...
The table must have lhub_score
and lhub_ts
columns.
Operator Usage in Easy Mode
- Click + on the parent node.
- Enter the Create Details Column for Threat GGPS operator in the search field and select the operator from the results to open the operator form.
- In the Input Table drop-down, enter or select the table containing the data to run this operator on.
- Click Run to view the result.
- Click Save to add the operator to the playbook.
- Click Cancel to discard the operator form.
Usage Details
LQL Command
Code Block |
---|
createDetailsColumnForThreatGPS(table) |
Example
Input
lhub_score | lhub_ts | destIP | destPort |
---|---|---|---|
1.0 | 12 | 1.1.1.1 | 4010 |
...