Rapid7 Digital Risk Protection Tables
Tables
Rapid7DRPAccountAssets
Account asset inventory grouped by asset type (domains, IPs, brands, etc.).
| Name | Type | Description |
|---|---|---|
| AssetTypeName | string | Asset type label for the account asset entry. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Value | string | Asset value listed under the asset type. |
Rapid7DRPAccountSummaries
Account Details
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| ExpirationDate | datetime | Account subscription expiration date. |
| SubscriptionType | string | Account subscription tier reported by Threat Command. |
| CVE | boolean | Whether the CVE module is enabled for the account. |
| Discovery | boolean | Whether the Discovery module is enabled for the account. |
| IntelliFind | boolean | Whether the IntelliFind module is enabled for the account. |
| InvestigationPage | boolean | Whether the Investigation Page module is enabled for the account. |
| IOC | boolean | Whether the IOC module is enabled for the account. |
| Remediation | boolean | Whether the Remediation module is enabled for the account. |
| ThreatLibrary | boolean | Whether the Threat Library module is enabled for the account. |
| VirtualAppliance | boolean | Whether the Virtual Appliance module is enabled for the account. |
| AssetsCount | integer | Current number of assets in use by the account. |
| AssetsLimit | integer | Maximum assets allowed for the account. |
| CreditsUsed | integer | Credits consumed by the account. |
| TotalCredits | integer | Total credit allocation for the account. |
| Count | integer | Number of remediations used by the account. |
| Total | integer | Total remediation allowance for the account. |
Rapid7DRPAccountUserDetails
User directory for the Threat Command tenant.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| string | User email address. | |
| FirstName | string | User first name. |
| ID | string | Threat Command user identifier. |
| IsDeleted | boolean | Whether the user is marked deleted in Threat Command. |
| LastName | string | User last name. |
| Role | string | Role name assigned to the user. |
Rapid7DRPAccountUserPermissions
Permission catalog assigned to account users.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| PermissionKey | string | Permission key assigned to users. |
Rapid7DRPAlertActivityLogs
Audit trail of actions taken on alerts.
| Name | Type | Description |
|---|---|---|
| ActivityID | string | Activity log entry identifier. |
| AdditionalInformationJson | string | Extra activity metadata returned by the API (JSON). |
| AlertID | string | Alert identifier associated with the activity. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| CreatedDate | datetime | Timestamp when the activity entry was created. |
| Initiator | string | User or system that created the activity entry. |
| ReadByJson | string | Users who read the activity entry (JSON list). |
| SubTypesJson | string | Activity subtypes returned by the API (JSON list). |
| Type | string | Activity type (e.g., status change, assignment, note). |
| UpdateDate | datetime | Timestamp when the activity entry was last updated. |
Rapid7DRPAlertAskTheAnalystConversations
Messages exchanged with Rapid7 analysts for an alert.
| Name | Type | Description |
|---|---|---|
| AlertID | string | Alert identifier this message belongs to. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Date | datetime | Message timestamp. |
| ID | long | Internal identifier for the conversation row. |
| Initiator | string | Message author. |
| Message | string | Conversation message text. |
Rapid7DRPAlertBlocklistStatuses
Blocklist status results for values linked to an alert.
| Name | Type | Description |
|---|---|---|
| AlertID | string | Alert identifier. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| ID | long | Internal identifier for the status row. |
| Status | string | Blocklist status for the value. |
| Value | string | Value checked or placed on a blocklist (e.g., domain, IP, URL). |
Rapid7DRPAlertReportStatuses
External reputation results (e.g., Google Web Risk, PhishTank) for alert values.
| Name | Type | Description |
|---|---|---|
| AdditionalStatusesJson | string | Other reputation results returned by the API (JSON). |
| AlertID | string | Alert identifier. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| GoogleWebRiskStatus | string | Result from Google Web Risk. |
| PhishTankStatus | string | Result from PhishTank. |
| Value | string | Reported value evaluated by external services. |
Rapid7DRPAlerts
Alerts generated by Threat Command for monitored assets and digital risks.
| Name | Type | Description |
|---|---|---|
| AlertID | string | Threat Command alert identifier. |
| AssigneesJson | string | Alert assignees as a JSON list. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ClosingReason | string | Reason the alert was closed. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Description | string | Alert description from the source. |
| FoundDate | datetime | Timestamp when Threat Command detected the alert. |
| IsClosed | boolean | Whether the alert is closed. |
| IsFlagged | boolean | Whether the alert is flagged by analysts. |
| Severity | string | Severity assigned by Threat Command. |
| SourceDate | datetime | Timestamp of the original source content. |
| SourceEmail | string | Source email address", "when applicable. |
Rapid7DRPAlertScenarioRelations
Reference mapping of alert type/subtype to scenario names and descriptions.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Description | string | Scenario description. |
| ID | long | Internal identifier for the scenario relation. |
| Scenario | string | Scenario key returned by the API. |
| SubType | string | Alert subtype. |
| Type | string | Alert type. |
Rapid7DRPAlertSourceTypes
Reference list of alert source categories.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| SourceType | string | Alert source-type label used by Threat Command. |
Rapid7DRPAlertSystemRiskScores
System-wide risk score for the account.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| SystemRiskScore | double | System-wide risk score returned by Threat Command. |
Rapid7DRPAlertTags
Tag catalog used on alerts.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| CreatedBy | string | User who created the tag. |
| Name | string | Tag display name. |
| TagID | string | Threat Command tag identifier. |
Rapid7DRPAlertTakedownStatuses
Takedown workflow statuses for alerts.
| Name | Type | Description |
|---|---|---|
| AlertID | string | Unique identifier for the alert. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Status | string | Takedown status value. |
Rapid7DRPAlertTypesSubtypesRelations
Reference list of alert type/subtype combinations.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| SubType | string | Alert type/subtype pairing. |
| Type | string | Alert type/subtype pairing. |
Rapid7DRPApiMetadata
Account zone/region identifier for the tenant.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Zone | string | Account zone/region string returned by the API. |
Rapid7DRPAssetCountriesOfActivity
Reference list of countries used for asset metadata.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | Country of activity name. |
Rapid7DRPAssets
Monitored asset inventory in Threat Command (domains, IPs, brands, etc.).
| Name | Type | Description |
|---|---|---|
| AddedOn | datetime | Date the asset was added to monitoring. |
| AssetID | string | Threat Command asset identifier. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| Comment | string | User-provided comment for the asset. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Type | string | Asset type (e.g., domain, IP, email). |
| Value | string | Asset value as stored in Threat Command. |
Rapid7DRPAssetSectors
Reference list of industry sectors used for asset metadata.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | Sector/industry name. |
Rapid7DRPAssetTags
Tag catalog used on assets.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | Asset tag value. |
Rapid7DRPAssetTechnologiesInUse
Detected technologies/products for assets or technology queries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Technology | string | Technology or product name detected in use. |
Rapid7DRPAssetTypes
Reference list of asset categories.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | Asset type label. |
Rapid7DRPCampaigns
Threat campaign catalog referenced by CVEs, IOCs, and threat library.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| CampaignName | string | Campaign name referenced by Threat Command. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
Rapid7DRPConfigCountriesAcronyms
Country code-to-name reference mapping.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| Code | string | Country code (acronym). |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | Country name. |
Rapid7DRPConfigNiceNumbers
Numeric reference codes and their descriptions.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| Code | string | Numeric code returned by the configuration endpoint. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Description | string | Description for the numeric code. |
Rapid7DRPConfigRegulatoryCompliances
Regulatory compliance flags and enablement settings.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| RegulatoryComplianceKey | string | Compliance flag key (e.g., IsEnabled, Data.PCIDSS). |
| Value | boolean | Boolean value for the compliance flag. |
Rapid7DRPConfigStatesAcronyms
State/region code-to-name reference mapping.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| Code | string | State/region code (acronym). |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | State/region name. |
Rapid7DRPCVECPEs
CPE product identifiers linked to CVEs.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| CPEID | string | SHA-256 hash key for the CPE entry. |
| Title | string | CPE title or product name. |
| Value | string | CPE string value. |
| VendorProduct | string | Vendor and product string. |
| VersionEndExcluding | string | Version range end (exclusive). |
| VersionEndIncluding | string | Version range end (inclusive). |
| VersionStartExcluding | string | Version range start (exclusive). |
| VersionStartIncluding | string | Version range start (inclusive). |
Rapid7DRPCVEs
CVE records with scoring, dates, and mention metadata.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| CVEID | string | CVE identifier (e.g., CVE-2023-12345). |
| CVSSScore | double | CVSS score for the CVE. |
| ExploitAvailability | boolean | Whether exploit availability is reported. |
| FirstMentionDate | datetime | First observed mention date. |
| IntsightsScore | integer | Threat Command IntSights score for the CVE. |
| LastMentionDate | datetime | Most recent mention date. |
| MentionsAmount | integer | Total number of mentions for the CVE. |
| MentionsPerSourceJson | string | JSON map of mention counts by source. |
| PublishedDate | datetime | CVE publication date. |
| Severity | string | Severity rating for the CVE. |
| UpdateDate | datetime | CVE last update date. |
Rapid7DRPCVEVulnerabilityOrigins
Sources that reported or registered the CVE.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | Name/label for the CVE. |
Rapid7DRPIocReportedFeeds
Reported feed catalog associated with IOCs.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfidenceLevel | integer | Confidence level reported by the feed. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | Reported feed name. |
| ReportedFeedID | string | Reported feed identifier. |
Rapid7DRPIocs
Indicator-of-compromise records from Threat Command.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| FirstSeen | datetime | First observed timestamp for the IOC. |
| Geolocation | string | Geolocation string reported for the IOC. |
| IocId | guid | Compyl-generated GUID for the IOC row. |
| LastSeen | datetime | Most recent observation timestamp for the IOC. |
| LastUpdateDate | datetime | Last update timestamp for the IOC record. |
| Score | integer | IOC score assigned by Threat Command. |
| Severity | string | IOC severity. |
| Status | string | IOC status. |
| SubType | string | IOC subtype (e.g., hash type). |
| Type | string | IOC type. |
| Value | string | IOC value (domain, IP, hash, URL, email). |
| ValueHash | binary(32) | SHA-256 hash of the normalized IOC value (dedup key). |
| Whitelisted | boolean | Whether the IOC is whitelisted. |
Rapid7DRPIocSources
IOC source catalog (intelligence feeds, file sources, email sources).
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfidenceLevel | integer | Confidence level reported by the source. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| IsEnabled | boolean | Whether the source is enabled. |
| Name | string | IOC source name. |
| SourceID | string | IOC source identifier. |
| SourceType | string | IOC source category (IntelligenceFeed, Files, Emails). |
Rapid7DRPIocTags
Tag catalog for IOCs.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Name | string | IOC tag value. |
Rapid7DRPIocUserWhitelists
User-managed IOC whitelist entries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| IocUserWhitelistID | long | Internal identifier for the whitelist entry. |
| Type | string | IOC type for the whitelist entry. |
| Value | string | IOC value that is whitelisted. |
| Whitelisted | boolean | Whether the IOC value is whitelisted. |
Rapid7DRPMalware
Malware catalog referenced by CVEs, IOCs, and threat library.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| MalwareName | string | Malware name referenced by Threat Command. |
Rapid7DRPSslCertificateThreatBrokenChainOrderDomains
Domains with broken certificate chain order linked to SSL certificate threats.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Domain | string | Domain with an invalid certificate chain order. |
| SslCertificateThreatID | string | Unique identifier for the ssl certificate threat. |
Rapid7DRPSslCertificateThreatLinkedDomains
Domains linked to SSL certificate threats.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Domain | string | Domain linked to the certificate threat. |
| SslCertificateThreatID | string | Unique identifier for the ssl certificate threat. |
Rapid7DRPSslCertificateThreatNameMismatchDomains
Domains with certificate name mismatches linked to SSL certificate threats.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Domain | string | Domain where the certificate name mismatches. |
| SslCertificateThreatID | string | Unique identifier for the ssl certificate threat. |
Rapid7DRPSslCertificateThreats
SSL certificate-related threat records (suspicious or abusive certificates).
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| CertificateCreationDate | datetime | Certificate creation (notBefore) date. |
| CertificateExpirationDate | datetime | Certificate expiration (notAfter) date. |
| CertificateSerialNumber | string | Certificate serial number. |
| CertificateStatusCertificateExpired | boolean | Whether the certificate is expired. |
| CertificateStatusCertNameMismatch | boolean | Whether the certificate name mismatches the domain. |
| CertificateStatusInvalidCertificateChainOrder | boolean | Whether the certificate chain order is invalid. |
| CertificateStatusOcspNotTrusted | boolean | Whether OCSP is not trusted. |
| CertificateStatusSha1InCertificateChain | boolean | Whether SHA1 appears in the certificate chain. |
| CertificateStatusUntrustedCert | boolean | Whether the certificate is untrusted. |
| CertificateStatusValid | boolean | Whether the certificate is valid. |
| CommonName | string | Certificate common name (CN). |
Rapid7DRPSslIssuesThreatDetectedIssues
Detected SSL configuration issues for SSL issues threats.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Description | string | Detected issue description. |
| Name | string | Detected issue identifier. |
| SslIssuesThreatID | string | SSL issues threat identifier. |
| Title | string | Detected issue title. |
Rapid7DRPSslIssuesThreats
SSL configuration issue threat records.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| LastReportDate | datetime | Last report date for the threat. |
| LastSourceDate | datetime | Last source observation date for the threat. |
| MatchedAssetsJson | string | Raw matched-asset values as JSON. |
| ServerIPAddress | string | Server IP address with SSL issues. |
| SslIssuesThreatID | string | SSL issues threat identifier. |
Rapid7DRPThreatActors
Threat actor catalog referenced by CVEs, IOCs, and threat library.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| ThreatActorName | string | Threat actor name referenced by Threat Command. |
Rapid7DRPThreatLibraryAliases
Aliases for threat library entries.
| Name | Type | Description |
|---|---|---|
| AliasName | string | Alias value for the threat library entry. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
Rapid7DRPThreatLibraryCyberTerms
Threat library entries such as actors, campaigns, malware, and tools.
| Name | Type | Description |
|---|---|---|
| AdditionalInformation | string | Additional information text for the term. |
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| CreatedDate | datetime | Threat library term creation date. |
| CyberTermID | string | Threat library cyber-term identifier. |
| Overview | string | Threat library overview text. |
| Severity | string | Threat library severity rating. |
| Type | string | Threat library term type (Malware, Threat Actor, Campaign). |
| UpdatedDate | datetime | Threat library term last update date. |
| Value | string | Threat library term value/name. |
Rapid7DRPThreatLibraryMitreTactics
MITRE ATT&CK tactics referenced by threat library entries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| MitreTacticName | string | MITRE ATTACK tactic name. |
Rapid7DRPThreatLibraryMitreTechniques
MITRE ATT&CK techniques referenced by threat library entries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| MitreTechniqueId | guid | Compyl-generated GUID for the technique. |
| Name | string | MITRE ATTACK technique name. |
| TechniqueHash | string | SHA-256 hash of technique name and URL (dedup key). |
| Url | string | MITRE ATTACK technique URL. |
Rapid7DRPThreatLibraryOrigins
Origin descriptors for threat library entries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| OriginName | string | Origin descriptor for the threat library entry. |
Rapid7DRPThreatLibraryTargetCountries
Target countries for threat library entries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| TargetCountryName | string | Target country name for the threat library entry. |
Rapid7DRPThreatLibraryTargetSectors
Target sectors for threat library entries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| TargetSectorName | string | Target sector name for the threat library entry. |
Rapid7DRPThreatLibraryTtps
TTPs associated with threat library entries.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| TtpName | string | TTP name associated with the threat library entry. |
Rapid7DRPTimezones
Reference list of timezones supported by Threat Command.
| Name | Type | Description |
|---|---|---|
| BatchDate | datetime | UTC timestamp when this sync batch loaded the row. |
| ConfigID | integer | Compyl integration configuration ID for this Threat Command connection. |
| Timezone | string | Timezone identifier returned by the API. |
Bridge Tables
Rapid7DRPAccountUserDetails_Rapid7DRPAccountUserPermissions
Links Account User Details to Account User Permissions.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| ID | string | FK to Rapid7DRPAccountUserDetails.ID for this configuration. |
| PermissionKey | string | FK to Rapid7DRPAccountUserPermissions.PermissionKey for this configuration. |
Rapid7DRPAlerts_Rapid7DRPAlertTags
Links Alerts to Alert Tags.
| Name | Type | Description |
|---|---|---|
| AlertID | string | FK to Rapid7DRPAlerts.AlertID for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| TagID | string | FK to Rapid7DRPAlertTags.TagID for this configuration. |
Rapid7DRPAlerts_Rapid7DRPAssets
Links Alerts to Assets.
| Name | Type | Description |
|---|---|---|
| AlertID | string | FK to Rapid7DRPAlerts.AlertID for this configuration. |
| AssetID | string | FK to Rapid7DRPAssets.AssetID for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
Rapid7DRPAlerts_Rapid7DRPSslCertificateThreats
Links Alerts to SSL Certificate Threats.
| Name | Type | Description |
|---|---|---|
| AlertID | string | FK to Rapid7DRPAlerts.AlertID for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| SslCertificateThreatID | string | FK to Rapid7DRPSslCertificateThreats.SslCertificateThreatID for this configuration. |
Rapid7DRPAlerts_Rapid7DRPSslIssuesThreats
Links Alerts to SSL Issues Threats.
| Name | Type | Description |
|---|---|---|
| AlertID | string | FK to Rapid7DRPAlerts.AlertID for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| SslIssuesThreatID | string | FK to Rapid7DRPSslIssuesThreats.SslIssuesThreatID for this configuration. |
Rapid7DRPAssets_Rapid7DRPAssetTags
Links Assets to Asset Tags.
| Name | Type | Description |
|---|---|---|
| AssetID | string | FK to Rapid7DRPAssets.AssetID for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| Name | string | FK to Rapid7DRPAssetTags.Name for this configuration. |
Rapid7DRPAssets_Rapid7DRPSslCertificateThreats
Links Assets to SSL Certificate Threats.
| Name | Type | Description |
|---|---|---|
| AssetID | string | FK to Rapid7DRPAssets.AssetID for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| SslCertificateThreatID | string | FK to Rapid7DRPSslCertificateThreats.SslCertificateThreatID for this configuration. |
Rapid7DRPAssets_Rapid7DRPSslIssuesThreats
Links Assets to SSL Issues Threats.
| Name | Type | Description |
|---|---|---|
| AssetID | string | FK to Rapid7DRPAssets.AssetID for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| SslIssuesThreatID | string | FK to Rapid7DRPSslIssuesThreats.SslIssuesThreatID for this configuration. |
Rapid7DRPCampaigns_Rapid7DRPCVEs
Links Campaigns to CVEs.
| Name | Type | Description |
|---|---|---|
| CampaignName | string | FK to Rapid7DRPCampaigns.CampaignName for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CVEID | string | FK to Rapid7DRPCVEs.CVEID for this configuration. |
Rapid7DRPCampaigns_Rapid7DRPIocs
Links Campaigns to IOCs.
| Name | Type | Description |
|---|---|---|
| CampaignName | string | FK to Rapid7DRPCampaigns.CampaignName for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| IocId | guid | FK to Rapid7DRPIocs.IocId for this configuration. |
Rapid7DRPCampaigns_Rapid7DRPThreatLibraryCyberTerms
Links Campaigns to Threat Library Cyber Terms.
| Name | Type | Description |
|---|---|---|
| CampaignName | string | FK to Rapid7DRPCampaigns.CampaignName for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
Rapid7DRPCVECPEs_Rapid7DRPCVEs
Links CVECPEs to CVEs.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CPEID | string | FK to Rapid7DRPCVECPEs.CPEID for this configuration. |
| CVEID | string | FK to Rapid7DRPCVEs.CVEID for this configuration. |
Rapid7DRPCVEs_Rapid7DRPCVEVulnerabilityOrigins
Links CVEs to CVEVulnerability Origins.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CVEID | string | FK to Rapid7DRPCVEs.CVEID for this configuration. |
| Name | string | FK to Rapid7DRPCVEVulnerabilityOrigins.Name for this configuration. |
Rapid7DRPCVEs_Rapid7DRPMalware
Links CVEs to Malware.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CVEID | string | FK to Rapid7DRPCVEs.CVEID for this configuration. |
| MalwareName | string | FK to Rapid7DRPMalware.MalwareName for this configuration. |
Rapid7DRPCVEs_Rapid7DRPThreatActors
Links CVEs to Threat Actors.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CVEID | string | FK to Rapid7DRPCVEs.CVEID for this configuration. |
| ThreatActorName | string | FK to Rapid7DRPThreatActors.ThreatActorName for this configuration. |
Rapid7DRPCVEs_Rapid7DRPThreatLibraryCyberTerms
Links CVEs to Threat Library Cyber Terms.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CVEID | string | FK to Rapid7DRPCVEs.CVEID for this configuration. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
Rapid7DRPIocReportedFeeds_Rapid7DRPIocs
Links IOC Reported Feeds to IOCs.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| IocId | guid | FK to Rapid7DRPIocs.IocId for this configuration. |
| ReportedFeedID | string | FK to Rapid7DRPIocReportedFeeds.ReportedFeedID for this configuration. |
Rapid7DRPIocs_Rapid7DRPIocTags
Links IOCs to IOC Tags.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| IocId | guid | FK to Rapid7DRPIocs.IocId for this configuration. |
| Name | string | FK to Rapid7DRPIocTags.Name for this configuration. |
Rapid7DRPIocs_Rapid7DRPMalware
Links IOCs to Malware.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| IocId | guid | FK to Rapid7DRPIocs.IocId for this configuration. |
| MalwareName | string | FK to Rapid7DRPMalware.MalwareName for this configuration. |
Rapid7DRPIocs_Rapid7DRPThreatActors
Links IOCs to Threat Actors.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| IocId | guid | FK to Rapid7DRPIocs.IocId for this configuration. |
| ThreatActorName | string | FK to Rapid7DRPThreatActors.ThreatActorName for this configuration. |
Rapid7DRPIocs_Rapid7DRPThreatLibraryCyberTerms
Links IOCs to Threat Library Cyber Terms.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| IocId | guid | FK to Rapid7DRPIocs.IocId for this configuration. |
Rapid7DRPMalware_Rapid7DRPThreatLibraryCyberTerms
Links Malware to Threat Library Cyber Terms.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| MalwareName | string | FK to Rapid7DRPMalware.MalwareName for this configuration. |
Rapid7DRPThreatActors_Rapid7DRPThreatLibraryCyberTerms
Links Threat Actors to Threat Library Cyber Terms.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| ThreatActorName | string | FK to Rapid7DRPThreatActors.ThreatActorName for this configuration. |
Rapid7DRPThreatLibraryAliases_Rapid7DRPThreatLibraryCyberTerms
Links Threat Library Aliases to Threat Library Cyber Terms.
| Name | Type | Description |
|---|---|---|
| AliasName | string | FK to Rapid7DRPThreatLibraryAliases.AliasName for this configuration. |
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryMitreTactics
Links Threat Library Cyber Terms to Threat Library MITRE Tactics.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| MitreTacticName | string | FK to Rapid7DRPThreatLibraryMitreTactics.MitreTacticName for this configuration. |
Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryOrigins
Links Threat Library Cyber Terms to Threat Library Origins.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| OriginName | string | FK to Rapid7DRPThreatLibraryOrigins.OriginName for this configuration. |
Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryTargetCountries
Links Threat Library Cyber Terms to Threat Library Target Countries.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| TargetCountryName | string | Relationship key column TargetCountryName. |
| . |
Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryTargetSectors
Links Threat Library Cyber Terms to Threat Library Target Sectors.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| TargetSectorName | string | FK to Rapid7DRPThreatLibraryTargetSectors.TargetSectorName for this configuration. |
Rapid7DRPThreatLibraryCyberTerms_Rapid7DRPThreatLibraryTtps
Links Threat Library Cyber Terms to Threat Library TTPs.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| CyberTermID | string | FK to Rapid7DRPThreatLibraryCyberTerms.CyberTermID for this configuration. |
| TtpName | string | FK to Rapid7DRPThreatLibraryTtps.TtpName for this configuration. |
Rapid7DRPThreatLibraryMitreTactics_Rapid7DRPThreatLibraryMitreTechniques
Links Threat Library MITRE Tactics to Threat Library MITRE Techniques.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Compyl integration configuration ID for this relationship. |
| MitreTacticName | string | FK to Rapid7DRPThreatLibraryMitreTactics.MitreTacticName for this configuration. |
| MitreTechniqueId | string | Relationship key column MitreTechniqueId. |
Updated 8 months ago