You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/normalization-schema-alert.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -159,7 +159,7 @@ This section defines fields related to the identification and classification of
159
159
|**OriginalUserType**| Optional | string | The user type as reported by the reporting device. |
160
160
|**UserSessionId**| Optional | string | The unique ID of the user's session associated with the alert.<br><br>e.g. `a1bc2de3-fh4i-j5kl-6mn7-op8qr9st0u`|
161
161
|**UserScopeId**| Optional | string | The scope ID, such as Microsoft Entra Directory ID, in which UserId and Username are defined.<br><br>e.g. `a1bc2de3-fh4i-j5kl-6mn7-op8qrs`|
162
-
|**UserScope**| Optional | string | The scope, such as Microsoft Entra tenant, in which UserId and Username are defined. or more information and list of allowed values, see [UserScope](normalization-entity-user.md#userscope) in the [Schema Overview article](normalization-about-schemas.md).<br><br>e.g. `Contoso Directory`|
162
+
|**UserScope**| Optional | string | The scope, such as Microsoft Entra tenant, in which UserId and Username are defined. For more information and list of allowed values, see [UserScope](normalization-entity-user.md#userscope) in the [Schema Overview article](normalization-about-schemas.md).<br><br>e.g. `Contoso Directory`|
163
163
164
164
### Process Fields
165
165
@@ -179,7 +179,7 @@ This section enables you to capture details related to a file entity involved in
179
179
| Field | Class | Type | Description |
180
180
|-------|-------|------|-------------|
181
181
|**FileName**| Optional | string | Name of the file associated with the alert, without path or a location.<br><br>e.g. `Notepad.exe`|
182
-
|**FilePath**| Optional | string |he full, normalized path of the target file, including the folder or location, the file name, and the extension.<br><br>e.g. `C:\Windows\System32\notepad.exe`|
182
+
|**FilePath**| Optional | string |The full, normalized path of the target file, including the folder or location, the file name, and the extension.<br><br>e.g. `C:\Windows\System32\notepad.exe`|
183
183
|**FileSHA1**| Optional | string | SHA1 hash of the file.<br><br>e.g. `j5kl6mn7op8qr9st0uv1`|
184
184
|**FileSHA256**| Optional | string | SHA256 hash of the file.<br><br>e.g. `a1bc2de3fh4ij5kl6mn7op8qrs2de3`|
185
185
|**FileMD5**| Optional | string | MD5 hash of the file.<br><br>e.g. `j5kl6mn7op8qr9st0uv1wx2yz3ab4c`|
0 commit comments