/
Security Operations Entities Mapping
Document toolboxDocument toolbox

Security Operations Entities Mapping

Owned by Former user (Deleted)
Last updated: Nov 16, 2023 by Juan Tomás Alonso Nieto (Deactivated)
3 min read

Entities mapping

This is the specification of common criteria to apply where possible in alert creation for each technology and union table.

The specification includes:

  • Description about the table in use and how can it be used to create alerts.

  • SecOps entities.

  • Alert template to use.

There are various SecOps entities and their union tables: