Rapid7 Digital Risk Protection Tables

Tables

Rapid7DRPAccountAssets

Account asset inventory grouped by asset type (domains, IPs, brands, etc.).

NameTypeDescription
AssetTypeNamestringAsset type label for the account asset entry.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
ValuestringAsset value listed under the asset type.

Rapid7DRPAccountSummaries

Account Details

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
ExpirationDatedatetimeAccount subscription expiration date.
SubscriptionTypestringAccount subscription tier reported by Threat Command.
CVEbooleanWhether the CVE module is enabled for the account.
DiscoverybooleanWhether the Discovery module is enabled for the account.
IntelliFindbooleanWhether the IntelliFind module is enabled for the account.
InvestigationPagebooleanWhether the Investigation Page module is enabled for the account.
IOCbooleanWhether the IOC module is enabled for the account.
RemediationbooleanWhether the Remediation module is enabled for the account.
ThreatLibrarybooleanWhether the Threat Library module is enabled for the account.
VirtualAppliancebooleanWhether the Virtual Appliance module is enabled for the account.
AssetsCountintegerCurrent number of assets in use by the account.
AssetsLimitintegerMaximum assets allowed for the account.
CreditsUsedintegerCredits consumed by the account.
TotalCreditsintegerTotal credit allocation for the account.
CountintegerNumber of remediations used by the account.
TotalintegerTotal remediation allowance for the account.

Rapid7DRPAccountUserDetails

User directory for the Threat Command tenant.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
EmailstringUser email address.
FirstNamestringUser first name.
IDstringThreat Command user identifier.
IsDeletedbooleanWhether the user is marked deleted in Threat Command.
LastNamestringUser last name.
RolestringRole name assigned to the user.

Rapid7DRPAccountUserPermissions

Permission catalog assigned to account users.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
PermissionKeystringPermission key assigned to users.

Rapid7DRPAlertActivityLogs

Audit trail of actions taken on alerts.

NameTypeDescription
ActivityIDstringActivity log entry identifier.
AdditionalInformationJsonstringExtra activity metadata returned by the API (JSON).
AlertIDstringAlert identifier associated with the activity.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
CreatedDatedatetimeTimestamp when the activity entry was created.
InitiatorstringUser or system that created the activity entry.
ReadByJsonstringUsers who read the activity entry (JSON list).
SubTypesJsonstringActivity subtypes returned by the API (JSON list).
TypestringActivity type (e.g., status change, assignment, note).
UpdateDatedatetimeTimestamp when the activity entry was last updated.

Rapid7DRPAlertAskTheAnalystConversations

Messages exchanged with Rapid7 analysts for an alert.

NameTypeDescription
AlertIDstringAlert identifier this message belongs to.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DatedatetimeMessage timestamp.
IDlongInternal identifier for the conversation row.
InitiatorstringMessage author.
MessagestringConversation message text.

Rapid7DRPAlertBlocklistStatuses

Blocklist status results for values linked to an alert.

NameTypeDescription
AlertIDstringAlert identifier.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
IDlongInternal identifier for the status row.
StatusstringBlocklist status for the value.
ValuestringValue checked or placed on a blocklist (e.g., domain, IP, URL).

Rapid7DRPAlertReportStatuses

External reputation results (e.g., Google Web Risk, PhishTank) for alert values.

NameTypeDescription
AdditionalStatusesJsonstringOther reputation results returned by the API (JSON).
AlertIDstringAlert identifier.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
GoogleWebRiskStatusstringResult from Google Web Risk.
PhishTankStatusstringResult from PhishTank.
ValuestringReported value evaluated by external services.

Rapid7DRPAlerts

Alerts generated by Threat Command for monitored assets and digital risks.

NameTypeDescription
AlertIDstringThreat Command alert identifier.
AssigneesJsonstringAlert assignees as a JSON list.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ClosingReasonstringReason the alert was closed.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DescriptionstringAlert description from the source.
FoundDatedatetimeTimestamp when Threat Command detected the alert.
IsClosedbooleanWhether the alert is closed.
IsFlaggedbooleanWhether the alert is flagged by analysts.
SeveritystringSeverity assigned by Threat Command.
SourceDatedatetimeTimestamp of the original source content.
SourceEmailstringSource email address", "when applicable.

Rapid7DRPAlertScenarioRelations

Reference mapping of alert type/subtype to scenario names and descriptions.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DescriptionstringScenario description.
IDlongInternal identifier for the scenario relation.
ScenariostringScenario key returned by the API.
SubTypestringAlert subtype.
TypestringAlert type.

Rapid7DRPAlertSourceTypes

Reference list of alert source categories.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
SourceTypestringAlert source-type label used by Threat Command.

Rapid7DRPAlertSystemRiskScores

System-wide risk score for the account.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
SystemRiskScoredoubleSystem-wide risk score returned by Threat Command.

Rapid7DRPAlertTags

Tag catalog used on alerts.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
CreatedBystringUser who created the tag.
NamestringTag display name.
TagIDstringThreat Command tag identifier.

Rapid7DRPAlertTakedownStatuses

Takedown workflow statuses for alerts.

NameTypeDescription
AlertIDstringUnique identifier for the alert.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
StatusstringTakedown status value.

Rapid7DRPAlertTypesSubtypesRelations

Reference list of alert type/subtype combinations.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
SubTypestringAlert type/subtype pairing.
TypestringAlert type/subtype pairing.

Rapid7DRPApiMetadata

Account zone/region identifier for the tenant.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
ZonestringAccount zone/region string returned by the API.

Rapid7DRPAssetCountriesOfActivity

Reference list of countries used for asset metadata.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringCountry of activity name.

Rapid7DRPAssets

Monitored asset inventory in Threat Command (domains, IPs, brands, etc.).

NameTypeDescription
AddedOndatetimeDate the asset was added to monitoring.
AssetIDstringThreat Command asset identifier.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
CommentstringUser-provided comment for the asset.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
TypestringAsset type (e.g., domain, IP, email).
ValuestringAsset value as stored in Threat Command.

Rapid7DRPAssetSectors

Reference list of industry sectors used for asset metadata.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringSector/industry name.

Rapid7DRPAssetTags

Tag catalog used on assets.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringAsset tag value.

Rapid7DRPAssetTechnologiesInUse

Detected technologies/products for assets or technology queries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
TechnologystringTechnology or product name detected in use.

Rapid7DRPAssetTypes

Reference list of asset categories.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringAsset type label.

Rapid7DRPCampaigns

Threat campaign catalog referenced by CVEs, IOCs, and threat library.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
CampaignNamestringCampaign name referenced by Threat Command.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.

Rapid7DRPConfigCountriesAcronyms

Country code-to-name reference mapping.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
CodestringCountry code (acronym).
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringCountry name.

Rapid7DRPConfigNiceNumbers

Numeric reference codes and their descriptions.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
CodestringNumeric code returned by the configuration endpoint.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DescriptionstringDescription for the numeric code.

Rapid7DRPConfigRegulatoryCompliances

Regulatory compliance flags and enablement settings.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
RegulatoryComplianceKeystringCompliance flag key (e.g., IsEnabled, Data.PCIDSS).
ValuebooleanBoolean value for the compliance flag.

Rapid7DRPConfigStatesAcronyms

State/region code-to-name reference mapping.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
CodestringState/region code (acronym).
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringState/region name.

Rapid7DRPCVECPEs

CPE product identifiers linked to CVEs.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
CPEIDstringSHA-256 hash key for the CPE entry.
TitlestringCPE title or product name.
ValuestringCPE string value.
VendorProductstringVendor and product string.
VersionEndExcludingstringVersion range end (exclusive).
VersionEndIncludingstringVersion range end (inclusive).
VersionStartExcludingstringVersion range start (exclusive).
VersionStartIncludingstringVersion range start (inclusive).

Rapid7DRPCVEs

CVE records with scoring, dates, and mention metadata.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
CVEIDstringCVE identifier (e.g., CVE-2023-12345).
CVSSScoredoubleCVSS score for the CVE.
ExploitAvailabilitybooleanWhether exploit availability is reported.
FirstMentionDatedatetimeFirst observed mention date.
IntsightsScoreintegerThreat Command IntSights score for the CVE.
LastMentionDatedatetimeMost recent mention date.
MentionsAmountintegerTotal number of mentions for the CVE.
MentionsPerSourceJsonstringJSON map of mention counts by source.
PublishedDatedatetimeCVE publication date.
SeveritystringSeverity rating for the CVE.
UpdateDatedatetimeCVE last update date.

Rapid7DRPCVEVulnerabilityOrigins

Sources that reported or registered the CVE.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringName/label for the CVE.

Rapid7DRPIocReportedFeeds

Reported feed catalog associated with IOCs.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfidenceLevelintegerConfidence level reported by the feed.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringReported feed name.
ReportedFeedIDstringReported feed identifier.

Rapid7DRPIocs

Indicator-of-compromise records from Threat Command.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
FirstSeendatetimeFirst observed timestamp for the IOC.
GeolocationstringGeolocation string reported for the IOC.
IocIdguidCompyl-generated GUID for the IOC row.
LastSeendatetimeMost recent observation timestamp for the IOC.
LastUpdateDatedatetimeLast update timestamp for the IOC record.
ScoreintegerIOC score assigned by Threat Command.
SeveritystringIOC severity.
StatusstringIOC status.
SubTypestringIOC subtype (e.g., hash type).
TypestringIOC type.
ValuestringIOC value (domain, IP, hash, URL, email).
ValueHashbinary(32)SHA-256 hash of the normalized IOC value (dedup key).
WhitelistedbooleanWhether the IOC is whitelisted.

Rapid7DRPIocSources

IOC source catalog (intelligence feeds, file sources, email sources).

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfidenceLevelintegerConfidence level reported by the source.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
IsEnabledbooleanWhether the source is enabled.
NamestringIOC source name.
SourceIDstringIOC source identifier.
SourceTypestringIOC source category (IntelligenceFeed, Files, Emails).

Rapid7DRPIocTags

Tag catalog for IOCs.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
NamestringIOC tag value.

Rapid7DRPIocUserWhitelists

User-managed IOC whitelist entries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
IocUserWhitelistIDlongInternal identifier for the whitelist entry.
TypestringIOC type for the whitelist entry.
ValuestringIOC value that is whitelisted.
WhitelistedbooleanWhether the IOC value is whitelisted.

Rapid7DRPMalware

Malware catalog referenced by CVEs, IOCs, and threat library.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
MalwareNamestringMalware name referenced by Threat Command.

Rapid7DRPSslCertificateThreatBrokenChainOrderDomains

Domains with broken certificate chain order linked to SSL certificate threats.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DomainstringDomain with an invalid certificate chain order.
SslCertificateThreatIDstringUnique identifier for the ssl certificate threat.

Rapid7DRPSslCertificateThreatLinkedDomains

Domains linked to SSL certificate threats.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DomainstringDomain linked to the certificate threat.
SslCertificateThreatIDstringUnique identifier for the ssl certificate threat.

Rapid7DRPSslCertificateThreatNameMismatchDomains

Domains with certificate name mismatches linked to SSL certificate threats.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DomainstringDomain where the certificate name mismatches.
SslCertificateThreatIDstringUnique identifier for the ssl certificate threat.

Rapid7DRPSslCertificateThreats

SSL certificate-related threat records (suspicious or abusive certificates).

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
CertificateCreationDatedatetimeCertificate creation (notBefore) date.
CertificateExpirationDatedatetimeCertificate expiration (notAfter) date.
CertificateSerialNumberstringCertificate serial number.
CertificateStatusCertificateExpiredbooleanWhether the certificate is expired.
CertificateStatusCertNameMismatchbooleanWhether the certificate name mismatches the domain.
CertificateStatusInvalidCertificateChainOrderbooleanWhether the certificate chain order is invalid.
CertificateStatusOcspNotTrustedbooleanWhether OCSP is not trusted.
CertificateStatusSha1InCertificateChainbooleanWhether SHA1 appears in the certificate chain.
CertificateStatusUntrustedCertbooleanWhether the certificate is untrusted.
CertificateStatusValidbooleanWhether the certificate is valid.
CommonNamestringCertificate common name (CN).

Rapid7DRPSslIssuesThreatDetectedIssues

Detected SSL configuration issues for SSL issues threats.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
DescriptionstringDetected issue description.
NamestringDetected issue identifier.
SslIssuesThreatIDstringSSL issues threat identifier.
TitlestringDetected issue title.

Rapid7DRPSslIssuesThreats

SSL configuration issue threat records.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
LastReportDatedatetimeLast report date for the threat.
LastSourceDatedatetimeLast source observation date for the threat.
MatchedAssetsJsonstringRaw matched-asset values as JSON.
ServerIPAddressstringServer IP address with SSL issues.
SslIssuesThreatIDstringSSL issues threat identifier.

Rapid7DRPThreatActors

Threat actor catalog referenced by CVEs, IOCs, and threat library.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
ThreatActorNamestringThreat actor name referenced by Threat Command.

Rapid7DRPThreatLibraryAliases

Aliases for threat library entries.

NameTypeDescription
AliasNamestringAlias value for the threat library entry.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.

Rapid7DRPThreatLibraryCyberTerms

Threat library entries such as actors, campaigns, malware, and tools.

NameTypeDescription
AdditionalInformationstringAdditional information text for the term.
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
CreatedDatedatetimeThreat library term creation date.
CyberTermIDstringThreat library cyber-term identifier.
OverviewstringThreat library overview text.
SeveritystringThreat library severity rating.
TypestringThreat library term type (Malware, Threat Actor, Campaign).
UpdatedDatedatetimeThreat library term last update date.
ValuestringThreat library term value/name.

Rapid7DRPThreatLibraryMitreTactics

MITRE ATT&CK tactics referenced by threat library entries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
MitreTacticNamestringMITRE ATTACK tactic name.

Rapid7DRPThreatLibraryMitreTechniques

MITRE ATT&CK techniques referenced by threat library entries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
MitreTechniqueIdguidCompyl-generated GUID for the technique.
NamestringMITRE ATTACK technique name.
TechniqueHashstringSHA-256 hash of technique name and URL (dedup key).
UrlstringMITRE ATTACK technique URL.

Rapid7DRPThreatLibraryOrigins

Origin descriptors for threat library entries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
OriginNamestringOrigin descriptor for the threat library entry.

Rapid7DRPThreatLibraryTargetCountries

Target countries for threat library entries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
TargetCountryNamestringTarget country name for the threat library entry.

Rapid7DRPThreatLibraryTargetSectors

Target sectors for threat library entries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
TargetSectorNamestringTarget sector name for the threat library entry.

Rapid7DRPThreatLibraryTtps

TTPs associated with threat library entries.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
TtpNamestringTTP name associated with the threat library entry.

Rapid7DRPTimezones

Reference list of timezones supported by Threat Command.

NameTypeDescription
BatchDatedatetimeUTC timestamp when this sync batch loaded the row.
ConfigIDintegerCompyl integration configuration ID for this Threat Command connection.
TimezonestringTimezone identifier returned by the API.

Bridge Tables

Rapid7DRPAccountUserDetails_Rapid7DRPAccountUserPermissions

Links Account User Details to Account User Permissions.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
IDstringFK to Rapid7DRPAccountUserDetails.ID for this configuration.
PermissionKeystringFK to Rapid7DRPAccountUserPermissions.PermissionKey for this configuration.

Rapid7DRPAlerts_Rapid7DRPAlertTags

Links Alerts to Alert Tags.

NameTypeDescription
AlertIDstringFK to Rapid7DRPAlerts.AlertID for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
TagIDstringFK to Rapid7DRPAlertTags.TagID for this configuration.

Rapid7DRPAlerts_Rapid7DRPAssets

Links Alerts to Assets.

NameTypeDescription
AlertIDstringFK to Rapid7DRPAlerts.AlertID for this configuration.
AssetIDstringFK to Rapid7DRPAssets.AssetID for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.

Rapid7DRPAlerts_Rapid7DRPSslCertificateThreats

Links Alerts to SSL Certificate Threats.

NameTypeDescription
AlertIDstringFK to Rapid7DRPAlerts.AlertID for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
SslCertificateThreatIDstringFK to Rapid7DRPSslCertificateThreats.SslCertificateThreatID for this configuration.

Rapid7DRPAlerts_Rapid7DRPSslIssuesThreats

Links Alerts to SSL Issues Threats.

NameTypeDescription
AlertIDstringFK to Rapid7DRPAlerts.AlertID for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
SslIssuesThreatIDstringFK to Rapid7DRPSslIssuesThreats.SslIssuesThreatID for this configuration.

Rapid7DRPAssets_Rapid7DRPAssetTags

Links Assets to Asset Tags.

NameTypeDescription
AssetIDstringFK to Rapid7DRPAssets.AssetID for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
NamestringFK to Rapid7DRPAssetTags.Name for this configuration.

Rapid7DRPAssets_Rapid7DRPSslCertificateThreats

Links Assets to SSL Certificate Threats.

NameTypeDescription
AssetIDstringFK to Rapid7DRPAssets.AssetID for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
SslCertificateThreatIDstringFK to Rapid7DRPSslCertificateThreats.SslCertificateThreatID for this configuration.

Rapid7DRPAssets_Rapid7DRPSslIssuesThreats

Links Assets to SSL Issues Threats.

NameTypeDescription
AssetIDstringFK to Rapid7DRPAssets.AssetID for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
SslIssuesThreatIDstringFK to Rapid7DRPSslIssuesThreats.SslIssuesThreatID for this configuration.

Rapid7DRPCampaigns_Rapid7DRPCVEs

Links Campaigns to CVEs.

NameTypeDescription
CampaignNamestringFK to Rapid7DRPCampaigns.CampaignName for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
CVEIDstringFK to Rapid7DRPCVEs.CVEID for this configuration.

Rapid7DRPCampaigns_Rapid7DRPIocs

Links Campaigns to IOCs.

NameTypeDescription
CampaignNamestringFK to Rapid7DRPCampaigns.CampaignName for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
IocIdguidFK to Rapid7DRPIocs.IocId for this configuration.

Rapid7DRPCampaigns_Rapid7DRPThreatLibraryCyberTerms

Links Campaigns to Threat Library Cyber Terms.

NameTypeDescription
CampaignNamestringFK to Rapid7DRPCampaigns.CampaignName for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.

Rapid7DRPCVECPEs_Rapid7DRPCVEs

Links CVECPEs to CVEs.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CPEIDstringFK to Rapid7DRPCVECPEs.CPEID for this configuration.
CVEIDstringFK to Rapid7DRPCVEs.CVEID for this configuration.

Rapid7DRPCVEs_Rapid7DRPCVEVulnerabilityOrigins

Links CVEs to CVEVulnerability Origins.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CVEIDstringFK to Rapid7DRPCVEs.CVEID for this configuration.
NamestringFK to Rapid7DRPCVEVulnerabilityOrigins.Name for this configuration.

Rapid7DRPCVEs_Rapid7DRPMalware

Links CVEs to Malware.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CVEIDstringFK to Rapid7DRPCVEs.CVEID for this configuration.
MalwareNamestringFK to Rapid7DRPMalware.MalwareName for this configuration.

Rapid7DRPCVEs_Rapid7DRPThreatActors

Links CVEs to Threat Actors.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CVEIDstringFK to Rapid7DRPCVEs.CVEID for this configuration.
ThreatActorNamestringFK to Rapid7DRPThreatActors.ThreatActorName for this configuration.

Rapid7DRPCVEs_Rapid7DRPThreatLibraryCyberTerms

Links CVEs to Threat Library Cyber Terms.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CVEIDstringFK to Rapid7DRPCVEs.CVEID for this configuration.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.

Rapid7DRPIocReportedFeeds_Rapid7DRPIocs

Links IOC Reported Feeds to IOCs.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
IocIdguidFK to Rapid7DRPIocs.IocId for this configuration.
ReportedFeedIDstringFK to Rapid7DRPIocReportedFeeds.ReportedFeedID for this configuration.

Rapid7DRPIocs_Rapid7DRPIocTags

Links IOCs to IOC Tags.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
IocIdguidFK to Rapid7DRPIocs.IocId for this configuration.
NamestringFK to Rapid7DRPIocTags.Name for this configuration.

Rapid7DRPIocs_Rapid7DRPMalware

Links IOCs to Malware.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
IocIdguidFK to Rapid7DRPIocs.IocId for this configuration.
MalwareNamestringFK to Rapid7DRPMalware.MalwareName for this configuration.

Rapid7DRPIocs_Rapid7DRPThreatActors

Links IOCs to Threat Actors.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
IocIdguidFK to Rapid7DRPIocs.IocId for this configuration.
ThreatActorNamestringFK to Rapid7DRPThreatActors.ThreatActorName for this configuration.

Rapid7DRPIocs_Rapid7DRPThreatLibraryCyberTerms

Links IOCs to Threat Library Cyber Terms.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
IocIdguidFK to Rapid7DRPIocs.IocId for this configuration.

Rapid7DRPMalware_Rapid7DRPThreatLibraryCyberTerms

Links Malware to Threat Library Cyber Terms.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
MalwareNamestringFK to Rapid7DRPMalware.MalwareName for this configuration.

Rapid7DRPThreatActors_Rapid7DRPThreatLibraryCyberTerms

Links Threat Actors to Threat Library Cyber Terms.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
ThreatActorNamestringFK to Rapid7DRPThreatActors.ThreatActorName for this configuration.

Rapid7DRPThreatLibraryAliases_Rapid7DRPThreatLibraryCyberTerms

Links Threat Library Aliases to Threat Library Cyber Terms.

NameTypeDescription
AliasNamestringFK to Rapid7DRPThreatLibraryAliases.AliasName for this configuration.
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.

Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryMitreTactics

Links Threat Library Cyber Terms to Threat Library MITRE Tactics.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
MitreTacticNamestringFK to Rapid7DRPThreatLibraryMitreTactics.MitreTacticName for this configuration.

Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryOrigins

Links Threat Library Cyber Terms to Threat Library Origins.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
OriginNamestringFK to Rapid7DRPThreatLibraryOrigins.OriginName for this configuration.

Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryTargetCountries

Links Threat Library Cyber Terms to Threat Library Target Countries.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
TargetCountryNamestringRelationship key column TargetCountryName.
.

Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryTargetSectors

Links Threat Library Cyber Terms to Threat Library Target Sectors.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
TargetSectorNamestringFK to Rapid7DRPThreatLibraryTargetSectors.TargetSectorName for this configuration.

Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryTtps

Links Threat Library Cyber Terms to Threat Library TTPs.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
CyberTermIDstringFK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration.
TtpNamestringFK to Rapid7DRPThreatLibraryTtps.TtpName for this configuration.

Rapid7DRPThreatLibraryMitreTactics_Rapid7DRPThreatLibraryMitreTechniques

Links Threat Library MITRE Tactics to Threat Library MITRE Techniques.

NameTypeDescription
ConfigIDintegerCompyl integration configuration ID for this relationship.
MitreTacticNamestringFK to Rapid7DRPThreatLibraryMitreTactics.MitreTacticName for this configuration.
MitreTechniqueIdstringRelationship key column MitreTechniqueId.


Did this page help you?