Skip to content

Commit 5d7fb6c

Browse files
v-atulyadavv-atulyadav
authored
Merge pull request #14636 from prodaft/prodaft-usta-atp
PRODAFT USTA - Account Takeover Prevention Integration Initial Commit
2 parents 14b47e1 + 3eb5790 commit 5d7fb6c

29 files changed

Lines changed: 3576 additions & 329 deletions

‎.script/tests/KqlvalidationsTests/CustomFunctions/PRODAFTUstaCompromisedCredentials.json‎

Lines changed: 94 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,94 @@
1+
{
2+
"FunctionName": "PRODAFTUstaCompromisedCredentials",
3+
"FunctionParameters": [],
4+
"FunctionResultColumns": [
5+
{
6+
"name": "TimeGenerated",
7+
"type": "datetime"
8+
},
9+
{
10+
"name": "TicketId",
11+
"type": "long"
12+
},
13+
{
14+
"name": "Status",
15+
"type": "string"
16+
},
17+
{
18+
"name": "StatusTimestamp",
19+
"type": "datetime"
20+
},
21+
{
22+
"name": "Created",
23+
"type": "datetime"
24+
},
25+
{
26+
"name": "ContentType",
27+
"type": "string"
28+
},
29+
{
30+
"name": "CompanyId",
31+
"type": "int"
32+
},
33+
{
34+
"name": "CompanyName",
35+
"type": "string"
36+
},
37+
{
38+
"name": "Username",
39+
"type": "string"
40+
},
41+
{
42+
"name": "Url",
43+
"type": "string"
44+
},
45+
{
46+
"name": "Source",
47+
"type": "string"
48+
},
49+
{
50+
"name": "IsCorporate",
51+
"type": "boolean"
52+
},
53+
{
54+
"name": "PasswordScore",
55+
"type": "string"
56+
},
57+
{
58+
"name": "PasswordLength",
59+
"type": "int"
60+
},
61+
{
62+
"name": "VictimUid",
63+
"type": "string"
64+
},
65+
{
66+
"name": "VictimUsername",
67+
"type": "string"
68+
},
69+
{
70+
"name": "VictimCountry",
71+
"type": "string"
72+
},
73+
{
74+
"name": "VictimIp",
75+
"type": "string"
76+
},
77+
{
78+
"name": "VictimComputerName",
79+
"type": "string"
80+
},
81+
{
82+
"name": "VictimOs",
83+
"type": "string"
84+
},
85+
{
86+
"name": "VictimMalware",
87+
"type": "string"
88+
},
89+
{
90+
"name": "InfectionDate",
91+
"type": "datetime"
92+
}
93+
]
94+
}

‎.script/tests/KqlvalidationsTests/CustomTables/PRODAFTUstaCompromisedCredentials_CL.json‎

Lines changed: 93 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,93 @@
1+
{
2+
"Name": "PRODAFTUstaCompromisedCredentials_CL",
3+
"Properties": [
4+
{
5+
"Name": "TimeGenerated",
6+
"Type": "datetime"
7+
},
8+
{
9+
"Name": "TicketId",
10+
"Type": "long"
11+
},
12+
{
13+
"Name": "Status",
14+
"Type": "string"
15+
},
16+
{
17+
"Name": "StatusTimestamp",
18+
"Type": "datetime"
19+
},
20+
{
21+
"Name": "Created",
22+
"Type": "datetime"
23+
},
24+
{
25+
"Name": "ContentType",
26+
"Type": "string"
27+
},
28+
{
29+
"Name": "CompanyId",
30+
"Type": "int"
31+
},
32+
{
33+
"Name": "CompanyName",
34+
"Type": "string"
35+
},
36+
{
37+
"Name": "Username",
38+
"Type": "string"
39+
},
40+
{
41+
"Name": "Url",
42+
"Type": "string"
43+
},
44+
{
45+
"Name": "Source",
46+
"Type": "string"
47+
},
48+
{
49+
"Name": "IsCorporate",
50+
"Type": "boolean"
51+
},
52+
{
53+
"Name": "PasswordScore",
54+
"Type": "string"
55+
},
56+
{
57+
"Name": "PasswordLength",
58+
"Type": "int"
59+
},
60+
{
61+
"Name": "VictimUid",
62+
"Type": "string"
63+
},
64+
{
65+
"Name": "VictimUsername",
66+
"Type": "string"
67+
},
68+
{
69+
"Name": "VictimCountry",
70+
"Type": "string"
71+
},
72+
{
73+
"Name": "VictimIp",
74+
"Type": "string"
75+
},
76+
{
77+
"Name": "VictimComputerName",
78+
"Type": "string"
79+
},
80+
{
81+
"Name": "VictimOs",
82+
"Type": "string"
83+
},
84+
{
85+
"Name": "VictimMalware",
86+
"Type": "string"
87+
},
88+
{
89+
"Name": "InfectionDate",
90+
"Type": "datetime"
91+
}
92+
]
93+
}

0 commit comments

Comments
 (0)