- Introduction to Context Management
- Onboarding a Context Table
- Custom Context Tables
- Create a Custom Context Table by Importing a CSV File
- Create a Custom Context Table Using the Add Custom Option
- Working with Filtered Context Tables
- View and Interact with a Custom or Filtered Context Table
- View the Details Panel for a Custom or Filtered Context Table
- Edit the Configuration of Custom or Filtered Context Tables
- Active Directory Context Tables
- Prerequisites to Onboard an Active Directory Context Table
- Create an Active Directory Context Table
- View and Interact with an Active Directory Context Table
- View the Details Panel for an Active Directory Context Table
- Edit the Configuration of an Active Directory Context Table
- Default User Attribute Mapping for Active Directory
- Default Device Attribute Mapping for Active Directory
- CrowdStrike Context Tables
- Microsoft Entra ID Context Tables
- Prerequisites to Onboard a Microsoft Entra ID Context Table
- Create a Microsoft Entra ID Context Table
- View and Interact with a Microsoft Entra ID Context Table
- View the Details Panel for a Microsoft Entra ID Context Table
- Edit the Configuration of a Microsoft Entra ID Context Table
- Default User Attribute Mapping for Microsoft Entra ID
- Default Device Attribute Mapping for Microsoft Entra ID
- Okta Context Tables
- Custom Context Tables
- Add Data to an Existing Context Table
- Using Context Data in Downstream Applications
- Pre-Built Context Tables
- Context Management APIs
- Troubleshooting Context Management
Pre-Built Context Tables
The Context Management service includes support for the following types of pre-built context tables:
Pre-Built Threat Intelligence Context Tables – A set of context tables that provide curated threat intelligence data and known malicious domains and IP addresses.
Pre-Built AI/LLM Context Tables – A set of context tables that support AI/LLM dashboards. These dashboards monitor the use of AI/LLM websites and applications by users and devices in your environment.
Pre-Built New-Scale Analytics Context Tables – A set of context tables that support activities for the New Scale Analytics detection engine and in the Attack Surface Insights application.
Note
License Requirement for New-Scale Analytics Context Tables
Currently, New-Scale Analytics context tables can only be accessed if you have the New-Scale Analytics license. Access to these tables will be available to other licenses in the near future.