IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Azure AD sigins - want to fetch more column items into the data table

  • 1.  Azure AD sigins - want to fetch more column items into the data table

    Posted Mon March 04, 2024 09:07 AM

    Hi Team,

    By using the default given manual playbook "Azure Active Directory - Get Sigins" , I am able to fetch & get some columns till IP Address. But I want to fetch below field/column values into the same data table. I added columns in data table & edited the post processing script to fetch them. There is no error but its not fetching results into datatable. Attaching screenshots & readme file for this azure ad integration for reference.

    clientAppUsed
    conditionalAccessStatus
    isInteractive
    riskDetail
    riskLevelAggregated
    riskLevelDuringSignIn
    riskState
    riskEventTypes
    resourceDisplayName
    status
    deviceDetail
    location



    ------------------------------
    Neha BirendraPrasadSinha
    ------------------------------

    Attachment(s)

    pdf
    Azure_AD_README 1.pdf   1.10 MB 1 version


  • 2.  RE: Azure AD sigins - want to fetch more column items into the data table

    Posted Thu March 07, 2024 08:55 AM
    Edited by HENRY CHUANG Thu March 07, 2024 08:56 AM

    Hi Neha,

    Can you show me the section of the post processing script that you are trying to achieve that ?



    ------------------------------
    HENRY CHUANG
    ------------------------------

    Original Message


  • 3.  RE: Azure AD sigins - want to fetch more column items into the data table

    Posted Fri March 08, 2024 02:29 AM

    Hi Henry,

    Thank you for the support.

    I have made some changes in the post processing script and it is working now.



    ------------------------------
    Neha BirendraPrasadSinha
    ------------------------------

    Original Message