Skip to content

Conversation

@mhebrard-bigid
Copy link
Contributor

@mhebrard-bigid mhebrard-bigid commented Jan 8, 2026

Change(s):

  • Renamed column "case" to "dspmCase" in BigIDDSPMCatalog_CL table schema
  • Renamed column "affectedObjects" to "expand" in BigIDDSPMCatalog_CL table schema
  • using ASI/Microsoft/MvExpandTransformer to expand the column "expand" into several entries instead of a list. Result goes eventually to BigIDDSPMAssetStore_CL after DCR
  • Added new table BigIDDSPMAssetStore_CL with comprehensive asset tracking schema including 25+ columns for asset metadata, permissions, classification, and risk information

Reason for Change(s):

  • Improved column naming clarity to avoid conflicts with reserved keywords ("case")
  • Enhanced data structure to support expanded BigID DSPM asset tracking capabilities
  • Added comprehensive asset store schema to capture detailed asset information including ownership, permissions, classification, and risk data

Version Updated:

  • N/A (Data Connector table schema changes, not a Detection/Analytic Rule template)

Testing Completed:

  • Yes - Validated JSON schema structure for both table definitions
  • Verified column types and descriptions are properly formatted

@mhebrard-bigid mhebrard-bigid requested review from a team as code owners January 8, 2026 11:22
@v-shukore v-shukore added the Solution Solution specialty review needed label Jan 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Solution Solution specialty review needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants