DnsInventory Schema #
Table description #
| TableSection | TableType | TableSectionName | Description |
|---|---|---|---|
| Usx | Regular | Microsoft Sentinel |
Table retention #
| HotDays | ColdDays | TotalInteractiveDays |
|---|---|---|
| 14 | 16 | 30 |
Schema #
| Name | Description | Type |
|---|---|---|
| _BilledSize | Double | |
| _IsBillable | String | |
| _ResourceId | A unique identifier for the resource that the record is associated with | String |
| _SubscriptionId | A unique identifier for the subscription that the record is associated with | String |
| Computer | String | |
| DnsSecSigned | String | |
| DomainName | Domain name that the device that reported the event is joined to; the reporting device can be the one that blocked the access, the compromised device itself, or even a different device that is aware of the attack | String |
| DynamicUpdate | String | |
| ForestName | String | |
| NameServers | String | |
| ResourceRecordName | String | |
| ResourceRecordType | String | |
| ServerIPs | String | |
| SourceSystem | String | |
| SubType | String | |
| TimeGenerated | DateTime | |
| Type | The name of the table | String |
| ZoneName | String |
Schema changes #
| Date | Action |
|---|---|
| 2024-10-18 | Table added to tracking |