Parse Anomali Confidence Score
Query
//Parses out the confidence score for the Anomali feeds
ThreatIntelligenceIndicator
| parse-where ThreatType with * "confidence-" Confidence_Score
| project NetworkIP, ThreatType, Confidence_Score, SourceSystemExplanation
This query extracts the confidence score for the Anomali feeds and displays the network IP, threat type, confidence score, and source system.
Details
Rod Trent
Released: August 26, 2021
Tables
ThreatIntelligenceIndicator
Keywords
ThreatIntelligenceIndicatorConfidence_ScoreNetworkIPThreatTypeSourceSystem
Operators
parse-wherewith*project