name": "process_modify", | |
| "path": "charts/k8s/guardduty/process_modify.yaml", | |
| "dataset": "guardduty_finding_modifying_process" | |
| }, | |
| { | |
| "name": "proxy_session_detail_dlp_rules_table", | |
| "path": "charts/system/proxy_sessions/proxy_session_detail_dlp_rules_table.yaml", | |
| "dataset": "zscaler_sessions_zscaler_events" | |
| }, | |
| { | |
| "name": "proxy_session_userAgent_table", | |
| "path": "charts/system/proxy_sessions/proxy_session_userAgent_table.yaml", | |
| "dataset": "zscaler_sessions_zscaler_events" | |
| }, | |
| { | |
| "name": "proxy_sessions_dlp_rules_table", | |
| "path": "charts/system/proxy_sessions/proxy_sessions_dlp_rules_table.yaml", | |
| "dataset": "zscaler_sessions_zscaler_events" | |
| }, | |
| { | |
| "name": "request_urls_stacked", | |
| "path": "charts/accesslogsdetector/events/request_urls_stacked.yaml", | |
| "dataset": "access_logs_events_access_logs_events" | |
| }, | |
| { | |
| "name": "resource_can_assume_identities", | |
| "path": "charts/cloudtrail/resource/resource_can_assume_identities.yaml", | |
| "dataset": "resource_descendants" | |
| }, | |
| { | |
| "name": "resource_events_service_source", | |
| "path": "charts/cloudtrail/resource/resource_events_service_source.yaml", | |
| "dataset": "resource_resource_events" | |
| }, | |
| { | |
| "name": "resource_events_source", | |
| "path": "charts/cloudtrail/resource/resource_events_source.yaml", | |
| "dataset": "resource_sessions_events_resources" | |
| }, | |
| { | |
| "name": "resource_events_tree", | |
| "path": "charts/cloudtrail/resource/resource_events_tree.yaml", | |
| "dataset": "resource_sessions_events_resources" | |
| }, | |
| { | |
| "name": "resource_runtime_internal_ips_table", | |
| "path": "charts/gcloud/resources/resource_runtime_internal_ips_table.yaml", | |
| "dataset": "gcp_resource_audit_logs_resources" | |
| }, | |
| { | |
| "name": "resource_runtime_ips_by_region_table", | |
| "path": "charts/gcloud/resources/resource_runtime_ips_by_region_table.yaml", | |
| "dataset": "gcp_resource_audit_logs_resources" | |
| }, | |
| { | |
| "name": "resources_gcp_region_stacked_parts", | |
| "path": "charts/gcloud/resources/resources_gcp_region_stacked_parts.yaml", | |
| "dataset": "gcp_resources_audit_logs_resources" | |
| }, | |
| { | |
| "name": "role_and_role_binding", | |
| "path": "charts/k8s/guardduty/role_and_role_binding.yaml", | |
| "dataset": "guardduty_finding_k8s_action_details" | |
| }, | |
| { | |
| "name": "saas_costs_by_usage_type_stacked", | |
| "path": "charts/openaidetector/users/saas_costs_by_usage_type_stacked.yaml", | |
| "dataset": "openai_usage_events_costs_events" | |
| }, | |
| { | |
| "name": "saas_costs_by_usage_type_timeseries", | |
| "path": "charts/openaidetector/users/saas_costs_by_usage_type_timeseries.yaml", | |
| "dataset": "openai_usage_events_costs_events" | |
| }, | |
| { | |
| "name": "saas_event_browser_identity_type_text", | |
| "path": "charts/cloudtrail/saas_event_browser/saas_event_browser_identity_type_text.yaml", | |
| "dataset": "empty_dataset" | |
| }, | |
| { | |
| "name": "saas_events_app_rules_policy", | |
| "path": "charts/zscalerdetector/users/saas_events_app_rules_policy.yaml", | |
| "dataset": "zscaler_events_by_this_identity_saas_resources_app" | |
| }, | |
| { | |
| "name": "saas_events_app_rules_stacked", | |
| "path": "charts/zscalerdetector/users/saas_events_app_rules_stacked.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_applications_class", | |
| "path": "charts/zscalerdetector/users/saas_events_applications_class.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_applications_risk_score", | |
| "path": "charts/zscalerdetector/users/saas_events_applications_risk_score.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_applications_table", | |
| "path": "charts/zscalerdetector/users/saas_events_applications_table.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_bw_rules_policy", | |
| "path": "charts/zscalerdetector/users/saas_events_bw_rules_policy.yaml", | |
| "dataset": "zscaler_events_by_this_identity_saas_resources_bw" | |
| }, | |
| { | |
| "name": "saas_events_bw_rules_stacked", | |
| "path": "charts/zscalerdetector/users/saas_events_bw_rules_stacked.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_dlp_engine", | |
| "path": "charts/zscalerdetector/users/saas_events_dlp_engine.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_dlp_rules_policy", | |
| "path": "charts/zscalerdetector/users/saas_events_dlp_rules_policy.yaml", | |
| "dataset": "zscaler_events_by_this_identity_saas_resources_dlp" | |
| }, | |
| { | |
| "name": "saas_events_dlp_rules_stacked", | |
| "path": "charts/zscalerdetector/users/saas_events_dlp_rules_stacked.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_dlp_rules_table", | |
| "path": "charts/zscalerdetector/users/saas_events_dlp_rules_table.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_domains_table", | |
| "path": "charts/zscalerdetector/users/saas_events_domains_table.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_malware_category", | |
| "path": "charts/zscalerdetector/users/saas_events_malware_category.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_malware_class", | |
| "path": "charts/zscalerdetector/users/saas_events_malware_class.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_ssl_rules_policy", | |
| "path": "charts/zscalerdetector/users/saas_events_ssl_rules_policy.yaml", | |
| "dataset": "zscaler_events_by_this_identity_saas_resources_ssl" | |
| }, | |
| { | |
| "name": "saas_events_ssl_rules_stacked", | |
| "path": "charts/zscalerdetector/users/saas_events_ssl_rules_stacked.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_threat_name", | |
| "path": "charts/zscalerdetector/users/saas_events_threat_name.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_threat_severity", | |
| "path": "charts/zscalerdetector/users/saas_events_threat_severity.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_url_category", | |
| "path": "charts/zscalerdetector/users/saas_events_url_category.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_url_rules_policy", | |
| "path": "charts/zscalerdetector/users/saas_events_url_rules_policy.yaml", | |
| "dataset": "zscaler_events_by_this_identity_saas_resources_url" | |
| }, | |
| { | |
| "name": "saas_events_url_rules_stacked", | |
| "path": "charts/zscalerdetector/users/saas_events_url_rules_stacked.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_url_table", | |
| "path": "charts/zscalerdetector/users/saas_events_url_table.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_events_urlclass", | |
| "path": "charts/zscalerdetector/users/saas_events_urlclass.yaml", | |
| "dataset": "zscaler_events_by_this_identity_web_events" | |
| }, | |
| { | |
| "name": "saas_token_usage_by_identities_timeseries", | |
| "path": "charts/openaidetector/users/saas_token_usage_by_identities_timeseries.yaml", | |
| "dataset": "openai_usage_events_usage_events_ranked" | |
| }, | |
| { | |
| "name": "saas_token_usage_by_model_overview", | |
| "path": "charts/openaidetector/users/saas_token_usage_by_model_overview.yaml", | |
| "dataset": "openai_usage_events_usage_events_ranked" | |
| }, | |
| { | |
| "name": "saas_user_atlassian_resources", | |
| "path": "charts/atlassiandetector/users/saas_user_atlassian_resources.yaml", | |
| "dataset": "atlassian_identity_saas_principal_role_targets" | |
| }, | |
| { | |
| "name": "saas_user_resource_table", | |
| "path": "charts/fireblocksdetector/users/saas_user_resource_table.yaml", | |
| "dataset": "fireblocks_events_by_this_identity_events" | |
| }, | |
| { | |
| "name": "saas_user_sessions_histogram", | |
| "path": "charts/openaidetector/users/saas_user_sessions_histogram.yaml", | |
| "dataset": "openai_events_by_this_identity_events" | |
| }, | |
| { | |
| "name": "sentinelone_threat_finding_enterprise_user_exf_tags", | |
| "path": "charts/sentinelonedetector/blueprints/sentinelone_threat_finding_enterprise_user_exf_tags.yaml", | |
| "dataset": "sentinelone_threat_finding_enterprise_user_info" | |
| }, | |
| { | |
| "name": "serviceaccount_rbac", | |
| "path": "charts/k8s/guardduty/serviceaccount_rbac.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "session_browser_IP_threat_stacked_parts", | |
| "path": "charts/cloudtrail/session/session_browser_IP_threat_stacked_parts.yaml", | |
| "dataset": "sessions_session_source_ip_addresses" | |
| }, | |
| { | |
| "name": "session_browser_aws_region_pie", | |
| "path": "charts/cloudtrail/session/session_browser_aws_region_pie.yaml", | |
| "dataset": "sessions_session_source_ip_addresses" | |
| }, | |
| { | |
| "name": "session_browser_city_pie", | |
| "path": "charts/cloudtrail/session/session_browser_city_pie.yaml", | |
| "dataset": "sessions_session_source_ip_addresses" | |
| }, | |
| { | |
| "name": "session_browser_city_stacked_parts", | |
| "path": "charts/cloudtrail/session/session_browser_city_stacked_parts.yaml", | |
| "dataset": "sessions_session_source_ip_addresses" | |
| }, | |
| { | |
| "name": "session_browser_city_table", | |
| "path": "charts/cloudtrail/session/session_browser_city_table.yaml", | |
| "dataset": "sessions_session_source_ip_addresses" | |
| }, | |
| { | |
| "name": "session_browser_using_vpc_endpoint_stacked_parts", | |
| "path": "charts/cloudtrail/session/session_browser_using_vpc_endpoint_stacked_parts.yaml", | |
| "dataset": "sessions_session_source_ip_addresses" | |
| }, | |
| { | |
| "name": "session_browser_vpc_id_stacked_parts", | |
| "path": "charts/cloudtrail/session/session_browser_vpc_id_stacked_parts.yaml", | |
| "dataset": "sessions_sessions" | |
| }, | |
| { | |
| "name": "session_browser_xp_exfSourceCountry3_table", | |
| "path": "charts/cloudtrail/session/session_browser_xp_exfSourceCountry3_table.yaml", | |
| "dataset": "sessions_session_source_ip_addresses" | |
| }, | |
| { | |
| "name": "session_cooccur_useragent", | |
| "path": "charts/cloudtrail/session/session_cooccur_useragent.yaml", | |
| "dataset": "cooccur_table_session_useragent" | |
| }, | |
| { | |
| "name": "session_details_projects", | |
| "path": "charts/gcloud/sessions/session_details_projects.yaml", | |
| "dataset": "gcp_session_main_audit_logs" | |
| }, | |
| { | |
| "name": "session_events_ipaddr", | |
| "path": "charts/cloudtrail/guardduty/session_events_ipaddr.yaml", | |
| "dataset": "session_events_ipaddr" | |
| }, | |
| { | |
| "name": "session_events_name", | |
| "path": "charts/cloudtrail/guardduty/session_events_name.yaml", | |
| "dataset": "session_events" | |
| }, | |
| { | |
| "name": "session_events_readonly", | |
| "path": "charts/cloudtrail/guardduty/session_events_readonly.yaml", | |
| "dataset": "session_events" | |
| }, | |
| { | |
| "name": "session_events_source", | |
| "path": "charts/cloudtrail/guardduty/session_events_source.yaml", | |
| "dataset": "session_events" | |
| }, | |
| { | |
| "name": "session_events_useragent", | |
| "path": "charts/cloudtrail/guardduty/session_events_useragent.yaml", | |
| "dataset": "session_events" | |
| }, | |
| { | |
| "name": "session_events_vpc_endpointid", | |
| "path": "charts/cloudtrail/session/session_events_vpc_endpointid.yaml", | |
| "dataset": "session_events_ipaddr" | |
| }, | |
| { | |
| "name": "session_identity_type_text", | |
| "path": "charts/cloudtrail/session_detections/session_identity_type_text.yaml", | |
| "dataset": "empty_dataset" | |
| }, | |
| { | |
| "name": "session_session_tree_events", | |
| "path": "charts/cloudtrail/session/session_session_tree_events.yaml", | |
| "dataset": "session_session_tree_events" | |
| }, | |
| { | |
| "name": "slack_event_count_timeline", | |
| "path": "charts/slackdetector/users/slack_event_count_timeline.yaml", | |
| "dataset": "slack_identity_details_slack_identity_details" | |
| }, | |
| { | |
| "name": "soc_insights_mtti_by_severity_and_sla", | |
| "path": "charts/system/soc_insights/soc_insights_mtti_by_severity_and_sla.yaml", | |
| "dataset": "soc_insights_case_threats_timings_soc_insights_case_threats_timings" | |
| }, | |
| { | |
| "name": "source_svc_events_type_stacked_parts", | |
| "path": "charts/cloudtrail/resource/change_attention/change_attention_src_svc_events_type_stacked_parts.yaml", | |
| "dataset": "change_attention_events" | |
| }, | |
| { | |
| "name": "third_party_integrations_risks_table", | |
| "path": "charts/cloudtrail/identity/third_party_integrations_risks_table.yaml", | |
| "dataset": "third_party_integrations_risks" | |
| }, | |
| { | |
| "name": "threat_finding_signals_stacked_parts", | |
| "path": "charts/system/finding/threat_finding_signals_stacked_parts.yaml", | |
| "dataset": "threat_finding_threat_findings_signals" | |
| }, | |
| { | |
| "name": "threat_finding_signals_table", | |
| "path": "charts/system/finding/threat_finding_signals_table.yaml", | |
| "dataset": "threat_finding_threat_findings_signals" | |
| }, | |
| { | |
| "name": "threat_finding_table", | |
| "path": "charts/accesslogsdetector/blueprints/threat_finding_table.yaml", | |
| "dataset": "accesslogs_threat_findings" | |
| }, | |
| { | |
| "name": "threat_findings_average_mttr", | |
| "path": "charts/system/finding/threat_findings_average_mttr.yaml", | |
| "dataset": "threat_findings_threat_findings" | |
| }, | |
| { | |
| "name": "threat_findings_error_code_table", | |
| "path": "charts/system/finding/threat_findings_error_code_table.yaml", | |
| "dataset": "threat_findings_events" | |
| }, | |
| { | |
| "name": "threat_findings_error_message_table", | |
| "path": "charts/system/finding/threat_findings_error_message_table.yaml", | |
| "dataset": "threat_findings_events" | |
| }, | |
| { | |
| "name": "threat_findings_event_category_pie", | |
| "path": "charts/system/finding/threat_findings_event_category_pie.yaml", | |
| "dataset": "threat_findings_events" | |
| }, | |
| { | |
| "name": "threat_findings_event_readonly_pie", | |
| "path": "charts/system/finding/threat_findings_event_readonly_pie.yaml", | |
| "dataset": "threat_findings_events" | |
| }, | |
| { | |
| "name": "threat_findings_event_source_short_treemap", | |
| "path": "charts/system/finding/threat_findings_event_source_short_treemap.yaml", | |
| "dataset": "threat_findings_events" | |
| }, | |
| { | |
| "name": "threat_findings_event_source_stacked_parts", | |
| "path": "charts/system/finding/threat_findings_event_source_stacked_parts.yaml", | |
| "dataset": "threat_findings_events" | |
| }, | |
| { | |
| "name": "threat_findings_finding_source_json", | |
| "path": "charts/system/finding/threat_findings_finding_source_json.yaml", | |
| "dataset": "threat_finding_json_data_json_data" | |
| }, | |
| { | |
| "name": "threathunt_action_principals_same_resources_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_action_principals_same_resources_table.yaml", | |
| "dataset": "threathunt_principals_same_resources" | |
| }, | |
| { | |
| "name": "threathunt_action_session_resources_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_action_session_resources_table.yaml", | |
| "dataset": "threathunt_session_resources" | |
| }, | |
| { | |
| "name": "threathunt_actor_ip_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_actor_ip_table.yaml", | |
| "dataset": "threathunt_actor_threat_ip" | |
| }, | |
| { | |
| "name": "threathunt_actor_location_links_handlebars", | |
| "path": "charts/cloudtrail/threathunt/threathunt_actor_location_links_handlebars.yaml", | |
| "dataset": "threathunt_main" | |
| }, | |
| { | |
| "name": "threathunt_actor_principal_diffloc_previous_sessions_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_actor_principal_diffloc_previous_sessions_table.yaml", | |
| "dataset": "threathunt_principal_example_diffloc_previous_session" | |
| }, | |
| { | |
| "name": "threathunt_actor_principal_diffloc_sametime_sessions_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_actor_principal_diffloc_sametime_sessions_table.yaml", | |
| "dataset": "threathunt_principal_example_diffloc_sametime_sessions" | |
| }, | |
| { | |
| "name": "threathunt_actor_principal_locations_map", | |
| "path": "charts/cloudtrail/threathunt/threathunt_actor_principal_locations_map.yaml", | |
| "dataset": "threathunt_actor_principal_locations" | |
| }, | |
| { | |
| "name": "threathunt_actor_principal_same_location_sessions_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_actor_principal_same_location_sessions_table.yaml", | |
| "dataset": "threathunt_principal_example_sessions" | |
| }, | |
| { | |
| "name": "threathunt_assumed_role_handlebars", | |
| "path": "charts/cloudtrail/threathunt/threathunt_assumed_role_handlebars.yaml", | |
| "dataset": "threathunt_main" | |
| }, | |
| { | |
| "name": "threathunt_enterprise_user_info_handlebars", | |
| "path": "charts/cloudtrail/threathunt/threathunt_enterprise_user_info_handlebars.yaml", | |
| "dataset": "threathunt_enterprise_user_info" | |
| }, | |
| { | |
| "name": "threathunt_exabot_detect_handlebars", | |
| "path": "charts/cloudtrail/threathunt/threathunt_exabot_detect_handlebars.yaml", | |
| "dataset": "threathunt_finding_llm_info" | |
| }, | |
| { | |
| "name": "threathunt_exec_rsrc_past_management_events_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_exec_rsrc_past_management_events_table.yaml", | |
| "dataset": "threathunt_exec_rsrc_past_management_events" | |
| }, | |
| { | |
| "name": "threathunt_execution_resource_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_execution_resource_table.yaml", | |
| "dataset": "threathunt_execution_resource" | |
| }, | |
| { | |
| "name": "threathunt_finding_info", | |
| "path": "charts/cloudtrail/threathunt/threathunt_finding_info.yaml", | |
| "dataset": "threathunt_finding_info" | |
| }, | |
| { | |
| "name": "threathunt_findings_list", | |
| "path": "charts/cloudtrail/threathunt/threathunt_findings_list.yaml", | |
| "dataset": "threathunt_findings_list" | |
| }, | |
| { | |
| "name": "threathunt_idp_session_event_chained_from_root_identity", | |
| "path": "charts/cloudtrail/threathunt/threathunt_idp_session_event_chained_from_root_identity.yaml", | |
| "dataset": "threathunt_idp_session_event_chained_from_root_identity" | |
| }, | |
| { | |
| "name": "threathunt_idp_session_event_chained_from_root_session", | |
| "path": "charts/cloudtrail/threathunt/threathunt_idp_session_event_chained_from_root_session.yaml", | |
| "dataset": "idp_session_event_chained_from_root_session" | |
| }, | |
| { | |
| "name": "threathunt_idp_sessions_from_different_location_previously_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_idp_sessions_from_different_location_previously_table.yaml", | |
| "dataset": "threathunt_idp_sessions_from_different_location_previously" | |
| }, | |
| { | |
| "name": "threathunt_idp_sessions_from_different_location_same_time_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_idp_sessions_from_different_location_same_time_table.yaml", | |
| "dataset": "threathunt_idp_sessions_from_different_location_same_time" | |
| }, | |
| { | |
| "name": "threathunt_idp_sessions_from_same_location_previously_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_idp_sessions_from_same_location_previously_table.yaml", | |
| "dataset": "threathunt_idp_sessions_from_same_location_previously" | |
| }, | |
| { | |
| "name": "threathunt_impacted_resources_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_impacted_resources_table.yaml", | |
| "dataset": "threathunt_impacted_resources" | |
| }, | |
| { | |
| "name": "threathunt_malicious_files", | |
| "path": "charts/cloudtrail/threathunt/threathunt_malicious_files.yaml", | |
| "dataset": "threathunt_malicious_files" | |
| }, | |
| { | |
| "name": "threathunt_offending_actions_done_before_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_offending_actions_done_before_table.yaml", | |
| "dataset": "threathunt_finding_offending_actions_done_before" | |
| }, | |
| { | |
| "name": "threathunt_offending_actions_other_principal_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_offending_actions_other_principal_table.yaml", | |
| "dataset": "threathunt_finding_offending_actions_other_principal" | |
| }, | |
| { | |
| "name": "threathunt_offending_actions_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_offending_actions_table.yaml", | |
| "dataset": "threathunt_finding_offending_actions_only" | |
| }, | |
| { | |
| "name": "threathunt_origin_identity_handlebars", | |
| "path": "charts/cloudtrail/threathunt/threathunt_origin_identity_handlebars.yaml", | |
| "dataset": "threathunt_origin_identity" | |
| }, | |
| { | |
| "name": "threathunt_principal_info_handlebars", | |
| "path": "charts/cloudtrail/threathunt/threathunt_principal_info_handlebars.yaml", | |
| "dataset": "threathunt_main" | |
| }, | |
| { | |
| "name": "threathunt_related_role_findings_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_related_role_findings_table.yaml", | |
| "dataset": "threathunt_related_role_findings" | |
| }, | |
| { | |
| "name": "threathunt_related_role_risk_findings_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_related_role_risk_findings_table.yaml", | |
| "dataset": "threathunt_role_risk_findings_related_risk_findings" | |
| }, | |
| { | |
| "name": "threathunt_related_root_identity_findings_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_related_root_identity_findings_table.yaml", | |
| "dataset": "threathunt_related_root_identity_findings" | |
| }, | |
| { | |
| "name": "threathunt_related_root_identity_risk_findings_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_related_root_identity_risk_findings_table.yaml", | |
| "dataset": "threathunt_root_identity_risk_findings_related_risk_findings" | |
| }, | |
| { | |
| "name": "threathunt_related_similar_findings_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_related_similar_findings_table.yaml", | |
| "dataset": "threathunt_related_similar_findings" | |
| }, | |
| { | |
| "name": "threathunt_resources_past_management_events_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_resources_past_management_events_table.yaml", | |
| "dataset": "threathunt_resources_past_management_events" | |
| }, | |
| { | |
| "name": "threathunt_role_history_handlebars", | |
| "path": "charts/cloudtrail/threathunt/threathunt_role_history_handlebars.yaml", | |
| "dataset": "threathunt_role_history" | |
| }, | |
| { | |
| "name": "threathunt_s3_key_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_s3_key_table.yaml", | |
| "dataset": "threathunt_s3_key" | |
| }, | |
| { | |
| "name": "threathunt_s3_past_activity_bucket_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_s3_past_activity_bucket_table.yaml", | |
| "dataset": "threathunt_s3_past_activity_bucket" | |
| }, | |
| { | |
| "name": "threathunt_s3_past_activity_key_table", | |
| "path": "charts/cloudtrail/threathunt/threathunt_s3_past_activity_key_table.yaml", | |
| "dataset": "threathunt_s3_past_activity_key" | |
| }, | |
| { | |
| "name": "threathunt_session_auth_tree_graph", | |
| "path": "charts/cloudtrail/threathunt/threathunt_session_auth_tree_graph.yaml", | |
| "dataset": "session_auth_tree" | |
| }, | |
| { | |
| "name": "threathunt_signals_list", | |
| "path": "charts/cloudtrail/threathunt/threathunt_signals_list.yaml", | |
| "dataset": "threathunt_signals_list" | |
| }, | |
| { | |
| "name": "threathunt_threat_finding_actor_location", | |
| "path": "charts/cloudtrail/threathunt/threathunt_threat_finding_actor_location.yaml", | |
| "dataset": "threathunt_threat_finding_actor_location" | |
| }, | |
| { | |
| "name": "uid_proxy_events_application_risk_score", | |
| "path": "charts/system/universal_identity/uid_proxy_events_application_risk_score.yaml", | |
| "dataset": "universal_identity_proxy_events" | |
| }, | |
| { | |
| "name": "uid_proxy_events_dlp_rules_table", | |
| "path": "charts/system/universal_identity/uid_proxy_events_dlp_rules_table.yaml", | |
| "dataset": "universal_identity_proxy_events" | |
| }, | |
| { | |
| "name": "uid_proxy_events_event_timeline", | |
| "path": "charts/system/universal_identity/uid_proxy_events_event_timeline.yaml", | |
| "dataset": "universal_identity_proxy_events" | |
| }, | |
| { | |
| "name": "universal_detection_rule_finding_events_table", | |
| "path": "charts/universaldetector/blueprints/universal_detection_rule_finding_events_table.yaml", | |
| "dataset": "universal_detection_rule_finding_events" | |
| }, | |
| { | |
| "name": "universal_detection_rule_finding_info_jsx", | |
| "path": "charts/universaldetector/blueprints/universal_detection_rule_finding_info_jsx.yaml", | |
| "dataset": "universal_threat_finding_info" | |
| }, | |
| { | |
| "name": "web_events_dlp_rules_table", | |
| "path": "charts/zscalerdetector/web_events/web_events_dlp_rules_table.yaml", | |
| "dataset": "web_events_web_events" | |
| }, | |
| { | |
| "name": "web_events_event_name_treemap", | |
| "path": "charts/zscalerdetector/web_events/web_events_event_name_treemap.yaml", | |
| "dataset": "web_events_web_events" | |
| }, | |
| { | |
| "name": "web_events_event_timeline", | |
| "path": "charts/zscalerdetector/web_events/web_events_event_timeline.yaml", | |
| "dataset": "web_events_web_events" | |
| }, | |
| { | |
| "name": "workflow_repo", | |
| "path": "charts/githubdetector/workflows/workflow_repo.yaml", | |
| "dataset": "workflow_repos" | |
| }, | |
| { | |
| "name": "workflows_by_runtime", | |
| "path": "charts/githubdetector/workflows/workflows_by_runtime.yaml", | |
| "dataset": "github_repo_workflows_by_runtime" | |
| }, | |
| { | |
| "name": "workloads_info", | |
| "path": "charts/k8s/guardduty/workloads_info.yaml", | |
| "dataset": "guardduty_finding_aws_guardduty_detector_findings" | |
| }, | |
| { | |
| "name": "zscaler_threat_finding_identity_impacted_drives_files_resources_table", | |
| "path": "charts/zscalerdetector/blueprints/zscaler_threat_finding_identity_impacted_drives_files_resources_table.yaml", | |
| "dataset": "zscaler_threat_finding_identity_impacted_drives_files_resources" | |
| } | |
| ], | |
| "orphan_datasets": [ | |
| { | |
| "name": "1password_threat_finding_alertcenter_events", | |
| "path": "datasets/onepassworddetector/blueprints/1password_threat_finding_alertcenter_events.yaml", | |
| "database": "onepassworddetector" | |
| }, | |
| { | |
| "name": "1password_threat_finding_alertcenter_resource_graph", | |
| "path": "datasets/onepassworddetector/blueprints/1password_threat_finding_alertcenter_resource_graph.yaml", | |
| "database": "onepassworddetector" | |
| }, | |
| { | |
| "name": "1password_threat_finding_event_summary", | |
| "path": "datasets/onepassworddetector/blueprints/1password_threat_finding_event_summary.yaml", | |
| "database": "onepassworddetector" | |
| }, | |
| { | |
| "name": "access_logs_events", | |
| "path": "datasets/accesslogsdetector/events/access_logs_events.yaml", | |
| "database": "accesslogsdetector" | |
| }, | |
| { | |
| "name": "accesslogs_threat_finding_alertcenter_events", | |
| "path": "datasets/accesslogsdetector/blueprints/accesslogs_threat_finding_alertcenter_events.yaml", | |
| "database": "accesslogsdetector" | |
| }, | |
| { | |
| "name": "accesslogs_threat_finding_alertcenter_resource_graph", | |
| "path": "datasets/accesslogsdetector/blueprints/accesslogs_threat_finding_alertcenter_resource_graph.yaml", | |
| "database": "accesslogsdetector" | |
| }, | |
| { | |
| "name": "accesslogs_threat_finding_event_summary", | |
| "path": "datasets/accesslogsdetector/blueprints/accesslogs_threat_finding_event_summary.yaml", | |
| "database": "accesslogsdetector" | |
| }, | |
| { | |
| "name": "accesslogsdetector_metadata", | |
| "path": "datasets/accesslogsdetector/metadata/metadata.yaml", | |
| "database": "accesslogsdetector" | |
| }, | |
| { | |
| "name": "account_summary", | |
| "path": "datasets/cloudtrail/account/account_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "aggregated_finding_summary_finding_summary", | |
| "path": "datasets/cloudtrail/aggregated/aggregated_finding_summary_finding_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "aggregated_threat_findings_aggregated_threat_findings", | |
| "path": "datasets/cloudtrail/aggregated/aggregated_threat_findings_aggregated_threat_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "analyst_hub_assignee", | |
| "path": "datasets/system/analyst_hub/analyst_hub_assignee.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "analyst_hub_exaforce_tag", | |
| "path": "datasets/system/analyst_hub/analyst_hub_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "analyst_hub_findings_and_cases", | |
| "path": "datasets/system/analyst_hub/analyst_hub_findings_and_cases.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "analyst_hub_project_cloudtrail_accounts", | |
| "path": "datasets/system/analyst_hub/analyst_hub_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "analyst_hub_project_connector", | |
| "path": "datasets/system/analyst_hub/analyst_hub_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "analyst_hub_risk_findings", | |
| "path": "datasets/system/analyst_hub/analyst_hub_risk_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "analyst_hub_risk_findings_aggregated", | |
| "path": "datasets/system/analyst_hub/analyst_hub_risk_findings_aggregated.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "atlassian_identity_info", | |
| "path": "datasets/atlassiandetector/users/atlassian_identity_info.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "atlassian_identity_risk_findings", | |
| "path": "datasets/atlassiandetector/users/atlassian_identity_risk_findings.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "atlassian_repo_info", | |
| "path": "datasets/atlassiandetector/saas_repos/atlassian_repo_info.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "atlassian_threat_finding_event_summary", | |
| "path": "datasets/atlassiandetector/blueprints/atlassian_threat_finding_event_summary.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "aws_accounts_aws_identity_table", | |
| "path": "datasets/system/identity_insights/aws_accounts_aws_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "aws_accounts_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/aws_accounts_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "azure_activity_logs_onboarded", | |
| "path": "datasets/system/data_sources/azure_activity_logs_onboarded.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "azure_compute_instances_exaforce_tag", | |
| "path": "datasets/azuredetector/iaas_compute/azure_compute_instances_exaforce_tag.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_events_event_json", | |
| "path": "datasets/azuredetector/events/events_event_json.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_identity_json", | |
| "path": "datasets/azuredetector/identity/identity_json.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_resource_json", | |
| "path": "datasets/azuredetector/iaas_resources/azure_resource_json.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_resource_related_cases", | |
| "path": "datasets/azuredetector/iaas_resources/azure_resource_related_cases.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_resources_exaforce_tag", | |
| "path": "datasets/azuredetector/iaas_resources/azure_resources_exaforce_tag.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_session_activity_logs", | |
| "path": "datasets/azuredetector/iaas_sessions/azure_session_activity_logs.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_session_activity_logs_resources", | |
| "path": "datasets/azuredetector/iaas_sessions/azure_session_activity_logs_resources.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_session_activity_logs_sessions", | |
| "path": "datasets/azuredetector/iaas_sessions/azure_session_activity_logs_sessions.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_session_json", | |
| "path": "datasets/azuredetector/iaas_sessions/session_json.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_session_sessions_resources", | |
| "path": "datasets/azuredetector/iaas_sessions/azure_session_sessions_resources.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_sessions_exaforce_tag", | |
| "path": "datasets/azuredetector/iaas_sessions/azure_sessions_exaforce_tag.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_subscription_summary", | |
| "path": "datasets/azuredetector/subscription/azure_subscription_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_threat_finding_event_summary", | |
| "path": "datasets/azuredetector/blueprints/azure_threat_finding_event_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azure_threat_findings", | |
| "path": "datasets/azuredetector/threat_findings/threat_findings.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "azuredetector_metadata", | |
| "path": "datasets/azuredetector/metadata/metadata.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "bitbucket_repos_risk_findings", | |
| "path": "datasets/atlassiandetector/saas_repos/bitbucket_repos_risk_findings.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "bitbucket_repos_saas_resources", | |
| "path": "datasets/atlassiandetector/saas_repos/bitbucket_repos_saas_resources.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "business_context_business_context", | |
| "path": "datasets/system/business_context/business_context_business_context.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "campaign_info_cases_campaign_info_cases", | |
| "path": "datasets/cloudtrail/campaigns/campaign_info_cases_campaign_info_cases.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "campaigns_approver", | |
| "path": "datasets/cloudtrail/campaigns/campaigns_approver.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "campaigns_campaign_cases", | |
| "path": "datasets/cloudtrail/campaigns/campaigns_campaign_cases.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "case_activities", | |
| "path": "datasets/cloudtrail/case/case_activities.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "case_activity_bar", | |
| "path": "datasets/cloudtrail/case/case_activity_bar.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "case_attachments", | |
| "path": "datasets/cloudtrail/case/case_attachments.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "case_info", | |
| "path": "datasets/cloudtrail/case/case_info.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cases_assignee", | |
| "path": "datasets/cloudtrail/case/cases_assignee.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cases_builtin_finding_th_assignee_cases_builtin_finding_th_assignee", | |
| "path": "datasets/cloudtrail/case/cases_builtin_finding_th_assignee_cases_builtin_finding_th_assignee.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cases_tags", | |
| "path": "datasets/cloudtrail/case/cases_tags.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cloudtrail_events_by_eventid", | |
| "path": "datasets/cloudtrail/event/cloudtrail_events_by_eventid.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cloudtrail_guardduty_finding_json_data_instance_network_json_data_instance_network", | |
| "path": "datasets/cloudtrail/guardduty/cloudtrail_guardduty_finding_json_data_instance_network_json_data_instance_network.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cloudtrail_guardduty_finding_json_data_instance_role_policies_json_data_instance_role_policies", | |
| "path": "datasets/cloudtrail/guardduty/cloudtrail_guardduty_finding_json_data_instance_role_policies_json_data_instance_role_policies.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cloudtrail_guardduty_finding_json_data_malware_scan_json_data_malware_scan", | |
| "path": "datasets/cloudtrail/guardduty/cloudtrail_guardduty_finding_json_data_malware_scan_json_data_malware_scan.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cooccur_table_session_aws_region_account", | |
| "path": "datasets/cloudtrail/cooccurence/cooccur_table_session_aws_region_account.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cooccur_table_session_event_score", | |
| "path": "datasets/cloudtrail/cooccurence/cooccur_table_session_event_score.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cooccur_table_session_location", | |
| "path": "datasets/cloudtrail/cooccurence/cooccur_table_session_location.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "cooccur_table_session_resource", | |
| "path": "datasets/cloudtrail/cooccurence/cooccur_table_session_resource.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "crowdstrike_azure_threat_finding_from_findingid", | |
| "path": "datasets/azuredetector/threat_findings/crowdstrike_azure_threat_finding_from_findingid.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "crowdstrike_azure_version_hash", | |
| "path": "datasets/azuredetector/threat_findings/crowdstrike_azure_version_hash.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "crowdstrike_crowdstrike_threat_finding_from_findingid", | |
| "path": "datasets/crowdstrikedetector/threat_findings/crowdstrike_crowdstrike_threat_finding_from_findingid.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_epp_alerts_crowdstrike_epp_alerts", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_epp_alerts_crowdstrike_epp_alerts.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_external_domains_crowdstrike_external_domains", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_external_domains_crowdstrike_external_domains.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_group_from_findingid", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_group_from_findingid.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_hosts_crowdstrike_hosts", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_hosts_crowdstrike_hosts.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_okta_threat_finding_from_findingid", | |
| "path": "datasets/oktadetector/threat_findings/crowdstrike_okta_threat_finding_from_findingid.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "crowdstrike_related_alert_ids", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_related_alert_ids.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_threat_finding_from_findingid", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_threat_finding_from_findingid.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_threat_finding_identity_sensitive_actions", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_threat_finding_identity_sensitive_actions.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_threat_finding_principal_from_same_location_same_time_all_apps", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_threat_finding_principal_from_same_location_same_time_all_apps.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "crowdstrike_threat_finding_threat_locations", | |
| "path": "datasets/crowdstrikedetector/blueprints/crowdstrike_threat_finding_threat_locations.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "data_source_connectors", | |
| "path": "datasets/saas_tenant_db/data_source_connectors.yaml", | |
| "database": "saas_tenant_db" | |
| }, | |
| { | |
| "name": "data_sources", | |
| "path": "datasets/saas_tenant_db/data_sources.yaml", | |
| "database": "saas_tenant_db" | |
| }, | |
| { | |
| "name": "device_details_summary_device_details_summary", | |
| "path": "datasets/system/device_investigate/device_details_summary_device_details_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "device_events_summary_device_events_summary", | |
| "path": "datasets/system/device_investigate/device_events_summary_device_events_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "drive_resources_google_drive_exaforce_tag", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_google_drive_exaforce_tag.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_google_resources_exaforce_tag", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_google_resources_exaforce_tag.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_all_drives", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_all_drives.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_dlp_classification_summary", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_dlp_classification_summary.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_dlp_rules", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_dlp_rules.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_drive_access_external_identities", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_drive_access_external_identities.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_drive_access_identities", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_drive_access_identities.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_drive_access_universal_identities", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_drive_access_universal_identities.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_drive_folders", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_drive_folders.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_events", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_events.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_saas_identity_groups", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_saas_identity_groups.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_saas_principal_role_targets", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_saas_principal_role_targets.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_saas_resource_dlp_scan_labels", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_saas_resource_dlp_scan_labels.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_saas_resource_labels", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_saas_resource_labels.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_saas_resource_tags", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_saas_resource_tags.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_saas_resources", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_saas_resources.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_saas_roles", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_saas_roles.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_gws_sankey_node_with_ancestors", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_gws_sankey_node_with_ancestors.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_access_external_identities", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_access_external_identities.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_access_identities", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_access_identities.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_access_universal_identities", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_access_universal_identities.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_all_drives", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_all_drives.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_dlp_classification_summary", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_dlp_classification_summary.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_dlp_rules", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_dlp_rules.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_drive_exaforce_tag", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_drive_exaforce_tag.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_drive_folders", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_drive_folders.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_events", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_events.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_resources_exaforce_tag", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_resources_exaforce_tag.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_saas_identity_groups", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_saas_identity_groups.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_saas_principal_role_targets", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_saas_principal_role_targets.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_saas_resource_dlp_scan_labels", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_saas_resource_dlp_scan_labels.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_saas_resource_labels", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_saas_resource_labels.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_saas_resource_tags", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_saas_resource_tags.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_saas_resources", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_saas_resources.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_saas_roles", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_saas_roles.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_microsoft365_sankey_node_with_ancestors", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_microsoft365_sankey_node_with_ancestors.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_resources_exaforce_tag", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_resources_exaforce_tag.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_saas_principal_role_targets", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_saas_principal_role_targets.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_saas_resource_dlp_scan_labels", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_saas_resource_dlp_scan_labels.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_saas_resource_labels", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_saas_resource_labels.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "drive_resources_saas_resource_tags", | |
| "path": "datasets/gwsdetector/drive_resources/drive_resources_saas_resource_tags.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "ec2_instance_resource", | |
| "path": "datasets/cloudtrail/ec2/ec2_instance_resource.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "ec2_instances_exaforce_tag", | |
| "path": "datasets/cloudtrail/ec2/ec2_instances_exaforce_tag.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "ec2_instances_project_cloudtrail_accounts", | |
| "path": "datasets/cloudtrail/ec2/ec2_instances_project_cloudtrail_accounts.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "eks_identities_info", | |
| "path": "datasets/k8s/eks_audit/eks_identities_info.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "elasticsearch_cloudtrail_threat_finding_from_eventid_findingid", | |
| "path": "datasets/cloudtrail/siem/elasticsearch_cloudtrail_threat_finding_from_eventid_findingid.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "elasticsearch_finding_onboarding_info", | |
| "path": "datasets/cloudtrail/elasticsearch/elasticsearch_finding_onboarding_info.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "elasticsearch_gcp_threat_finding_from_findingid", | |
| "path": "datasets/gcloud/findings/elasticsearch_gcp_threat_finding_from_findingid.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "entraid_apps_admin_events_summary", | |
| "path": "datasets/azuredetector/saas_apps/entraid_apps_admin_events_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_apps_entraid_apps_cases_findings", | |
| "path": "datasets/azuredetector/saas_apps/entraid_apps_entraid_apps_cases_findings.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_apps_events_summary", | |
| "path": "datasets/azuredetector/saas_apps/entraid_apps_events_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_apps_policy_summary", | |
| "path": "datasets/azuredetector/saas_apps/entraid_apps_policy_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_apps_risk_findings", | |
| "path": "datasets/azuredetector/saas_apps/entraid_apps_risk_findings.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_apps_sign_in_events_summary", | |
| "path": "datasets/azuredetector/saas_apps/entraid_apps_sign_in_events_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_events_by_this_identity_idp_member_used_permission", | |
| "path": "datasets/azuredetector/users/entraid_events_by_this_identity_idp_member_used_permission.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_events_by_this_identity_risk_findings", | |
| "path": "datasets/azuredetector/users/entraid_events_by_this_identity_risk_findings.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_events_on_this_identity_idp_identity_app", | |
| "path": "datasets/azuredetector/users/entraid_events_on_this_identity_idp_identity_app.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_events_on_this_identity_idp_member_group", | |
| "path": "datasets/azuredetector/users/entraid_events_on_this_identity_idp_member_group.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_events_on_this_identity_idp_user_permissions_used", | |
| "path": "datasets/azuredetector/users/entraid_events_on_this_identity_idp_user_permissions_used.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_group_info", | |
| "path": "datasets/azuredetector/groups/entraid_group_info.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_groups_events_summary", | |
| "path": "datasets/azuredetector/groups/entraid_groups_events_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_groups_idp_group_app", | |
| "path": "datasets/azuredetector/groups/entraid_groups_idp_group_app.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_groups_idp_group_resource_graph", | |
| "path": "datasets/azuredetector/groups/entraid_groups_idp_group_resource_graph.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_user_info", | |
| "path": "datasets/azuredetector/users/entraid_user_info.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_user_info_entraid_resource_name_tooltip", | |
| "path": "datasets/azuredetector/users/entraid_user_info_entraid_resource_name_tooltip.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_user_info_idp_event_summary", | |
| "path": "datasets/azuredetector/users/entraid_user_info_idp_event_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_user_info_idp_identities", | |
| "path": "datasets/azuredetector/users/entraid_user_info_idp_identities.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_user_info_idp_policy_summary", | |
| "path": "datasets/azuredetector/users/entraid_user_info_idp_policy_summary.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "entraid_user_info_json", | |
| "path": "datasets/azuredetector/users/entraid_user_info_json.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "error_events_project_cloudtrail_accounts", | |
| "path": "datasets/cloudtrail/error/error_events_project_cloudtrail_accounts.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "event_json", | |
| "path": "datasets/cloudtrail/event/event_json.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "event_llm", | |
| "path": "datasets/cloudtrail/event/event_llm.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "event_request_response_data_event_request_response_data", | |
| "path": "datasets/cloudtrail/event/event_request_response_data_event_request_response_data.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "event_tooltip_sessions_events_resources", | |
| "path": "datasets/cloudtrail/event/event_tooltip_sessions_events_resources.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "events_aggregated_buckets", | |
| "path": "datasets/cloudtrail/s3_data/events_aggregated_buckets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "events_exaforce_tag", | |
| "path": "datasets/cloudtrail/s3_data/events_exaforce_tag.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "events_json", | |
| "path": "datasets/cloudtrail/event/events_json.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "events_project_cloudtrail_accounts", | |
| "path": "datasets/cloudtrail/s3_data/events_project_cloudtrail_accounts.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "events_summary", | |
| "path": "datasets/oktadetector/applications/events_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "exabot_detection_beta_exabot_detections_beta", | |
| "path": "datasets/system/exabot_detections_beta/exabot_detection_beta_exabot_detections_beta.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "exabot_detection_exabot_detections", | |
| "path": "datasets/system/exabot_detections/exabot_detection_exabot_detections.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "exabot_detections_assignee", | |
| "path": "datasets/system/exabot_detections/exabot_detections_assignee.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "exabot_detections_beta_assignee", | |
| "path": "datasets/system/exabot_detections_beta/exabot_detections_beta_assignee.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "exabot_detections_beta_project_cloudtrail_accounts", | |
| "path": "datasets/system/exabot_detections_beta/exabot_detections_beta_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "exabot_detections_beta_project_connector", | |
| "path": "datasets/system/exabot_detections_beta/exabot_detections_beta_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "exabot_detections_project_cloudtrail_accounts", | |
| "path": "datasets/system/exabot_detections/exabot_detections_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "exabot_detections_project_connector", | |
| "path": "datasets/system/exabot_detections/exabot_detections_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "executive_reports_project_cloudtrail_accounts_findings", | |
| "path": "datasets/system/identity_insights/executive_reports_project_cloudtrail_accounts_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "executive_reports_project_connector", | |
| "path": "datasets/system/identity_insights/executive_reports_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "finding_group_process_trees_finding_group_process_trees", | |
| "path": "datasets/crowdstrikedetector/blueprints/finding_group_process_trees_finding_group_process_trees.yaml", | |
| "database": "crowdstrikedetector" | |
| }, | |
| { | |
| "name": "finding_risk_related_cases", | |
| "path": "datasets/system/finding/finding_risk_related_cases.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "finding_threat_related_cases", | |
| "path": "datasets/system/finding/finding_threat_related_cases.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "fireblocks_event_summary", | |
| "path": "datasets/fireblocksdetector/users/fireblocks_event_summary.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "fireblocks_events_by_this_identity_risk_findings", | |
| "path": "datasets/fireblocksdetector/users/fireblocks_events_by_this_identity_risk_findings.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "fireblocks_threat_finding_alertcenter_events", | |
| "path": "datasets/fireblocksdetector/blueprints/fireblocks_threat_finding_alertcenter_events.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "fireblocks_threat_finding_alertcenter_resource_graph", | |
| "path": "datasets/fireblocksdetector/blueprints/fireblocks_threat_finding_alertcenter_resource_graph.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "fireblocks_threat_finding_event_summary", | |
| "path": "datasets/fireblocksdetector/blueprints/fireblocks_threat_finding_event_summary.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "fireblocks_threat_finding_other_principal_successfull_login_events_user_agents", | |
| "path": "datasets/fireblocksdetector/blueprints/fireblocks_threat_finding_other_principal_successfull_login_events_user_agents.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "fireblocks_users", | |
| "path": "datasets/fireblocksdetector/users/fireblocks_users.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "fireblocksdetector_metadata", | |
| "path": "datasets/fireblocksdetector/metadata/metadata.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "gcp_compute_instances_exaforce_tag", | |
| "path": "datasets/gcloud/compute/gcp_compute_instances_exaforce_tag.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_event_audit_logs_resources", | |
| "path": "datasets/gcloud/events/gcp_event_audit_logs_resources.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_events_event_json", | |
| "path": "datasets/gcloud/events/events_event_json.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_finding_json", | |
| "path": "datasets/gcloud/scc/finding_json.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_folder_summary", | |
| "path": "datasets/gcloud/folder/gcp_folder_summary.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_audit_logs_resources", | |
| "path": "datasets/gcloud/identity/gcp_identity_audit_logs_resources.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_external_by_name", | |
| "path": "datasets/gcloud/identity/gcp_identity_external_by_name.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_json", | |
| "path": "datasets/gcloud/identity/identity_json.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_main_threat_findings", | |
| "path": "datasets/gcloud/identity/gcp_identity_main_threat_findings.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_runtime_main_identity_table", | |
| "path": "datasets/gcloud/identity/gcp_identity_runtime_main_identity_table.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_runtime_sessions_auth_chain_renamed", | |
| "path": "datasets/gcloud/identity/gcp_identity_runtime_sessions_auth_chain_renamed.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_sessions_auth_chain", | |
| "path": "datasets/gcloud/identity/gcp_identity_sessions_auth_chain.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_identity_top_location", | |
| "path": "datasets/gcloud/identity/gcp_identity_top_location.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_oauth2_event_json", | |
| "path": "datasets/gcloud/oauth2/oauth2_event_json.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_organization_summary", | |
| "path": "datasets/gcloud/organization/gcp_organization_summary.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_principal_set_summary", | |
| "path": "datasets/gcloud/principal_set/gcp_principal_set_summary.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_principal_summary", | |
| "path": "datasets/gcloud/principal/gcp_principal_summary.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_project_summary", | |
| "path": "datasets/gcloud/project/gcp_project_summary.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_resource_json", | |
| "path": "datasets/gcloud/resources/resource_json.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_resource_related_cases", | |
| "path": "datasets/gcloud/resources/gcp_resource_related_cases.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_resources_exaforce_tag", | |
| "path": "datasets/gcloud/resources/gcp_resources_exaforce_tag.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_role_summary", | |
| "path": "datasets/gcloud/role/gcp_role_summary.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_scan_status", | |
| "path": "datasets/gcpconfig/gcp_scan_status.yaml", | |
| "database": "gcpconfig" | |
| }, | |
| { | |
| "name": "gcp_scc_finding_model_unnested_log_entries", | |
| "path": "datasets/gcloud/scc/gcp_scc_finding_model_unnested_log_entries.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_selected_permissions_entity", | |
| "path": "datasets/gcloud/identity/gcp_selected_permissions_entity.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_service_summary", | |
| "path": "datasets/gcloud/service/gcp_service_summary.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_session_json", | |
| "path": "datasets/gcloud/sessions/session_json.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_session_sessions_resources", | |
| "path": "datasets/gcloud/sessions/gcp_session_sessions_resources.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_session_threat_findings", | |
| "path": "datasets/gcloud/sessions/gcp_session_threat_findings.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_sessions_exaforce_tag", | |
| "path": "datasets/gcloud/sessions/gcp_sessions_exaforce_tag.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "gcp_threat_finding_json", | |
| "path": "datasets/gcloud/findings/threat_finding_json.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "generic_threat_finding_event_summary", | |
| "path": "datasets/genericdetector/blueprints/generic_threat_finding_event_summary.yaml", | |
| "database": "genericdetector" | |
| }, | |
| { | |
| "name": "generic_threat_finding_threat_findings_cases", | |
| "path": "datasets/system/blueprints/generic_threat_finding_threat_findings_cases.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "generic_threat_findings", | |
| "path": "datasets/genericdetector/blueprints/threat_findings.yaml", | |
| "database": "genericdetector" | |
| }, | |
| { | |
| "name": "genericdetector_metadata", | |
| "path": "datasets/genericdetector/metadata/metadata.yaml", | |
| "database": "genericdetector" | |
| }, | |
| { | |
| "name": "geoip_scans_geoip_scans", | |
| "path": "datasets/system/ipaddress/geoip_scans_geoip_scans.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "github_actions_secrets", | |
| "path": "datasets/githubdetector/users/github_actions_secrets.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_actor_asn_details", | |
| "path": "datasets/githubdetector/users/github_actor_asn_details.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_actor_user_details", | |
| "path": "datasets/githubdetector/users/github_actor_user_details.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_code_scan_alert_tooltip", | |
| "path": "datasets/githubdetector/repos/details/tooltip/github_code_scan_alert_tooltip.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_dependabot_alert_tooltip", | |
| "path": "datasets/githubdetector/repos/details/tooltip/github_dependabot_alert_tooltip.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_event_summary", | |
| "path": "datasets/githubdetector/users/event_summary.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_events", | |
| "path": "datasets/githubdetector/repos/github_events.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_events_details_by_user", | |
| "path": "datasets/githubdetector/users/github_events_details_by_user.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_events_details_on_user", | |
| "path": "datasets/githubdetector/users/github_events_details_on_user.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_exf_github_repos", | |
| "path": "datasets/githubdetector/repos/github_exf_github_repos.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_exf_github_repository_prs", | |
| "path": "datasets/githubdetector/repos/github_exf_github_repository_prs.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_github_repo_actions_used_table", | |
| "path": "datasets/githubdetector/repos/github_github_repo_actions_used_table.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_github_repo_permissions_matrix", | |
| "path": "datasets/githubdetector/repos/github_github_repo_permissions_matrix.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_github_repos_cases_findings", | |
| "path": "datasets/githubdetector/repos/github_github_repos_cases_findings.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_github_user_roles_by_repo_table", | |
| "path": "datasets/githubdetector/repos/github_github_user_roles_by_repo_table.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_exf_github_actions_secrets", | |
| "path": "datasets/githubdetector/users/details/github_identity_exf_github_actions_secrets.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_exf_github_identity_tokens", | |
| "path": "datasets/githubdetector/users/details/github_identity_exf_github_identity_tokens.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_native", | |
| "path": "datasets/githubdetector/users/github_identity_native.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_org_info", | |
| "path": "datasets/githubdetector/users/github_identity_org_info.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_orgrole_info", | |
| "path": "datasets/githubdetector/users/github_identity_orgrole_info.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_reporole_info", | |
| "path": "datasets/githubdetector/users/github_identity_reporole_info.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_repository_keys", | |
| "path": "datasets/githubdetector/users/details/github_identity_repository_keys.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_risk_findings", | |
| "path": "datasets/githubdetector/users/details/github_identity_risk_findings.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_team_info", | |
| "path": "datasets/githubdetector/users/github_identity_team_info.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_teamrole_info", | |
| "path": "datasets/githubdetector/users/github_identity_teamrole_info.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_teams", | |
| "path": "datasets/githubdetector/users/github_identity_teams.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_token", | |
| "path": "datasets/githubdetector/users/github_identity_token.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_identity_workloads", | |
| "path": "datasets/githubdetector/users/github_identity_workloads.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_ipaddress_summary", | |
| "path": "datasets/githubdetector/users/ip_address/github_ipaddress_summary.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_packages_containers_workloads", | |
| "path": "datasets/githubdetector/repos/github_packages_containers_workloads.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_pr_timeline_details", | |
| "path": "datasets/githubdetector/users/github_pr_timeline_details.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_repos_admins", | |
| "path": "datasets/githubdetector/repos/github_repos_admins.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_repos_overview", | |
| "path": "datasets/githubdetector/repos/github_repos_overview.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_repository_keys", | |
| "path": "datasets/githubdetector/users/github_repository_keys.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_resource_info", | |
| "path": "datasets/githubdetector/users/github_resource_info.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_threat_finding_event_summary", | |
| "path": "datasets/githubdetector/blueprints/github_threat_finding_event_summary.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_threat_findings", | |
| "path": "datasets/githubdetector/threat_findings/threat_findings.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_user_sub_identities", | |
| "path": "datasets/githubdetector/users/github_user_sub_identities.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_workflow_action_tooltip", | |
| "path": "datasets/githubdetector/repos/details/tooltip/github_workflow_action_tooltip.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_workflow_tooltip", | |
| "path": "datasets/githubdetector/repos/details/tooltip/github_workflow_tooltip.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "github_workload_tooltip", | |
| "path": "datasets/githubdetector/repos/details/tooltip/github_workload_tooltip.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "githubdetector_metadata", | |
| "path": "datasets/githubdetector/metadata/metadata.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "groups_overview_atlassian_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_atlassian_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_atlassian_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_atlassian_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_aws_events", | |
| "path": "datasets/system/groups_overview/groups_overview_aws_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_aws_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_aws_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_azure_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_azure_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_azure_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_azure_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_exaforce_tag", | |
| "path": "datasets/system/groups_overview/groups_overview_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_fireblocks_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_fireblocks_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_fireblocks_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_fireblocks_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_gcloud_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_gcloud_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_gcloud_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_gcloud_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_github_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_github_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_github_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_github_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_gws_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_gws_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_gws_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_gws_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_idp_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_idp_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_idp_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_idp_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_onepassword_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_onepassword_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_onepassword_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_onepassword_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_pingidentity_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_pingidentity_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_pingidentity_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_pingidentity_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_risk_findings", | |
| "path": "datasets/system/groups_overview/groups_overview_risk_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_slack_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_slack_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_slack_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_slack_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_zscaler_group_details", | |
| "path": "datasets/system/groups_overview/groups_overview_zscaler_group_details.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "groups_overview_zscaler_identity_groups", | |
| "path": "datasets/system/groups_overview/groups_overview_zscaler_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "guardduty_detail", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_detail.yaml", | |
| "database": "zenith" | |
| }, | |
| { | |
| "name": "guardduty_finding_eks_audit_logs", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_eks_audit_logs.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_guardduty_finding_sessions", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_guardduty_finding_sessions.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_json_data_config_resource_aws_guardduty_detector_findings", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_json_data_config_resource_aws_guardduty_detector_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_json_data_instance_network_json_data_instance_network", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_json_data_instance_network_json_data_instance_network.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_json_data_instance_role_policies_json_data_instance_role_policies", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_json_data_instance_role_policies_json_data_instance_role_policies.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_json_data_json_data", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_json_data_json_data.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_json_data_malware_scan_json_data_malware_scan", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_json_data_malware_scan_json_data_malware_scan.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_json_data_parent_config_manifest_json_data_parent_config_manifest", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_json_data_parent_config_manifest_json_data_parent_config_manifest.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_k8s_sessions", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_k8s_sessions.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_k8s_workload_events", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_k8s_workload_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_k8s_workload_pod_events", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_k8s_workload_pod_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_onboarding_info", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_finding_onboarding_info.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "guardduty_finding_public_k8s_workloads", | |
| "path": "datasets/k8s/guardduty/guardduty_finding_public_k8s_workloads.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "guardduty_finding_s3_aggregated_events", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_finding_s3_aggregated_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "guardduty_finding_summary", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_finding_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "guardduty_related_session_findings", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_related_session_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "guardduty_role_risk_findings_risk_findings_aggregated", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_role_risk_findings_risk_findings_aggregated.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "guardduty_root_identity_risk_findings_risk_findings_aggregated", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_root_identity_risk_findings_risk_findings_aggregated.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "guardduty_table_llm", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_table_llm.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "guardduty_threat_finding_from_findingid", | |
| "path": "datasets/cloudtrail/guardduty/guardduty_threat_finding_from_findingid.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "gws_access_identities", | |
| "path": "datasets/gwsdetector/drive_resources/gws_access_identities.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_all_drives", | |
| "path": "datasets/gwsdetector/drive_resources/gws_all_drives.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_application_info", | |
| "path": "datasets/gwsdetector/saas_apps/gws_application_info.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_apps_events_summary", | |
| "path": "datasets/gwsdetector/saas_apps/gws_apps_events_summary.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_apps_risk_findings", | |
| "path": "datasets/gwsdetector/saas_apps/gws_apps_risk_findings.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_drive_folders", | |
| "path": "datasets/gwsdetector/drive_resources/gws_drive_folders.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_event_summary", | |
| "path": "datasets/gwsdetector/users/gws_event_summary.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_events_by_this_identity_risk_findings", | |
| "path": "datasets/gwsdetector/users/gws_events_by_this_identity_risk_findings.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_events_on_groups_summary", | |
| "path": "datasets/gwsdetector/groups/gws_events_on_groups_summary.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_finding_onboarding_info", | |
| "path": "datasets/gwsdetector/blueprints/gws_finding_onboarding_info.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_google_resources_exaforce_tag", | |
| "path": "datasets/gwsdetector/drive_resources/gws_google_resources_exaforce_tag.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_group_info", | |
| "path": "datasets/gwsdetector/groups/gws_group_info.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_groups_idp_group_app", | |
| "path": "datasets/gwsdetector/groups/gws_groups_idp_group_app.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_identity_tooltip", | |
| "path": "datasets/gwsdetector/drive_resources/gws_identity_tooltip.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_permission_tooltip", | |
| "path": "datasets/gwsdetector/groups/gws_permission_tooltip.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_resource_dlp_rules_detail", | |
| "path": "datasets/gwsdetector/drive_resources/gws_resource_dlp_rules_detail.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_resource_event_summary", | |
| "path": "datasets/gwsdetector/drive_resources/gws_resource_event_summary.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_resource_group_tooltip", | |
| "path": "datasets/gwsdetector/drive_resources/gws_resource_group_tooltip.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_resource_name_tooltip", | |
| "path": "datasets/gwsdetector/groups/gws_resource_name_tooltip.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_resource_tooltip", | |
| "path": "datasets/gwsdetector/drive_resources/gws_resource_tooltip.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_saas_principal_role_targets", | |
| "path": "datasets/gwsdetector/drive_resources/gws_saas_principal_role_targets.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_saas_resources", | |
| "path": "datasets/gwsdetector/drive_resources/gws_saas_resources.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_sankey_dataset", | |
| "path": "datasets/gwsdetector/drive_resources/gws_sankey_dataset.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_threat_finding_event_summary", | |
| "path": "datasets/gwsdetector/blueprints/gws_threat_finding_event_summary.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_threat_findings", | |
| "path": "datasets/gwsdetector/threat_findings/threat_findings.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gws_threat_findings_gmailphishing_from_findingid", | |
| "path": "datasets/gwsdetector/blueprints/gws_threat_findings_gmailphishing_from_findingid.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "gwsdetector_metadata", | |
| "path": "datasets/gwsdetector/metadata/metadata.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "iam_users_access", | |
| "path": "datasets/cloudtrail/identity/iam_users_access_table.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_respositories", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_respositories.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_saas_principal_role_targets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_saas_principal_role_targets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_sub_identities_table", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_sub_identities_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_atlassian_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_atlassian_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_aws_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_aws_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_aws_identity_groups", | |
| "path": "datasets/system/identity_investigate/identities_investigate_aws_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_aws_identity_table", | |
| "path": "datasets/system/identity_investigate/identities_investigate_aws_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_aws_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_aws_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_aws_sessions", | |
| "path": "datasets/system/identity_investigate/identities_investigate_aws_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_aws_third_party_integrations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_aws_third_party_integrations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_aws_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_aws_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_identity_devices", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_identity_groups", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_identity_scopes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_identity_scopes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_azure_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_azure_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_cases_findings_intermediate", | |
| "path": "datasets/system/identity_investigate/identities_investigate_cases_findings_intermediate.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_crowdstrike_identity_table", | |
| "path": "datasets/system/identity_investigate/identities_investigate_crowdstrike_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_exaforce_tag", | |
| "path": "datasets/system/identity_investigate/identities_investigate_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_exaforce_tag_2", | |
| "path": "datasets/system/identity_investigate/identities_investigate_exaforce_tag_2.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_exf_github_repo_users", | |
| "path": "datasets/system/identity_investigate/identities_investigate_exf_github_repo_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_fireblocks_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_fireblocks_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_fireblocks_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_fireblocks_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_fireblocks_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_fireblocks_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_fireblocks_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_fireblocks_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_fireblocks_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_fireblocks_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_fireblocks_saas_resources", | |
| "path": "datasets/system/identity_investigate/identities_investigate_fireblocks_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_fireblocks_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_fireblocks_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gcloud_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gcloud_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gcloud_identity_table", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gcloud_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gcloud_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gcloud_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gcloud_saas_identities", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gcloud_saas_identities.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gcloud_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gcloud_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_events_by_user", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_events_by_user.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_repositories", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_repositories.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_sub_identities_table", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_sub_identities_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_github_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_github_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_identity_devices", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_identity_scopes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_identity_scopes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_saas_resources", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_sub_identities_table", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_sub_identities_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_gws_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_gws_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_idp_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_idp_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_kandji_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_kandji_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_kandji_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_kandji_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_kandji_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_kandji_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_mfa_devices", | |
| "path": "datasets/system/identity_investigate/identities_investigate_mfa_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_identity_devices", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_identity_groups", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_identity_scopes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_identity_scopes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_okta_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_okta_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_onepassword_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_onepassword_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_onepassword_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_onepassword_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_onepassword_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_onepassword_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_onepassword_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_onepassword_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_onepassword_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_onepassword_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_onepassword_saas_resources", | |
| "path": "datasets/system/identity_investigate/identities_investigate_onepassword_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_onepassword_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_onepassword_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_openai_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_openai_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_openai_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_openai_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_openai_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_openai_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_openai_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_openai_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_openai_secrets", | |
| "path": "datasets/system/identity_investigate/identities_investigate_openai_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_openai_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_openai_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_pingidentity_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_pingidentity_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_pingidentity_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_pingidentity_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_pingidentity_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_pingidentity_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_pingidentity_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_pingidentity_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_pingidentity_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_pingidentity_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_pingidentity_saas_resources", | |
| "path": "datasets/system/identity_investigate/identities_investigate_pingidentity_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_pingidentity_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_pingidentity_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_investigate/identities_investigate_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_risk_findings", | |
| "path": "datasets/system/identity_investigate/identities_investigate_risk_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_sentinelone_identity_table", | |
| "path": "datasets/system/identity_investigate/identities_investigate_sentinelone_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_session_auth_chain", | |
| "path": "datasets/system/identity_investigate/identities_investigate_session_auth_chain.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_session_source_ip_addresses", | |
| "path": "datasets/system/identity_investigate/identities_investigate_session_source_ip_addresses.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_slack_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_slack_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_slack_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_slack_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_slack_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_slack_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_slack_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_slack_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_slack_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_slack_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_slack_saas_resources", | |
| "path": "datasets/system/identity_investigate/identities_investigate_slack_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_slack_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_slack_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_universal_identity_devices", | |
| "path": "datasets/system/identity_investigate/identities_investigate_universal_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_zscaler_events", | |
| "path": "datasets/system/identity_investigate/identities_investigate_zscaler_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_zscaler_identity_graph_adjacencies", | |
| "path": "datasets/system/identity_investigate/identities_investigate_zscaler_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_zscaler_identity_graph_nodes", | |
| "path": "datasets/system/identity_investigate/identities_investigate_zscaler_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_zscaler_identity_group_members", | |
| "path": "datasets/system/identity_investigate/identities_investigate_zscaler_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_zscaler_locations", | |
| "path": "datasets/system/identity_investigate/identities_investigate_zscaler_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identities_investigate_zscaler_useragents", | |
| "path": "datasets/system/identity_investigate/identities_investigate_zscaler_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_detail", | |
| "path": "datasets/cloudtrail/resource/identity_detail.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_exaforce_tags", | |
| "path": "datasets/cloudtrail/identity/identity_exaforce_tags.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_findings", | |
| "path": "datasets/cloudtrail/identity/identity_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_generic_role_use_metrics", | |
| "path": "datasets/cloudtrail/identity/identity_generic_role_use_metrics.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_groups_info", | |
| "path": "datasets/cloudtrail/identity/identity_groups_info.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_idc_user_role_use_metrics", | |
| "path": "datasets/cloudtrail/identity/identity_idc_user_role_use_metrics.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_info_permission_stats", | |
| "path": "datasets/cloudtrail/identity/identity_info_permission_stats.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_info_permission_stats_filtered", | |
| "path": "datasets/cloudtrail/identity/identity_info_permission_stats_filtered.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_info_sessions", | |
| "path": "datasets/cloudtrail/identity/identity_info_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_insights_actor_user_groups_least_accessed_identity_insights_entraid_actor_user_groups_least_accessed", | |
| "path": "datasets/system/identity_insights/identity_insights_actor_user_groups_least_accessed_identity_insights_entraid_actor_user_groups_least_accessed.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_insights_actor_user_groups_least_accessed_identity_insights_okta_actor_user_groups_least_accessed", | |
| "path": "datasets/system/identity_insights/identity_insights_actor_user_groups_least_accessed_identity_insights_okta_actor_user_groups_least_accessed.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_insights_okta_datasource_count", | |
| "path": "datasets/system/identity_insights/identity_insights_okta_datasource_count.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_internal_traffic_sessions", | |
| "path": "datasets/cloudtrail/identity/identity_internal_traffic_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_ip_threats", | |
| "path": "datasets/cloudtrail/identity/identity_ip_threats.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_atlassian", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_atlassian.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_aws", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_aws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_azure", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_azure.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_fireblocks", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_fireblocks.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_gcp", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_gcp.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_github", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_github.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_gws", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_gws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_kandji", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_kandji.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_microsoft365", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_microsoft365.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_okta", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_okta.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_onepassword", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_onepassword.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_openai", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_openai.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_pingidentity", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_pingidentity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_slack", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_slack.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_identity_locations_zscaler", | |
| "path": "datasets/system/identity_insights/identity_locations_identity_locations_zscaler.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_locations_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/identity_locations_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_permissions_configured", | |
| "path": "datasets/cloudtrail/identity/identity_permissions_configured.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_permissions_filters", | |
| "path": "datasets/cloudtrail/identity/identity_permissions_filters.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_permissions_transitive_identities", | |
| "path": "datasets/cloudtrail/identity/identity_permissions_transitive_identities.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_related_cases", | |
| "path": "datasets/cloudtrail/identity/identity_related_cases.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_resources", | |
| "path": "datasets/cloudtrail/identity/identity_resources.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_resources_sessions", | |
| "path": "datasets/cloudtrail/identity/identity_resources_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_scores", | |
| "path": "datasets/cloudtrail/identity/identity_scores.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_sessions_ancestors", | |
| "path": "datasets/cloudtrail/identity/identity_sessions_ancestors.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_sessions_descendents", | |
| "path": "datasets/cloudtrail/identity/identity_sessions_descendents.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_sessions_graph", | |
| "path": "datasets/cloudtrail/identity/identity_sessions_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_top_location", | |
| "path": "datasets/cloudtrail/identity/identity_top_location.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "identity_trends_atlassian_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_atlassian_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_aws_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_aws_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_azure_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_azure_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_fireblocks_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_fireblocks_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_gcloud_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_gcloud_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_github_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_github_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_gws_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_gws_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_kandji_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_kandji_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_microsoft365_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_microsoft365_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_okta_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_okta_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_onepassword_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_onepassword_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_openai_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_openai_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_pingidentity_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_pingidentity_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/identity_trends_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_slack_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_slack_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "identity_trends_zscaler_identity_table", | |
| "path": "datasets/system/identity_insights/identity_trends_zscaler_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "idp_actor_user_groups_inactive_azure_events", | |
| "path": "datasets/system/identity_insights/idp_actor_user_groups_inactive_azure_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "idp_actor_user_groups_inactive_okta_events", | |
| "path": "datasets/system/identity_insights/idp_actor_user_groups_inactive_okta_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "idp_actor_user_groups_top_azure_events", | |
| "path": "datasets/system/identity_insights/idp_actor_user_groups_top_azure_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "idp_actor_user_groups_top_okta_events", | |
| "path": "datasets/system/identity_insights/idp_actor_user_groups_top_okta_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "idp_apps_azure_apps", | |
| "path": "datasets/cloudtrail/applications/idp_apps_azure_apps.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_azure_events", | |
| "path": "datasets/cloudtrail/applications/idp_apps_azure_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_azure_group_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_apps_azure_group_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_azure_member_role_resource", | |
| "path": "datasets/cloudtrail/applications/idp_apps_azure_member_role_resource.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_azure_policy_app", | |
| "path": "datasets/cloudtrail/applications/idp_apps_azure_policy_app.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_azure_roles_targets", | |
| "path": "datasets/cloudtrail/applications/idp_apps_azure_roles_targets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_azure_scopes", | |
| "path": "datasets/cloudtrail/applications/idp_apps_azure_scopes.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_events_summary_entraid_events_summary", | |
| "path": "datasets/cloudtrail/applications/idp_apps_events_summary_entraid_events_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_events_summary_gws_events_summary", | |
| "path": "datasets/cloudtrail/applications/idp_apps_events_summary_gws_events_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_events_summary_idp_apps_events_summary", | |
| "path": "datasets/cloudtrail/applications/idp_apps_events_summary_idp_apps_events_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_events_summary_okta_events_summary", | |
| "path": "datasets/cloudtrail/applications/idp_apps_events_summary_okta_events_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_exaforce_tag", | |
| "path": "datasets/cloudtrail/applications/idp_apps_exaforce_tag.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_gws_apps", | |
| "path": "datasets/cloudtrail/applications/idp_apps_gws_apps.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_gws_events", | |
| "path": "datasets/cloudtrail/applications/idp_apps_gws_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_gws_group_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_apps_gws_group_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_gws_member_role_resource", | |
| "path": "datasets/cloudtrail/applications/idp_apps_gws_member_role_resource.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_gws_roles_targets", | |
| "path": "datasets/cloudtrail/applications/idp_apps_gws_roles_targets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_gws_scopes", | |
| "path": "datasets/cloudtrail/applications/idp_apps_gws_scopes.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_idp_apps_cases_findings", | |
| "path": "datasets/cloudtrail/applications/idp_apps_idp_apps_cases_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_okta_apps", | |
| "path": "datasets/cloudtrail/applications/idp_apps_okta_apps.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_okta_events", | |
| "path": "datasets/cloudtrail/applications/idp_apps_okta_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_okta_group_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_apps_okta_group_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_okta_member_role_resource", | |
| "path": "datasets/cloudtrail/applications/idp_apps_okta_member_role_resource.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_okta_policy_app", | |
| "path": "datasets/cloudtrail/applications/idp_apps_okta_policy_app.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_okta_roles_targets", | |
| "path": "datasets/cloudtrail/applications/idp_apps_okta_roles_targets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_okta_scopes", | |
| "path": "datasets/cloudtrail/applications/idp_apps_okta_scopes.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_policy_summary", | |
| "path": "datasets/cloudtrail/applications/idp_apps_policy_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_risk_findings", | |
| "path": "datasets/cloudtrail/applications/idp_apps_risk_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_apps_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_apps_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_group_info", | |
| "path": "datasets/oktadetector/groups/idp_group_info.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "idp_identity_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_identity_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_ipaddress_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_ipaddress_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_permission_tooltip", | |
| "path": "datasets/azuredetector/users/idp_permission_tooltip.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "idp_policy_tooltip_entra_policy", | |
| "path": "datasets/cloudtrail/applications/idp_policy_tooltip_entra_policy.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_policy_tooltip_idp_policy_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_policy_tooltip_idp_policy_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_policy_tooltip_okta_policy", | |
| "path": "datasets/cloudtrail/applications/idp_policy_tooltip_okta_policy.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "idp_roles_tooltip", | |
| "path": "datasets/cloudtrail/applications/idp_roles_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_atlassian_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_atlassian_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_fireblocks_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_fireblocks_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_gcloud_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_gcloud_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_github_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_github_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_gws_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_gws_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_idc_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_idc_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_kandji_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_kandji_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_microsoft365_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_microsoft365_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_okta_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_okta_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_onepassword_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_onepassword_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_openai_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_openai_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_pingidentity_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_pingidentity_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_slack_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_slack_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_inactive_zscaler_users", | |
| "path": "datasets/system/identity_insights/inactive_users_inactive_zscaler_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "inactive_users_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/inactive_users_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "integrations_names", | |
| "path": "datasets/system/workflow-builder/integrations_names.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_access_logs_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_access_logs_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_access_logs_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_access_logs_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_atlassian_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_atlassian_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_atlassian_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_atlassian_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_atlassian_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_atlassian_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_atlassian_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_atlassian_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_aws_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_aws_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_aws_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_aws_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_aws_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_aws_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_aws_resources", | |
| "path": "datasets/system/ipaddress/ip_address_details_aws_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_aws_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_aws_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_azure_devices", | |
| "path": "datasets/system/ipaddress/ip_address_details_azure_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_azure_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_azure_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_azure_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_azure_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_azure_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_azure_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_azure_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_azure_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_crowdstrike_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_crowdstrike_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_fireblocks_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_fireblocks_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_fireblocks_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_fireblocks_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_fireblocks_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_fireblocks_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_fireblocks_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_fireblocks_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gcloud_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_gcloud_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gcloud_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_gcloud_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gcp_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_gcp_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gcp_resources", | |
| "path": "datasets/system/ipaddress/ip_address_details_gcp_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gcp_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_gcp_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_github_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_github_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_github_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_github_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_github_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_github_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_github_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_github_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gws_devices", | |
| "path": "datasets/system/ipaddress/ip_address_details_gws_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gws_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_gws_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gws_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_gws_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gws_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_gws_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_gws_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_gws_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_okta_devices", | |
| "path": "datasets/system/ipaddress/ip_address_details_okta_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_okta_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_okta_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_okta_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_okta_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_okta_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_okta_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_okta_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_okta_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_onepassword_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_onepassword_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_onepassword_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_onepassword_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_onepassword_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_onepassword_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_onepassword_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_onepassword_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_openai_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_openai_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_openai_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_openai_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_openai_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_openai_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_openai_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_openai_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_paloaltongfw_devices", | |
| "path": "datasets/system/ipaddress/ip_address_details_paloaltongfw_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_paloaltongfw_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_paloaltongfw_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_paloaltongfw_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_paloaltongfw_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_sentinelone_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_sentinelone_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_slack_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_slack_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_slack_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_slack_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_slack_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_slack_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_slack_threat_findings", | |
| "path": "datasets/system/ipaddress/ip_address_details_slack_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_zscaler_devices", | |
| "path": "datasets/system/ipaddress/ip_address_details_zscaler_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_zscaler_events", | |
| "path": "datasets/system/ipaddress/ip_address_details_zscaler_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_zscaler_identity", | |
| "path": "datasets/system/ipaddress/ip_address_details_zscaler_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_address_details_zscaler_ipaddress", | |
| "path": "datasets/system/ipaddress/ip_address_details_zscaler_ipaddress.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "ip_threat_locations_ip_threat_locations", | |
| "path": "datasets/system/ipaddress/ip_threat_locations_ip_threat_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "jira_saas_resources", | |
| "path": "datasets/atlassiandetector/users/jira_saas_resources.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_events", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_pod_containers", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_pod_containers.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_resource_sessions_addresses", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_resource_sessions_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_resource_sessions_addresses_root_identity", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_resource_sessions_addresses_root_identity.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_resource_useragents", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_resource_useragents.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_resources", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_risk_entities", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_risk_entities.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_eks_threat_findings", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_eks_threat_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_exaforce_tag", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_exaforce_tag.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_gke_events", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_gke_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_gke_pod_containers", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_gke_pod_containers.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_gke_resource_sessions_addresses", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_gke_resource_sessions_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_gke_resource_sessions_addresses_root_identity", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_gke_resource_sessions_addresses_root_identity.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_gke_resource_useragents", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_gke_resource_useragents.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_gke_resources", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_gke_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_gke_threat_findings", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_gke_threat_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_cluster_resources_k8s_resource_useragents", | |
| "path": "datasets/k8s/workloads/k8s_cluster_resources_k8s_resource_useragents.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_event_detail_k8s_event_detail", | |
| "path": "datasets/k8s/eks_audit/k8s_event_detail_k8s_event_detail.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_event_summary_k8s_events", | |
| "path": "datasets/k8s/eks_audit/k8s_event_summary_k8s_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_pod_exec_events_k8s_pod_exec_events", | |
| "path": "datasets/k8s/eks_audit/k8s_pod_exec_events_k8s_pod_exec_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_aws_guardduty_detector_findings", | |
| "path": "datasets/k8s/workloads/k8s_resource_aws_guardduty_detector_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_aws_sessions_events_resources", | |
| "path": "datasets/k8s/workloads/k8s_resource_aws_sessions_events_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_events", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_events_for_sessions_for_pods", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_events_for_sessions_for_pods.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_public_pods", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_public_pods.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_resource_edges", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_resource_edges.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_resource_sessions_addresses", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_resource_sessions_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_resource_sessions_addresses_root_identity", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_resource_sessions_addresses_root_identity.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_resource_useragents", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_resource_useragents.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_resources", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_risk_entities", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_risk_entities.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_service_accounts", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_service_accounts.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_session_addresses", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_session_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_sessions", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_sessions.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_sessions_for_pods", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_sessions_for_pods.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_threat_findings", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_threat_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_eks_workloads", | |
| "path": "datasets/k8s/workloads/k8s_resource_eks_workloads.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_events", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_public_pods", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_public_pods.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_resource_edges", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_resource_edges.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_resource_sessions_addresses", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_resource_sessions_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_resource_sessions_addresses_root_identity", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_resource_sessions_addresses_root_identity.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_resource_useragents", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_resource_useragents.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_resources", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_service_accounts", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_service_accounts.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_session_addresses", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_session_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_sessions", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_sessions.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_threat_findings", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_threat_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_gke_workloads", | |
| "path": "datasets/k8s/workloads/k8s_resource_gke_workloads.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_k8s_resource", | |
| "path": "datasets/k8s/workloads/k8s_resource_k8s_resource.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_summary_eks_resources", | |
| "path": "datasets/k8s/workloads/k8s_resource_summary_eks_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resource_summary_gke_resources", | |
| "path": "datasets/k8s/workloads/k8s_resource_summary_gke_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_aws_sessions_events_resources", | |
| "path": "datasets/k8s/workloads/k8s_resources_aws_sessions_events_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_events", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_pod_containers", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_pod_containers.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_resource_sessions_addresses", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_resource_sessions_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_resource_sessions_addresses_root_identity", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_resource_sessions_addresses_root_identity.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_resource_useragents", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_resource_useragents.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_resources", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_risk_entities", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_risk_entities.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_eks_threat_findings", | |
| "path": "datasets/k8s/workloads/k8s_resources_eks_threat_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_exaforce_tag", | |
| "path": "datasets/k8s/workloads/k8s_resources_exaforce_tag.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gcp_sessions_events_resources", | |
| "path": "datasets/k8s/workloads/k8s_resources_gcp_sessions_events_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gke_events", | |
| "path": "datasets/k8s/workloads/k8s_resources_gke_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gke_pod_containers", | |
| "path": "datasets/k8s/workloads/k8s_resources_gke_pod_containers.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gke_resource_sessions_addresses", | |
| "path": "datasets/k8s/workloads/k8s_resources_gke_resource_sessions_addresses.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gke_resource_sessions_addresses_root_identity", | |
| "path": "datasets/k8s/workloads/k8s_resources_gke_resource_sessions_addresses_root_identity.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gke_resource_useragents", | |
| "path": "datasets/k8s/workloads/k8s_resources_gke_resource_useragents.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gke_resources", | |
| "path": "datasets/k8s/workloads/k8s_resources_gke_resources.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_gke_threat_findings", | |
| "path": "datasets/k8s/workloads/k8s_resources_gke_threat_findings.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_resources_project_cloudtrail_accounts", | |
| "path": "datasets/k8s/workloads/k8s_resources_project_cloudtrail_accounts.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_sessions_exaforce_tag", | |
| "path": "datasets/k8s/eks_audit/k8s_sessions_exaforce_tag.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_sessions_k8s_events", | |
| "path": "datasets/k8s/eks_audit/k8s_sessions_k8s_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_sessions_k8s_workloads", | |
| "path": "datasets/k8s/eks_audit/k8s_sessions_k8s_workloads.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_sessions_project_cloudtrail_accounts", | |
| "path": "datasets/k8s/eks_audit/k8s_sessions_project_cloudtrail_accounts.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_threat_finding_k8s_threat_findings_events", | |
| "path": "datasets/k8s/blueprints/k8s_threat_finding_k8s_threat_findings_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_threat_finding_threat_findings_cases", | |
| "path": "datasets/k8s/blueprints/k8s_threat_finding_threat_findings_cases.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_workload_json", | |
| "path": "datasets/k8s/workloads/k8s_workload_json.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_workload_pods", | |
| "path": "datasets/k8s/workloads/k8s_workload_pods.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_workloads_eks_workload_events", | |
| "path": "datasets/k8s/workloads/k8s_workloads_eks_workload_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_workloads_eks_workloads", | |
| "path": "datasets/k8s/workloads/k8s_workloads_eks_workloads.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_workloads_gke_workload_events", | |
| "path": "datasets/k8s/workloads/k8s_workloads_gke_workload_events.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_workloads_gke_workloads", | |
| "path": "datasets/k8s/workloads/k8s_workloads_gke_workloads.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8s_workloads_k8s_workloads", | |
| "path": "datasets/k8s/workloads/k8s_workloads_k8s_workloads.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "k8sdetector_metadata", | |
| "path": "datasets/k8s/metadata/metadata.yaml", | |
| "database": "k8s" | |
| }, | |
| { | |
| "name": "kandji_event_summary", | |
| "path": "datasets/kandjidetector/users/kandji_event_summary.yaml", | |
| "database": "kandjidetector" | |
| }, | |
| { | |
| "name": "kandji_saas_identity_graph", | |
| "path": "datasets/kandjidetector/users/kandji_identity_graph.yaml", | |
| "database": "kandjidetector" | |
| }, | |
| { | |
| "name": "knowbe4_data_freshness", | |
| "path": "datasets/system/knowbe4/knowbe4_data_freshness.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "knowbe4_threat_finding_from_findingid", | |
| "path": "datasets/system/knowbe4/knowbe4_threat_finding_from_findingid.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "last_heartbeat", | |
| "path": "datasets/kubegraph/last_heartbeat.yaml", | |
| "database": "kubegraph" | |
| }, | |
| { | |
| "name": "log_ingestion_view", | |
| "path": "datasets/snowflake/log_ingestion_view.yaml", | |
| "database": "snowflake" | |
| }, | |
| { | |
| "name": "log_source_s3_detail", | |
| "path": "datasets/system/soc_insights/log_source_s3_detail.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "log_source_s3_finding_detail", | |
| "path": "datasets/system/soc_insights/log_source_s3_finding_detail.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "mdr_tenants_case_external_assignee", | |
| "path": "datasets/system/mdr/mdr_tenants_case_external_assignee.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "mdr_tenants_cases", | |
| "path": "datasets/system/mdr/mdr_tenants_cases.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "microsoft365_access_identities", | |
| "path": "datasets/microsoft365detector/drive_resources/microsoft365_access_identities.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoft365_all_drives", | |
| "path": "datasets/microsoft365detector/drive_resources/microsoft365_all_drives.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoft365_drive_folders", | |
| "path": "datasets/microsoft365detector/drive_resources/microsoft365_drive_folders.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoft365_microsoft365_resources_exaforce_tag", | |
| "path": "datasets/microsoft365detector/drive_resources/microsoft365_microsoft365_resources_exaforce_tag.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoft365_resource_dlp_rules_detail", | |
| "path": "datasets/microsoft365detector/drive_resources/microsoft365_resource_dlp_rules_detail.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoft365_resource_event_summary", | |
| "path": "datasets/microsoft365detector/drive_resources/microsoft365_resource_event_summary.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoft365_resource_tooltip", | |
| "path": "datasets/gwsdetector/drive_resources/microsoft365_resource_tooltip.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "microsoft365_saas_principal_role_targets", | |
| "path": "datasets/microsoft365detector/drive_resources/microsoft365_saas_principal_role_targets.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoft365defender_threat_finding_from_findingid", | |
| "path": "datasets/azuredetector/threat_findings/microsoft365defender_threat_finding_from_findingid.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "microsoft365defender_version_hash", | |
| "path": "datasets/azuredetector/threat_findings/microsoft365defender_version_hash.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "microsoft365detector_metadata", | |
| "path": "datasets/microsoft365detector/metadata/metadata.yaml", | |
| "database": "microsoft365detector" | |
| }, | |
| { | |
| "name": "microsoftdefenderforoffice365_threat_finding_from_findingid", | |
| "path": "datasets/azuredetector/blueprints/microsoftdefenderforoffice365_threat_finding_from_findingid.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "microsoftdefenderforoffice365_version_hash", | |
| "path": "datasets/azuredetector/blueprints/microsoftdefenderforoffice365_version_hash.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "microsoftdefenderidentity_azure_threat_finding_from_findingid", | |
| "path": "datasets/azuredetector/threat_findings/microsoftdefenderidentity_azure_threat_finding_from_findingid.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "microsoftdefenderidentity_version_hash", | |
| "path": "datasets/azuredetector/threat_findings/microsoftdefenderidentity_version_hash.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "microsoftedr_external_domains_microsoftedr_external_domains", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_external_domains_microsoftedr_external_domains.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_finding_group_process_trees_microsoftedr_finding_group_process_trees", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_finding_group_process_trees_microsoftedr_finding_group_process_trees.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_machines_microsoft_defender_machines", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_machines_microsoft_defender_machines.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_related_alert_ids", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_related_alert_ids.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_from_findingid", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_threat_finding_from_findingid.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_identity_sensitive_actions", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_threat_finding_identity_sensitive_actions.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_principal_from_same_location_same_time_all_apps", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_threat_finding_principal_from_same_location_same_time_all_apps.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_threat_finding_threat_locations", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_threat_finding_threat_locations.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_threats_microsoft_defender_alerts", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_threats_microsoft_defender_alerts.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "microsoftedr_version_hash", | |
| "path": "datasets/microsoftedrdetector/blueprints/microsoftedr_version_hash.yaml", | |
| "database": "microsoftedrdetector" | |
| }, | |
| { | |
| "name": "mimecast_threat_finding_from_findingid", | |
| "path": "datasets/system/mimecast/mimecast_threat_finding_from_findingid.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "mitre_table_all_mitre_table", | |
| "path": "datasets/system/soc_insights/mitre_table_all_mitre_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "mitre_table_detail_mitre_table_findings", | |
| "path": "datasets/system/soc_insights/mitre_table_detail_mitre_table_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "okta_application_summary", | |
| "path": "datasets/oktadetector/users/application/okta_application_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_apps_events_summary", | |
| "path": "datasets/oktadetector/applications/okta_apps_events_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_apps_okta_apps_cases_findings", | |
| "path": "datasets/oktadetector/applications/okta_apps_okta_apps_cases_findings.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_apps_policy_summary", | |
| "path": "datasets/oktadetector/applications/okta_apps_policy_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_apps_risk_findings", | |
| "path": "datasets/oktadetector/applications/okta_apps_risk_findings.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_apps_summary", | |
| "path": "datasets/oktadetector/applications/application/okta_apps_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_events_by_this_identity_idp_member_used_permission", | |
| "path": "datasets/oktadetector/users/okta_events_by_this_identity_idp_member_used_permission.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_events_by_this_identity_risk_findings", | |
| "path": "datasets/oktadetector/users/okta_events_by_this_identity_risk_findings.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_events_on_groups_summary", | |
| "path": "datasets/oktadetector/groups/okta_events_on_groups_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_events_on_this_identity_idp_identity_app", | |
| "path": "datasets/oktadetector/users/okta_events_on_this_identity_idp_identity_app.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_events_on_this_identity_idp_member_group", | |
| "path": "datasets/oktadetector/users/okta_events_on_this_identity_idp_member_group.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_group_info", | |
| "path": "datasets/oktadetector/users/okta_group_info.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_groups_idp_group_app", | |
| "path": "datasets/oktadetector/groups/okta_groups_idp_group_app.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_identity_info", | |
| "path": "datasets/oktadetector/users/okta_identity_info.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_ipaddress_summary", | |
| "path": "datasets/oktadetector/applications/ip_address/okta_ipaddress_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_policy_summary_tooltip", | |
| "path": "datasets/oktadetector/applications/policy/okta_policy_summary_tooltip.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_resource_type_info", | |
| "path": "datasets/oktadetector/users/okta_resource_type_info.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_role_summary_tooltip", | |
| "path": "datasets/oktadetector/applications/role/okta_role_summary_tooltip.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_threat_finding_event_summary", | |
| "path": "datasets/oktadetector/blueprints/okta_threat_finding_event_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_threat_findings", | |
| "path": "datasets/oktadetector/threat_findings/threat_findings.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_threat_insights", | |
| "path": "datasets/oktadetector/blueprints/okta_threat_insights.yaml", | |
| "database": "snowflake" | |
| }, | |
| { | |
| "name": "okta_user_detail", | |
| "path": "datasets/oktadetector/users/okta_user_detail.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_user_info_idp_event_summary", | |
| "path": "datasets/oktadetector/users/okta_user_info_idp_event_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_user_info_idp_identities", | |
| "path": "datasets/oktadetector/users/okta_user_info_idp_identities.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_user_info_idp_policy_summary", | |
| "path": "datasets/oktadetector/users/okta_user_info_idp_policy_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_user_info_okta_permission_tooltip", | |
| "path": "datasets/oktadetector/users/okta_user_info_okta_permission_tooltip.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_user_info_okta_resource_name_tooltip", | |
| "path": "datasets/oktadetector/users/okta_user_info_okta_resource_name_tooltip.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_user_summary", | |
| "path": "datasets/oktadetector/users/okta_user_summary.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "okta_users_latest_info", | |
| "path": "datasets/oktadetector/users/okta_users_latest_info.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "oktadetector_metadata", | |
| "path": "datasets/oktadetector/metadata/metadata.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "onepassword_event_summary", | |
| "path": "datasets/onepassworddetector/users/onepassword_event_summary.yaml", | |
| "database": "onepassworddetector" | |
| }, | |
| { | |
| "name": "onepassword_events_by_this_identity_risk_findings", | |
| "path": "datasets/onepassworddetector/users/onepassword_events_by_this_identity_risk_findings.yaml", | |
| "database": "onepassworddetector" | |
| }, | |
| { | |
| "name": "onepassword_saas_identity_graph", | |
| "path": "datasets/onepassworddetector/users/onepassword_identity_graph.yaml", | |
| "database": "onepassworddetector" | |
| }, | |
| { | |
| "name": "onepassworddetector_metadata", | |
| "path": "datasets/onepassworddetector/metadata/metadata.yaml", | |
| "database": "onepassworddetector" | |
| }, | |
| { | |
| "name": "openai_event_summary", | |
| "path": "datasets/openaidetector/users/openai_event_summary.yaml", | |
| "database": "openaidetector" | |
| }, | |
| { | |
| "name": "openai_events_by_this_identity_risk_findings", | |
| "path": "datasets/openaidetector/users/openai_events_by_this_identity_risk_findings.yaml", | |
| "database": "openaidetector" | |
| }, | |
| { | |
| "name": "openai_identity_tooltip", | |
| "path": "datasets/openaidetector/users/openai_identity_tooltip.yaml", | |
| "database": "openaidetector" | |
| }, | |
| { | |
| "name": "openai_resource_tooltip", | |
| "path": "datasets/openaidetector/users/openai_resource_tooltip.yaml", | |
| "database": "openaidetector" | |
| }, | |
| { | |
| "name": "openai_threat_finding_alertcenter_events", | |
| "path": "datasets/openaidetector/blueprints/openai_threat_finding_alertcenter_events.yaml", | |
| "database": "openaidetector" | |
| }, | |
| { | |
| "name": "openai_threat_finding_alertcenter_resource_graph", | |
| "path": "datasets/openaidetector/blueprints/openai_threat_finding_alertcenter_resource_graph.yaml", | |
| "database": "openaidetector" | |
| }, | |
| { | |
| "name": "openai_threat_finding_event_summary", | |
| "path": "datasets/openaidetector/blueprints/openai_threat_finding_event_summary.yaml", | |
| "database": "openaidetector" | |
| }, | |
| { | |
| "name": "paloalto_threat_finding_from_findingid", | |
| "path": "datasets/system/paloaltongfw/paloalto_threat_finding_from_findingid.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "paloaltongfw_threat_finding_event_summary", | |
| "path": "datasets/system/blueprints/paloaltongfw_threat_finding_event_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "permissions", | |
| "path": "datasets/githubdetector/repos/details/permissions.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "phishingemailinbox_threat_finding_from_findingid", | |
| "path": "datasets/system/phishingemailinbox/phishingemailinbox_threat_finding_from_findingid.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "pingidentity_event_summary", | |
| "path": "datasets/pingidentitydetector/users/pingidentity_event_summary.yaml", | |
| "database": "pingidentitydetector" | |
| }, | |
| { | |
| "name": "pingidentity_events_by_this_identity_risk_findings", | |
| "path": "datasets/pingidentitydetector/users/pingidentity_events_by_this_identity_risk_findings.yaml", | |
| "database": "pingidentitydetector" | |
| }, | |
| { | |
| "name": "pingidentity_saas_identity_graph", | |
| "path": "datasets/pingidentitydetector/users/pingidentity_identity_graph.yaml", | |
| "database": "pingidentitydetector" | |
| }, | |
| { | |
| "name": "pingidentity_threat_finding_alertcenter_events", | |
| "path": "datasets/pingidentitydetector/blueprints/pingidentity_threat_finding_alertcenter_events.yaml", | |
| "database": "pingidentitydetector" | |
| }, | |
| { | |
| "name": "pingidentity_threat_finding_alertcenter_resource_graph", | |
| "path": "datasets/pingidentitydetector/blueprints/pingidentity_threat_finding_alertcenter_resource_graph.yaml", | |
| "database": "pingidentitydetector" | |
| }, | |
| { | |
| "name": "pingidentity_threat_finding_event_summary", | |
| "path": "datasets/pingidentitydetector/blueprints/pingidentity_threat_finding_event_summary.yaml", | |
| "database": "pingidentitydetector" | |
| }, | |
| { | |
| "name": "pingidentitydetector_metadata", | |
| "path": "datasets/pingidentitydetector/metadata/metadata.yaml", | |
| "database": "pingidentitydetector" | |
| }, | |
| { | |
| "name": "policy_summary", | |
| "path": "datasets/cloudtrail/policy/policy_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "project_data_sources", | |
| "path": "datasets/system/data_sources/project_data_sources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "proxy_event_summary", | |
| "path": "datasets/system/proxy_sessions/proxy_event_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "proxy_resource_nodes_tooltip", | |
| "path": "datasets/system/proxy_sessions/proxy_resource_nodes_tooltip.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "proxy_session_summary", | |
| "path": "datasets/system/proxy_sessions/proxy_session_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "proxy_session_tooltip", | |
| "path": "datasets/system/proxy_sessions/proxy_session_tooltip.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "qe_event_summary", | |
| "path": "datasets/system/qe_event_summary/qe_event_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "readiness_log_coverage_detail_readiness_log_coverage", | |
| "path": "datasets/system/soc_insights/readiness_log_coverage_detail_readiness_log_coverage.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "repo_workflow_exf_github_repos", | |
| "path": "datasets/githubdetector/repos/repo_workflow_exf_github_repos.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "repos_github_repos_cases_findings", | |
| "path": "datasets/githubdetector/repos/repos_github_repos_cases_findings.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "repos_risk_findings", | |
| "path": "datasets/githubdetector/repos/repos_risk_findings.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "repos_saas_repos_admin_identities", | |
| "path": "datasets/githubdetector/repos/repos_saas_repos_admin_identities.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "repos_saas_resources", | |
| "path": "datasets/githubdetector/repos/repos_saas_resources.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "repos_secrets_summary", | |
| "path": "datasets/githubdetector/repos/repos_secrets_summary.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "resource_ancestors", | |
| "path": "datasets/cloudtrail/resource/resource_ancestors.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_bucket_info_resource_bucket_info", | |
| "path": "datasets/cloudtrail/resource/resource_bucket_info_resource_bucket_info.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_config_ami", | |
| "path": "datasets/cloudtrail/resource/resource_config_ami.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_detail", | |
| "path": "datasets/cloudtrail/resource/resource_detail.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_group_roles", | |
| "path": "datasets/cloudtrail/resource/resource_group_roles.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_properties", | |
| "path": "datasets/cloudtrail/resource/resource_properties.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_related_cases", | |
| "path": "datasets/cloudtrail/resource/resource_related_cases.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_session_case_findings", | |
| "path": "datasets/cloudtrail/resource/resource_session_case_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_sessions_identities", | |
| "path": "datasets/cloudtrail/resource/resource_sessions_identities.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resource_summary", | |
| "path": "datasets/cloudtrail/resource/resource_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resources_certificates_project_cloudtrail_accounts", | |
| "path": "datasets/cloudtrail/certificates/resources_certificates_project_cloudtrail_accounts.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resources_exaforce_tag", | |
| "path": "datasets/cloudtrail/resource/resources_exaforce_tag.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resources_project_cloudtrail_accounts", | |
| "path": "datasets/cloudtrail/resource/resources_project_cloudtrail_accounts.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "resources_risk_findings", | |
| "path": "datasets/cloudtrail/resource/resources_risk_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "risk_finding_json_data_json_data", | |
| "path": "datasets/system/finding/risk_finding_json_data_json_data.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "risk_finding_risk_finding_frameworks", | |
| "path": "datasets/system/finding/risk_finding_risk_finding_frameworks.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "risk_findings_exaforce_tag", | |
| "path": "datasets/system/finding/risk_findings_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "risk_findings_project_cloudtrail_accounts", | |
| "path": "datasets/system/finding/risk_findings_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "risk_findings_project_connector", | |
| "path": "datasets/system/finding/risk_findings_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "risk_rules_project_connector", | |
| "path": "datasets/system/risk_rules/risk_rules_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "s3_bucket_summary_s3_bucket_summary", | |
| "path": "datasets/cloudtrail/s3_data/s3_bucket_summary_s3_bucket_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "s3_bucket_tooltip_s3_bucket_tooltip", | |
| "path": "datasets/cloudtrail/s3_data/s3_bucket_tooltip_s3_bucket_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_account_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_account_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_accountgroup_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_accountgroup_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_bitbucket_saas_repo_event_summary", | |
| "path": "datasets/atlassiandetector/saas_repos/saas_bitbucket_saas_repo_event_summary.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "saas_event_summary_atlassian_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_atlassian_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_azure_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_azure_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_fireblocks_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_fireblocks_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_generic_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_generic_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_github_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_github_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_gws_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_gws_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_jira_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_jira_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_kandji_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_kandji_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_microsoft365_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_microsoft365_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_okta_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_okta_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_onepassword_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_onepassword_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_openai_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_openai_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_pingidentity_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_pingidentity_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_slack_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_slack_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_event_summary_zscaler_saas_event_summary", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_event_summary_zscaler_saas_event_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_atlassian_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_atlassian_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_atlassian_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_atlassian_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_azure_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_azure_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_azure_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_azure_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_fireblocks_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_fireblocks_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_fireblocks_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_fireblocks_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_generic_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_generic_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_github_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_github_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_github_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_github_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_gws_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_gws_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_gws_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_gws_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_jira_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_jira_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_jira_saas_workspace", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_jira_saas_workspace.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_kandji_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_kandji_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_kandji_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_kandji_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_microsoft365_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_microsoft365_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_microsoft365_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_microsoft365_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_okta_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_okta_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_okta_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_okta_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_onepassword_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_onepassword_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_onepassword_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_onepassword_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_openai_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_openai_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_openai_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_openai_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_pingidentity_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_pingidentity_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_pingidentity_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_pingidentity_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_slack_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_slack_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_slack_saas_org", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_slack_saas_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_events_zscaler_events", | |
| "path": "datasets/cloudtrail/saas_event_browser/saas_events_zscaler_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_groups_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_groups_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_identity_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_identity_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_idp_identity_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_idp_identity_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_issue", | |
| "path": "datasets/cloudtrail/saas/saas_issue.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repo_event_summary", | |
| "path": "datasets/atlassiandetector/saas_repos/saas_repo_event_summary.yaml", | |
| "database": "atlassiandetector" | |
| }, | |
| { | |
| "name": "saas_repo_permissions_saas_principal_role_targets", | |
| "path": "datasets/githubdetector/repos/saas_repo_permissions_saas_principal_role_targets.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "saas_repo_summary", | |
| "path": "datasets/cloudtrail/saas/saas_repo_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repo_workflow_events", | |
| "path": "datasets/cloudtrail/saas/saas_repo_workflow_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repo_workflow_exf_github_repos", | |
| "path": "datasets/cloudtrail/saas/saas_repo_workflow_exf_github_repos.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_overview", | |
| "path": "datasets/cloudtrail/saas/saas_repos_overview.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_events", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_groups", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_groups.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_inactive_identities", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_inactive_identities.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_packages_containers_workloads", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_packages_containers_workloads.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_principal_role_targets", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_principal_role_targets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_repos_admin_identities", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_repos_admin_identities.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_resource_secrets", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_resource_secrets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_resources", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_resources.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_secrets", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_secrets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_atlassian_workflows", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_atlassian_workflows.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_exaforce_tag", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_exaforce_tag.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_gh_workflows", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_gh_workflows.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_events", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_groups", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_groups.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_inactive_identities", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_inactive_identities.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_packages_containers_workloads", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_packages_containers_workloads.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_principal_role_targets", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_principal_role_targets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_repos_admin_identities", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_repos_admin_identities.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_repos_cases_findings", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_repos_cases_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_resource_secrets", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_resource_secrets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_resources", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_resources.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_github_secrets", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_github_secrets.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_repos_union_risk_findings", | |
| "path": "datasets/cloudtrail/saas/saas_repos_union_risk_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_resourcegroups_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_resourcegroups_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_resources_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_resources_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_roles_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_roles_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_atlassian_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_atlassian_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_atlassian_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_atlassian_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_atlassian_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_atlassian_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_atlassian_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_atlassian_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_atlassian_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_atlassian_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_atlassian_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_atlassian_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_azure_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_azure_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_azure_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_azure_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_azure_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_azure_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_azure_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_azure_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_azure_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_azure_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_azure_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_azure_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_fireblocks_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_fireblocks_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_generic_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_generic_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_github_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_github_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_github_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_github_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_github_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_github_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_github_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_github_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_github_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_github_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_github_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_github_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_gws_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_gws_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_gws_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_gws_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_gws_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_gws_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_gws_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_gws_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_gws_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_gws_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_gws_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_gws_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_kandji_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_kandji_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_microsoft365_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_microsoft365_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_microsoft365_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_microsoft365_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_microsoft365_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_microsoft365_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_microsoft365_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_microsoft365_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_microsoft365_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_microsoft365_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_microsoft365_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_microsoft365_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_okta_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_okta_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_okta_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_okta_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_okta_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_okta_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_okta_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_okta_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_okta_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_okta_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_okta_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_okta_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_onepassword_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_onepassword_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_onepassword_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_onepassword_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_onepassword_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_onepassword_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_onepassword_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_onepassword_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_onepassword_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_onepassword_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_onepassword_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_onepassword_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_openai_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_openai_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_openai_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_openai_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_openai_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_openai_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_openai_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_openai_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_openai_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_openai_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_openai_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_openai_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_pingidentity_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_pingidentity_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_slack_cooccur_account_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_slack_cooccur_account_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_slack_cooccur_account_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_slack_cooccur_account_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_slack_cooccur_user_asn", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_slack_cooccur_user_asn.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_slack_cooccur_user_asn_org", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_slack_cooccur_user_asn_org.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_slack_cooccur_user_city", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_slack_cooccur_user_city.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_slack_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_slack_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_details_zscaler_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_details_zscaler_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_llm_info", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_llm_info.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_atlassian_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_atlassian_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_azure_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_azure_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_fireblocks_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_fireblocks_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_generic_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_generic_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_github_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_github_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_gws_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_gws_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_kandji_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_kandji_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_microsoft365_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_microsoft365_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_okta_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_okta_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_onepassword_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_onepassword_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_openai_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_openai_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_pingidentity_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_pingidentity_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_slack_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_slack_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_resource_graph_zscaler_saas_session_resource_graph", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_resource_graph_zscaler_saas_session_resource_graph.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_atlassian_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_atlassian_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_azure_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_azure_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_fireblocks_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_fireblocks_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_generic_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_generic_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_github_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_github_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_gws_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_gws_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_kandji_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_kandji_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_microsoft365_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_microsoft365_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_okta_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_okta_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_onepassword_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_onepassword_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_openai_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_openai_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_pingidentity_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_pingidentity_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_slack_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_slack_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_summary_zscaler_saas_session_summary", | |
| "path": "datasets/cloudtrail/saas_session/saas_session_summary_zscaler_saas_session_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_session_tooltip", | |
| "path": "datasets/cloudtrail/saas/saas_session_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_atlassian_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_atlassian_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_atlassian_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_atlassian_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_azure_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_azure_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_azure_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_azure_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_exaforce_tag", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_exaforce_tag.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_fireblocks_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_fireblocks_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_fireblocks_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_fireblocks_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_generic_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_generic_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_generic_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_generic_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_github_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_github_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_github_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_github_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_gws_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_gws_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_gws_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_gws_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_jira_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_jira_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_kandji_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_kandji_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_kandji_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_kandji_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_microsoft365_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_microsoft365_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_microsoft365_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_microsoft365_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_okta_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_okta_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_okta_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_okta_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_onepassword_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_onepassword_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_onepassword_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_onepassword_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_openai_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_openai_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_openai_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_openai_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_pingidentity_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_pingidentity_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_pingidentity_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_pingidentity_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_slack_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_slack_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_slack_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_slack_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_zscaler_events", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_zscaler_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_sessions_zscaler_sessions", | |
| "path": "datasets/cloudtrail/saas_session/saas_sessions_zscaler_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_summary_saas_events_summary", | |
| "path": "datasets/cloudtrail/saas/saas_summary_saas_events_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "saas_workflow_json_overview", | |
| "path": "datasets/githubdetector/workflows/saas_workflow_json_overview.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "scan_status", | |
| "path": "datasets/awsconfig/scan_status.yaml", | |
| "database": "awsconfig" | |
| }, | |
| { | |
| "name": "scm_container_tooltip", | |
| "path": "datasets/cloudtrail/saas/scm_container_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "scm_package_tooltip", | |
| "path": "datasets/cloudtrail/saas/scm_package_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "scm_pr", | |
| "path": "datasets/cloudtrail/saas/scm_pr.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "search_chat_session_shared", | |
| "path": "datasets/system/search/search_chat_session_shared.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "search_chat_session_shared_private_link", | |
| "path": "datasets/system/search/search_chat_session_shared_private_link.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "search_universal_identities", | |
| "path": "datasets/system/search/search_universal_identities.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "search_universal_identities_fuzzy", | |
| "path": "datasets/system/search/search_universal_identities_fuzzy.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "secrets_project_cloudtrail_accounts", | |
| "path": "datasets/cloudtrail/secrets/secrets_project_cloudtrail_accounts.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "selected_permissions_entity", | |
| "path": "datasets/githubdetector/users/details/selected_permissions_entity.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "selected_permissions_entity_fireblocks", | |
| "path": "datasets/fireblocksdetector/users/selected_permissions_entity.yaml", | |
| "database": "fireblocksdetector" | |
| }, | |
| { | |
| "name": "selected_permissions_entity_gws", | |
| "path": "datasets/gwsdetector/users/selected_permissions_entity.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "sentinelone_agents_sentinelone_agents", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_agents_sentinelone_agents.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_external_domains_sentinelone_external_domains", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_external_domains_sentinelone_external_domains.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_finding_group_process_trees_sentinelone_finding_group_process_trees", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_finding_group_process_trees_sentinelone_finding_group_process_trees.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_related_alert_ids", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_related_alert_ids.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_threat_finding_from_findingid", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_threat_finding_from_findingid.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_threat_finding_identity_sensitive_actions", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_threat_finding_identity_sensitive_actions.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_threat_finding_principal_from_same_location_same_time_all_apps", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_threat_finding_principal_from_same_location_same_time_all_apps.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_threat_finding_threat_locations", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_threat_finding_threat_locations.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "sentinelone_threats_sentinelone_threats", | |
| "path": "datasets/sentinelonedetector/blueprints/sentinelone_threats_sentinelone_threats.yaml", | |
| "database": "sentinelonedetector" | |
| }, | |
| { | |
| "name": "service_summary", | |
| "path": "datasets/cloudtrail/service/service_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_detail_llm", | |
| "path": "datasets/cloudtrail/session/session_detail_llm.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_duration_barchart", | |
| "path": "datasets/cloudtrail/session/session_duration_barchart.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_event_hash", | |
| "path": "datasets/cloudtrail/metadata/session_event_hash.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_events_resources_plus", | |
| "path": "datasets/cloudtrail/session/session_events_resources_plus.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_identity_session_patterns", | |
| "path": "datasets/cloudtrail/session/session_identity_session_patterns.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_llm", | |
| "path": "datasets/cloudtrail/session/session_llm.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_related_cases", | |
| "path": "datasets/cloudtrail/session/session_related_cases.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_related_role_risk_findings", | |
| "path": "datasets/cloudtrail/session/session_related_role_risk_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_related_root_identity_risk_findings", | |
| "path": "datasets/cloudtrail/session/session_related_root_identity_risk_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_related_threat_findings", | |
| "path": "datasets/cloudtrail/session/session_related_threat_findings.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_s3_aggregated_events", | |
| "path": "datasets/cloudtrail/session/session_s3_aggregated_events.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_session_identity_session_patterns_non_root", | |
| "path": "datasets/cloudtrail/session/session_session_identity_session_patterns_non_root.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_session_identity_session_patterns_root", | |
| "path": "datasets/cloudtrail/session/session_session_identity_session_patterns_root.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_sessions", | |
| "path": "datasets/cloudtrail/session/session_sessions.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_sessions_bow", | |
| "path": "datasets/cloudtrail/session/session_sessions_bow.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_sessions_bow_by_identity", | |
| "path": "datasets/cloudtrail/session/session_sessions_bow_by_identity.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_sessions_similar", | |
| "path": "datasets/cloudtrail/session/session_sessions_similar.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_similar_all", | |
| "path": "datasets/cloudtrail/session_patterns/session_similar_all.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_similar_all_users", | |
| "path": "datasets/cloudtrail/session_patterns/session_similar_all_users.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "session_summary_parquet", | |
| "path": "datasets/cloudtrail/session/session_summary_parquet.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "sessions_exaforce_tag", | |
| "path": "datasets/cloudtrail/session/sessions_exaforce_tag.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "sessions_project_cloudtrail_accounts", | |
| "path": "datasets/cloudtrail/session/sessions_project_cloudtrail_accounts.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "siem_cloudtrail_threat_finding_from_findingid", | |
| "path": "datasets/cloudtrail/siem/siem_cloudtrail_threat_finding_from_findingid.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "slack_event_summary", | |
| "path": "datasets/slackdetector/users/slack_event_summary.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "slack_identity_details_risk_findings", | |
| "path": "datasets/slackdetector/users/slack_identity_details_risk_findings.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "slack_identity_details_slack_access_logs", | |
| "path": "datasets/slackdetector/users/slack_identity_details_slack_access_logs.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "slack_identity_details_slack_events", | |
| "path": "datasets/slackdetector/users/slack_identity_details_slack_events.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "slack_threat_finding_alertcenter_events", | |
| "path": "datasets/slackdetector/blueprints/slack_threat_finding_alertcenter_events.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "slack_threat_finding_alertcenter_resource_graph", | |
| "path": "datasets/slackdetector/blueprints/slack_threat_finding_alertcenter_resource_graph.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "slack_threat_finding_event_summary", | |
| "path": "datasets/slackdetector/blueprints/slack_threat_finding_event_summary.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "slackdetector_metadata", | |
| "path": "datasets/slackdetector/metadata/metadata.yaml", | |
| "database": "slackdetector" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_atlassian", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_atlassian.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_aws", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_aws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_azure", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_azure.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_gcp", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_gcp.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_github", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_github.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_googleworkspace", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_googleworkspace.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_okta", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_okta.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_openai", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_openai.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_others", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_others.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_data_overview_soc_insights_data_overview_zscaler", | |
| "path": "datasets/system/soc_insights/soc_insights_data_overview_soc_insights_data_overview_zscaler.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_atlassian", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_atlassian.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_aws", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_aws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_azure", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_azure.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_gcp", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_gcp.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_github", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_github.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_googleworkspace", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_googleworkspace.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_okta", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_okta.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_openai", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_openai.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "soc_insights_time_saved_soc_insights_time_saved_others", | |
| "path": "datasets/system/soc_insights/soc_insights_time_saved_soc_insights_time_saved_others.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "splunk_cloudtrail_threat_finding_from_eventid", | |
| "path": "datasets/cloudtrail/siem/splunk_cloudtrail_threat_finding_from_eventid.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "sublime_threat_finding_from_findingid", | |
| "path": "datasets/system/sublime/sublime_threat_finding_from_findingid.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "system_identity_summary", | |
| "path": "datasets/system/identity_investigate/identity_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identities_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/third_party_identities_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_atlassian_identity_table", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_atlassian_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_aws_identity_table", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_aws_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_gcloud_identity_table", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_gcloud_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_github_identity_table", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_github_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_gws_identity_table", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_gws_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_okta_identity_table", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_okta_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_openai_identity_table", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_openai_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "third_party_identity_trends_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/third_party_identity_trends_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "threat_finding_finding_source_aggregated_threat_findings", | |
| "path": "datasets/system/finding/threat_finding_finding_source_aggregated_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "threat_finding_from_findingid", | |
| "path": "datasets/azuredetector/threat_findings/threat_finding_from_findingid.yaml", | |
| "database": "azuredetector" | |
| }, | |
| { | |
| "name": "threat_finding_threat_findings", | |
| "path": "datasets/system/finding/threat_finding_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "threat_findings_exaforce_tag", | |
| "path": "datasets/system/finding/threat_findings_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "threat_findings_finding_source_aggregated_threat_findings", | |
| "path": "datasets/system/finding/threat_findings_finding_source_aggregated_threat_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "threat_findings_project_cloudtrail_accounts", | |
| "path": "datasets/system/finding/threat_findings_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "threat_findings_project_connector", | |
| "path": "datasets/system/finding/threat_findings_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "threat_rules_threat_rules_data_sources", | |
| "path": "datasets/cloudtrail/threat_rules/threat_rules_threat_rules_data_sources.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "threat_rules_threat_rules_tags", | |
| "path": "datasets/cloudtrail/threat_rules/threat_rules_threat_rules_tags.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "threathunt_finding_summary", | |
| "path": "datasets/cloudtrail/threathunt/threathunt_finding_summary.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "threathunt_role_risk_findings_risk_findings_aggregated", | |
| "path": "datasets/cloudtrail/threathunt/threathunt_role_risk_findings_risk_findings_aggregated.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "threathunt_root_identity_risk_findings_risk_findings_aggregated", | |
| "path": "datasets/cloudtrail/threathunt/threathunt_root_identity_risk_findings_risk_findings_aggregated.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "threathunt_root_session", | |
| "path": "datasets/cloudtrail/threathunt/threathunt_root_session.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "tokens_and_keys_atlassian_tokens_and_keys", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_atlassian_tokens_and_keys.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "tokens_and_keys_aws_tokens_and_keys", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_aws_tokens_and_keys.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "tokens_and_keys_azure_tokens_and_keys", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_azure_tokens_and_keys.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "tokens_and_keys_gcloud_tokens_and_keys", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_gcloud_tokens_and_keys.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "tokens_and_keys_github_tokens_and_keys", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_github_tokens_and_keys.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "tokens_and_keys_okta_tokens_and_keys", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_okta_tokens_and_keys.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "tokens_and_keys_openai_tokens_and_keys", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_openai_tokens_and_keys.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "tokens_and_keys_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/tokens_and_keys_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_aws", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_aws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_fireblocks", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_fireblocks.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_gcloud", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_gcloud.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_gws", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_gws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_kandji", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_kandji.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_microsoft365", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_microsoft365.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_okta", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_okta.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_onepassword", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_onepassword.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_openai", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_openai.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_pingidentity", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_pingidentity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_slack", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_slack.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_access_denied_errors_top_access_denied_errors_zscaler", | |
| "path": "datasets/system/identity_insights/top_access_denied_errors_top_access_denied_errors_zscaler.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_project_cloudtrail_accounts", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_aws", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_aws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_fireblocks", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_fireblocks.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_gcloud", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_gcloud.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_github", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_github.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_gws", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_gws.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_kandji", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_kandji.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_microsoft365", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_microsoft365.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_okta", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_okta.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_onepassword", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_onepassword.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_openai", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_openai.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_pingidentity", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_pingidentity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_slack", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_slack.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_zscaler", | |
| "path": "datasets/system/identity_insights/top_console_users_making_changes_in_cloud_top_console_users_making_changes_in_cloud_zscaler.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_risk_findings_project_cloudtrail_accounts_findings", | |
| "path": "datasets/system/identity_insights/top_risk_findings_project_cloudtrail_accounts_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_risk_findings_project_connector", | |
| "path": "datasets/system/identity_insights/top_risk_findings_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_threat_findings_project_cloudtrail_accounts_findings", | |
| "path": "datasets/system/identity_insights/top_threat_findings_project_cloudtrail_accounts_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "top_threat_findings_project_connector", | |
| "path": "datasets/system/identity_insights/top_threat_findings_project_connector.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_device_summary_universal_device_summary", | |
| "path": "datasets/system/identity_investigate/universal_device_summary_universal_device_summary.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_device_tooltip", | |
| "path": "datasets/cloudtrail/saas/universal_device_tooltip.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "universal_device_tooltip_universal_device_tooltip", | |
| "path": "datasets/system/device_investigate/universal_device_tooltip_universal_device_tooltip.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_devices_exaforce_tag", | |
| "path": "datasets/system/device_investigate/universal_devices_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_devices_kandji_devices", | |
| "path": "datasets/system/device_investigate/universal_devices_kandji_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_events", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_respositories", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_respositories.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_saas_principal_role_targets", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_saas_principal_role_targets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_secrets", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_atlassian_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_atlassian_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_aws_events", | |
| "path": "datasets/system/universal_identity/universal_identity_aws_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_aws_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_aws_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_aws_identity_groups", | |
| "path": "datasets/system/universal_identity/universal_identity_aws_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_aws_identity_table", | |
| "path": "datasets/system/universal_identity/universal_identity_aws_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_aws_resources", | |
| "path": "datasets/system/universal_identity/universal_identity_aws_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_aws_secrets", | |
| "path": "datasets/system/universal_identity/universal_identity_aws_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_aws_useragents", | |
| "path": "datasets/system/universal_identity/universal_identity_aws_useragents.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_events", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_identity_devices", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_identity_groups", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_idp_events", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_idp_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_secrets", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_azure_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_azure_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_cases_findings_intermediate", | |
| "path": "datasets/system/universal_identity/universal_identity_cases_findings_intermediate.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_crowdstrike_identity_table", | |
| "path": "datasets/system/universal_identity/universal_identity_crowdstrike_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_exaforce_tag", | |
| "path": "datasets/system/universal_identity/universal_identity_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_exf_github_repo_users", | |
| "path": "datasets/system/universal_identity/universal_identity_exf_github_repo_users.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_fireblocks_events", | |
| "path": "datasets/system/universal_identity/universal_identity_fireblocks_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_fireblocks_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_fireblocks_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_fireblocks_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_fireblocks_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_fireblocks_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_fireblocks_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_fireblocks_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_fireblocks_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_fireblocks_secrets", | |
| "path": "datasets/system/universal_identity/universal_identity_fireblocks_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_fireblocks_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_fireblocks_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gcp_events", | |
| "path": "datasets/system/universal_identity/universal_identity_gcp_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gcp_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_gcp_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gcp_identity_table", | |
| "path": "datasets/system/universal_identity/universal_identity_gcp_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gcp_resources", | |
| "path": "datasets/system/universal_identity/universal_identity_gcp_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gcp_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_gcp_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_events", | |
| "path": "datasets/system/universal_identity/universal_identity_github_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_github_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_github_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_github_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_github_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_repositories", | |
| "path": "datasets/system/universal_identity/universal_identity_github_repositories.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_secrets", | |
| "path": "datasets/system/universal_identity/universal_identity_github_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_github_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_github_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_events", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_identity_devices", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_idp_events", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_idp_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_gws_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_gws_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_info_universal_identity_top_locations", | |
| "path": "datasets/system/universal_identity/universal_identity_info_universal_identity_top_locations.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_kandji_events", | |
| "path": "datasets/system/universal_identity/universal_identity_kandji_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_kandji_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_kandji_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_kandji_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_kandji_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_kandji_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_kandji_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_kandji_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_kandji_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_mfa_devices", | |
| "path": "datasets/system/universal_identity/universal_identity_mfa_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_events", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_identity_devices", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_identity_groups", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_identity_groups.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_idp_events", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_idp_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_secrets", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_secrets.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_okta_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_okta_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_onepassword_events", | |
| "path": "datasets/system/universal_identity/universal_identity_onepassword_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_onepassword_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_onepassword_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_onepassword_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_onepassword_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_onepassword_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_onepassword_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_onepassword_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_onepassword_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_onepassword_saas_resources", | |
| "path": "datasets/system/universal_identity/universal_identity_onepassword_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_onepassword_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_onepassword_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_openai_events", | |
| "path": "datasets/system/universal_identity/universal_identity_openai_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_openai_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_openai_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_openai_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_openai_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_openai_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_openai_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_openai_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_openai_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_pingidentity_events", | |
| "path": "datasets/system/universal_identity/universal_identity_pingidentity_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_pingidentity_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_pingidentity_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_pingidentity_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_pingidentity_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_pingidentity_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_pingidentity_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_pingidentity_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_pingidentity_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_pingidentity_saas_resources", | |
| "path": "datasets/system/universal_identity/universal_identity_pingidentity_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_pingidentity_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_pingidentity_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_project_cloudtrail_accounts", | |
| "path": "datasets/system/universal_identity/universal_identity_project_cloudtrail_accounts.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_risk_findings", | |
| "path": "datasets/system/universal_identity/universal_identity_risk_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_sentinelone_identity_table", | |
| "path": "datasets/system/universal_identity/universal_identity_sentinelone_identity_table.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_session_auth_chain", | |
| "path": "datasets/system/universal_identity/universal_identity_session_auth_chain.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_session_source_ip_addresses", | |
| "path": "datasets/system/universal_identity/universal_identity_session_source_ip_addresses.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_slack_events", | |
| "path": "datasets/system/universal_identity/universal_identity_slack_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_slack_events_on_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_slack_events_on_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_slack_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_slack_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_slack_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_slack_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_slack_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_slack_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_slack_saas_resources", | |
| "path": "datasets/system/universal_identity/universal_identity_slack_saas_resources.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_slack_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_slack_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_universal_identity", | |
| "path": "datasets/system/universal_identity/universal_identity_universal_identity.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_universal_identity_devices", | |
| "path": "datasets/system/universal_identity/universal_identity_universal_identity_devices.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_zscaler_events", | |
| "path": "datasets/system/universal_identity/universal_identity_zscaler_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_zscaler_identity_graph_adjacencies", | |
| "path": "datasets/system/universal_identity/universal_identity_zscaler_identity_graph_adjacencies.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_zscaler_identity_graph_nodes", | |
| "path": "datasets/system/universal_identity/universal_identity_zscaler_identity_graph_nodes.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_zscaler_identity_group_members", | |
| "path": "datasets/system/universal_identity/universal_identity_zscaler_identity_group_members.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_zscaler_proxy_events", | |
| "path": "datasets/system/universal_identity/universal_identity_zscaler_proxy_events.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_zscaler_proxy_sessions", | |
| "path": "datasets/system/universal_identity/universal_identity_zscaler_proxy_sessions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_identity_zscaler_saas_resources_bw", | |
| "path": "datasets/system/universal_identity/universal_identity_zscaler_saas_resources_bw.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "universal_threat_finding_alertcenter_events", | |
| "path": "datasets/universaldetector/blueprints/universal_threat_finding_alertcenter_events.yaml", | |
| "database": "universaldetector" | |
| }, | |
| { | |
| "name": "universal_threat_finding_alertcenter_resource_graph", | |
| "path": "datasets/universaldetector/blueprints/universal_threat_finding_alertcenter_resource_graph.yaml", | |
| "database": "universaldetector" | |
| }, | |
| { | |
| "name": "universal_threat_finding_event_summary", | |
| "path": "datasets/universaldetector/blueprints/universal_threat_finding_event_summary.yaml", | |
| "database": "universaldetector" | |
| }, | |
| { | |
| "name": "universaldetector_metadata", | |
| "path": "datasets/universaldetector/metadata/metadata.yaml", | |
| "database": "universaldetector" | |
| }, | |
| { | |
| "name": "web_event_summary", | |
| "path": "datasets/zscalerdetector/web_events/web_event_summary.yaml", | |
| "database": "zscalerdetector" | |
| }, | |
| { | |
| "name": "web_events_event_json", | |
| "path": "datasets/zscalerdetector/web_events/web_events_event_json.yaml", | |
| "database": "zscalerdetector" | |
| }, | |
| { | |
| "name": "wiz_cloudtrail_threat_finding_from_findingid", | |
| "path": "datasets/cloudtrail/siem/wiz_cloudtrail_threat_finding_from_findingid.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "wiz_event_json", | |
| "path": "datasets/system/wiz/wiz_event_json.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "wiz_finding_onboarding_info", | |
| "path": "datasets/cloudtrail/wiz/wiz_finding_onboarding_info.yaml", | |
| "database": "cloudtrail" | |
| }, | |
| { | |
| "name": "wiz_gcp_threat_finding_from_findingid", | |
| "path": "datasets/gcloud/findings/wiz_gcp_threat_finding_from_findingid.yaml", | |
| "database": "gcloud" | |
| }, | |
| { | |
| "name": "wiz_googleworkspace_threat_finding_from_findingid", | |
| "path": "datasets/gwsdetector/threat_findings/wiz_googleworkspace_threat_finding_from_findingid.yaml", | |
| "database": "gwsdetector" | |
| }, | |
| { | |
| "name": "wiz_okta_threat_finding_from_findingid", | |
| "path": "datasets/oktadetector/threat_findings/wiz_okta_threat_finding_from_findingid.yaml", | |
| "database": "oktadetector" | |
| }, | |
| { | |
| "name": "wiz_threat_finding_threat_findings_cases", | |
| "path": "datasets/system/blueprints/wiz_threat_finding_threat_findings_cases.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "wiz_wiz_threat_finding_from_findingid", | |
| "path": "datasets/system/wiz/wiz_wiz_threat_finding_from_findingid.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "workflow_node_definitions", | |
| "path": "datasets/system/workflow-builder/workflow_node_definitions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "workflow_run_detailed", | |
| "path": "datasets/githubdetector/workflows/workflow_run_detailed.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "workflow_tags", | |
| "path": "datasets/system/workflow-builder/workflow_tags.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "workflow_templates", | |
| "path": "datasets/system/workflow-builder/workflow_templates.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "workflows", | |
| "path": "datasets/githubdetector/workflows/workflows.yaml", | |
| "database": "githubdetector" | |
| }, | |
| { | |
| "name": "workflows_executions", | |
| "path": "datasets/system/workflow-builder/workflows_executions.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "workflows_start_dynamic", | |
| "path": "datasets/system/workflow-builder/workflows_start_dynamic.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "zscaler_event_summary", | |
| "path": "datasets/zscalerdetector/users/zscaler_event_summary.yaml", | |
| "database": "zscalerdetector" | |
| }, | |
| { | |
| "name": "zscaler_events_by_this_identity_risk_findings", | |
| "path": "datasets/zscalerdetector/users/zscaler_events_by_this_identity_risk_findings.yaml", | |
| "database": "zscalerdetector" | |
| }, | |
| { | |
| "name": "zscaler_saas_event_summary", | |
| "path": "datasets/zscalerdetector/users/zscaler_saas_event_summary.yaml", | |
| "database": "zscalerdetector" | |
| }, | |
| { | |
| "name": "zscaler_saas_event_summary_zscaler_saas_event_summary", | |
| "path": "datasets/zscalerdetector/users/zscaler_saas_event_summary_zscaler_saas_event_summary.yaml", | |
| "database": "zscalerdetector" | |
| }, | |
| { | |
| "name": "zscaler_sessions_zscaler_exaforce_tag", | |
| "path": "datasets/system/proxy_sessions/zscaler_sessions_zscaler_exaforce_tag.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "zscaler_threat_finding_event_summary", | |
| "path": "datasets/zscalerdetector/blueprints/zscaler_threat_finding_event_summary.yaml", | |
| "database": "zscalerdetector" | |
| }, | |
| { | |
| "name": "zscaler_threat_finding_related_group_findings", | |
| "path": "datasets/zscalerdetector/blueprints/zscaler_threat_finding_related_group_findings.yaml", | |
| "database": "system" | |
| }, | |
| { | |
| "name": "zscalerdetector_metadata", | |
| "path": "datasets/zscalerdetector/metadata/metadata.yaml", | |
| "database": "zscalerdetector" | |
| } | |
| ], | |
| "orphan_databases": [ | |
| { | |
| "name": "chronoforge", | |
| "path": "databases/chronoforge.yaml" | |
| }, | |
| { | |
| "name": "cloudquery", | |
| "path": "databases/cloudquery.yaml" | |
| }, | |
| { | |
| "name": "cloudquery_controller", | |
| "path": "databases/cloudquery_controller.yaml" | |
| }, | |
| { | |
| "name": "entraid", | |
| "path": "databases/azure-runtime.yaml" | |
| }, | |
| { | |
| "name": "exfsupport", | |
| "path": "databases/exfsupport.yaml" | |
| }, | |
| { | |
| "name": "mdr", | |
| "path": "databases/mdr.yaml" | |
| }, | |
| { | |
| "name": "nexus", | |
| "path": "databases/nexus.yaml" | |
| }, | |
| { | |
| "name": "paloaltodetector", | |
| "path": "databases/paloaltodetector.yaml" | |
| }, | |
| { | |
| "name": "snowconnect", | |
| "path": "databases/snowconnect.yaml" | |
| }, | |
| { | |
| "name": "superset-local", | |
| "path": "databases/superset-local.yaml" | |
| }, | |
| { | |
| "name": "systemtest", | |
| "path": "databases/systemtest.yaml" | |
| } | |
| ] | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment