Skip to content

Latest commit

 

History

History
60 lines (49 loc) · 2.91 KB

advanced-hunting-exposuregraphedges-table.md

File metadata and controls

60 lines (49 loc) · 2.91 KB
title description search.appverid ms.service ms.subservice f1.keywords ms.author author ms.localizationpriority manager audience ms.collection ms.topic ms.date
ExposureGraphEdges table in the advanced hunting schema
Learn about the ExposureGraphEdges table of the advanced hunting schema, which provides attack surface information, to help you understand how potential threats might reach, and compromise, valuable assets.
met150
defender-xdr
adv-hunting
NOCSH
v-mjosephy
mjosephym
medium
rayne-wiselman
ITPro
m365-security
tier3
reference
03/13/2024

ExposureGraphEdges

[!INCLUDE Microsoft Defender XDR rebranding]

Applies to:

  • Microsoft Defender XDR
  • Microsoft Security Exposure Management (public preview)

Important

Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

The ExposureGraphEdges table in the advanced hunting schema provides visibility into relationships between entities and assets in the enterprise exposure graph. This visibility can help uncover critical organizational assets and explore entity relationships and attack paths. Use this reference to construct queries that return information from this table.

For information on other tables in the advanced hunting schema, see the advanced hunting reference.

Column name Data type Description
EdgeId string Unique identifier for the relationship/edge
EdgeLabel string The edge label like "routes traffic to"
SourceNodeId string Node ID of the edge's source
SourceNodeName string Source node display name
SourceNodeLabel string Source node label
SourceNodeCategories dynamic Categories list of the source node in JSON format
TargetNodeId string Node ID of the edge's target
TargetNodeName string Display name of the target node
TargetNodeLabel string Target node label
TargetNodeCategories dynamic The categories list of the target node in JSON format
EdgeProperties dynamic Optional data relevant for the relationship between the nodes in JSON format

Related articles