- Introduction to Context Management
- Onboarding a Context Table
- Custom Context Tables
- Create a Custom Context Table by Importing a CSV File
- Create a Custom Context Table Using the Add Custom Option
- Working with Filtered Context Tables
- View and Interact with a Custom or Filtered Context Table
- View the Details Panel for a Custom or Filtered Context Table
- Edit the Configuration of Custom or Filtered Context Tables
- Active Directory Context Tables
- Prerequisites to Onboard an Active Directory Context Table
- Create an Active Directory Context Table
- View and Interact with an Active Directory Context Table
- View the Details Panel for an Active Directory Context Table
- Edit the Configuration of an Active Directory Context Table
- Default User Attribute Mapping for Active Directory
- Default Device Attribute Mapping for Active Directory
- CrowdStrike Context Tables
- Microsoft Entra ID Context Tables
- Prerequisites to Onboard a Microsoft Entra ID Context Table
- Create a Microsoft Entra ID Context Table
- View and Interact with a Microsoft Entra ID Context Table
- View the Details Panel for a Microsoft Entra ID Context Table
- Edit the Configuration of a Microsoft Entra ID Context Table
- Default User Attribute Mapping for Microsoft Entra ID
- Default Device Attribute Mapping for Microsoft Entra ID
- Okta Context Tables
- Custom Context Tables
- Add Data to an Existing Context Table
- Using Context Data in Downstream Applications
- Pre-Built Context Tables
- Context Management APIs
- Troubleshooting Context Management
View and Interact with a Crowdstrike Context Table
In the Overview tab of the Context Management service, click the name of the CrowdStrike context table. The context data contained in the table is displayed. The table columns represent the context table attributes. Each row represents a context data entity.
You can interact with the context data in the CrowdStrike context table in the following ways:
Filter the Data – To filter the data in the context table, enter a value in the Search field at the top of the table. You can search for full or partial values from any column. The table will filter to display only the rows that match the search criteria you entered. To remove the filter, delete the search value.
View Attributes – To view the values for all the attributes of a single data entity, click anywhere in a specific row on the detail page. An Attributes panel opens on the right. For information about the available attributes, see Default Device Attribute Mapping for CrowdStrike.
Edit the Values of a Manual Record – If a specific record was entered or updated manually, it will be represented by a custom icon () in the Source column instead of the CrowdStrike icon (). To edit the values of a single custom record, click the options icon () on the far right side of the data row and select the Edit option. An Edit Record dialog box opens. Edit the values you want to change and click Save Edits.
Delete the Values of a Manual Record – If a specific record was entered or updated manually, it will be represented by a custom icon () in the Source column instead of the CrowdStrike icon (). To delete a single custom record, click the options icon () on the far right side of the data row and select the Delete option. When prompted, confirm the deletion.
Export as CSV – To export the the data from a context table, click Export as CSV in the top right corner of the table. The context data is exported in a comma-separated value (CSV) format that can be downloaded. When the export is complete, you will receive a notification with a link to download the file to your local computer. The downloadable CSV file is available for seven days.
Alternately, you can click the notifications icon () in the top right corner of any window in the New-Scale Security Operations Platform. The Your Notifications pane is displayed and you can find the download link in the notification there.
Note
The exported file contains all of the columns in the context table, including columns that are hidden in the display.
Delete the Whole Context Table – To delete the entire context table, click the delete icon () in the top right corner of the page. When prompted, confirm that you want to delete the table. You can opt to remove any custom attributes that are not used in another context table.
Add Data to the Context Table – To add additional rows of data to the context table, click the plus icon () in the top right corner if page. You can opt to add data by uploading a CSV file or to add data manually. When added to the Okta context table, these new data rows will be represented by a custom icon () in the Source column instead of the CrowdStrike icon ().