Query Details
MITRE ATLAS Csv Parser
Query
let ATLAS = externaldata (source_name:string,url:string,external_id:string,name:string,description:string,x_mitre_shortname:string,created_by_ref:string,object_marking_refs:string,type:string,id:string,created:string,modified:string) [@"https://raw.githubusercontent.com/rod-trent/Copilot-for-Security/main/Plugins/Data/atlas.csv"] with (ignoreFirstRecord=true, format="csv"); ATLAS | distinct external_id, name, description, type, url
Explanation
This query retrieves data from an external source called ATLAS and then displays only unique values for the columns external_id, name, description, type, and url.
Details
Rod Trent
Released: May 1, 2024
Tables
ATLAS
Keywords
Devices,Intune,User
Operators
letexternaldatawithdistinct|","ignoreFirstRecordformat