Global Search Default Table Columns

This table provides an overview of the system columns as available in the Global Search table. The majority of the columns for each tab are based on the default Threat Rules, which are not listed further mentioned below. If you create your own Threat Rules, those will also be available in Global Search.

Tab	Column	Description
Identities	Identity Id	A 32-bit UUID for the found identity.
	Identity Name	The name under which the identity was established in the system.
	Identity Email	The email associated with the established identity.
	Mapped Accounts	Number of accounts mapped to the specific identity.
Accounts	Platform	The system platform from which the account was collection.
	Data Source	The collector module that retrieved the account data.
	Id	A 32-bit UUID for the found account.
	Data Source Id	A 32-bit UUID for the data source that collected the account data.
	Login Shell	Shell used for the service account.
	Home Dir	If applicable the home directory for account.
	Domain	Corporate domain for the account.
	Provider	The OpenID provider established for the this account.
	Computer Name	The device name if part of the collected account data.
	Type	One of four: User, Service, Resource, or Computer account as it exists on a platform. The type defines what object the account is, for example, an account of `Type: User` with a `Classification: Service`.
	Display Name	The established display name for the collected account.
	Account Name	The name under which the account was initially created.
	Mapped Identities	The names of the mapped identities for the account.
	Path	Location of the account object, like the OU of account. Location where the account object exists.
	Email	The email address associated with the account.
	UPN	The User Principal Name for the established account (name and email slug or domain reference)
	Login Age	Time past since the last sign in to this account.
	Password Age	Time past since the password on the account was last rotated.
	MFA	Multi-factor authentication is enable or disabled for the account.
	Status	MFA status availability for the account.
Groups	Group Platform	The system platform on which this group was discovered.
	Data Source	The collector module that retrieved the group data.
	Group Domain	The directory service domain for the retrieved group.
	Group Provider	The OpenID provider established for the this group.
	Group Computer Name	The device name for the group if part of the collected account data.
	Group Name	The group name of the group as established in the directory service.
	Group Display Name	The group display name under which the group was established in the directory service.
	Group Path	Location where the group object exists.
	Direct Member Count	Number of direct members in the group.
	Expanded Member Count	Number of expanded members in the group.

Global Search Search Library