Lookup Tables
Reference data sets used in SIEM queries to enrich or filter events, such as lists of known-good assets, threat indicators, or business context, so detections and investigations can match events against known values.
Concept Neighborhood
Explore this concept’s connections in the groups below.
Start here
Alert Design
A related concept to explore, covered by 5 lessons.
Alert DesignStart here
5
lessons
Alert Triage Methodology
5
lessons
Baseline Analysis
5
lessons
First-Seen Detection
5
lessons
Kusto Query Language
5
lessons
IOC Operationalization
3
lessons
Show 2 more connections
Related Lessons
5 lessons cover this conceptSIEM Data Models and Log Normalization
SOC Analyst
Aggregation and Statistical Analysis for Threat Detection
SOC Analyst
Time-Series Analysis and Multi-Source Correlation
SOC Analyst
Query Tuning, Lookup Tables, and Production Operations
SOC Analyst
Designing a Detection Program with SIEM Queries
SOC Analyst
Sign in to open lesson content directly.