- Introduction to Context Management
- Onboarding a Context Table
- Custom Context Tables
- Create a Custom Context Table by Importing a CSV File
- Create a Custom Context Table Using the Add Custom Option
- Working with Filtered Context Tables
- View and Interact with a Custom or Filtered Context Table
- View the Details Panel for a Custom or Filtered Context Table
- Edit the Configuration of Custom or Filtered Context Tables
- Active Directory Context Tables
- Prerequisites to Onboard an Active Directory Context Table
- Create an Active Directory Context Table
- View and Interact with an Active Directory Context Table
- View the Details Panel for an Active Directory Context Table
- Edit the Configuration of an Active Directory Context Table
- Default User Attribute Mapping for Active Directory
- Default Device Attribute Mapping for Active Directory
- Anomali Context Tables
- Prerequisites to Onboard an Anomali Context Table
- Create an Anomali Context Table
- View and Interact with an Anomali Context Table
- View the Details Panel for an Anomali Context Table
- Edit the Configuration of an Anomali Context Table
- Default IP Attribute Mapping for Anomali
- Default Domain Attribute Mapping for Anomali
- CrowdStrike Context Tables
- Microsoft Entra ID Context Tables
- Prerequisites to Onboard a Microsoft Entra ID Context Table
- Create a Microsoft Entra ID Context Table
- View and Interact with a Microsoft Entra ID Context Table
- View the Details Panel for a Microsoft Entra ID Context Table
- Edit the Configuration of a Microsoft Entra ID Context Table
- Default User Attribute Mapping for Microsoft Entra ID
- Default Device Attribute Mapping for Microsoft Entra ID
- Okta Context Tables
- Recorded Future Context Tables
- Prerequisites to Onboard a Recorded Future Context Table
- Create a Recorded Future Context Table
- View and Interact with a Recorded Future Context Table
- View the Details Panel for a Recorded Future Context Table
- Edit the Configuration of a Recorded Future Context Table
- Default IP Attribute Mapping for Recorded Future
- Default Domain Attribute Mapping for Recorded Future
- STIX/TAXII Context Tables
- Prerequisites to Onboard a STIX/TAXII Context Table
- Create a STIX/TAXII Context Table
- View and Interact with a STIX/TAXII Context Table
- View the Details Panel for a STIX/TAXII Context Table
- Edit the Configuration of a STIX/TAXII Context Table
- Default IP Attribute Mapping for STIX/TAXII
- Default Domain Attribute Mapping for STIX/TAXII
- Custom Context Tables
- Add Data to an Existing Context Table
- Using Context Data in Downstream Applications
- Pre-Built Context Tables
- Context Management APIs
- Troubleshooting Context Management
View the Details Panel for a Recorded Future Context Table
In the Overview tab of the Context Management service, find a specific Recorded Future context table and click the Options icon (
) on the far right. Select Details. A panel opens on the right and displays the following information about the selected Recorded Future context table:
At the top of the panel, an overview is provided that includes the following information about the context table:
Context Table Type – The category of context data provided by the source.
Total Items – The number of records the context table contains.
Last Updated – How long ago records were fetched from the source.
Collection – Shows which Recorded Future cloud collector, from the Cloud Collector service, is the source of the data in the selected context table. The status indicates the state of that source collector. To view the source collector itself, click the View Collector link below the source collector name. The Cloud Collector service opens in a new tab and displays the source collector.
Processing – Shows the number of records the context table processed in its last run, as well as how long ago the context table was last updated. The status indicates the state of the context table in the Context Management service.
Error Messages – Displays the most recent error messages that occurred either on the Cloud Collector side or during processing of the Recorded Future data in the context table on the Context Management side.
In addition to viewing status information, you can also perform the following actions on the context table from this panel:
Click Edit to open the Configuration panel where you can edit the context table parameters. For more information, see Edit the Configuration of a Recorded Future Context Table.
Click Delete to remove the context table.