Forum Discussion
IOC's cross custom tables
Hi CliveWatson when using the above query i am trying to search across multiple tables at once and see if there is a match for any relevant IOC 1. i am managing several lists: IP. Hash. URL etc an...
Hi CliveWatson
when trying to add to the query additional external data such as https://openphish.com/feed.txt
as there is no deceleration of the column names in the feed i am unable to determine what is the proper syntax of adding this.
let openphish = externaldata ( domain:string) ([@"https://openphish.com/feed.txt"] with (format="txt"));
I cant make that file open with externaldata - do you also get a Query Aborted error?
- Ofer_Shezaf
Microsoft
OmriPinsker : My guess is that openpish has some protection mechanism in place that blocks externaldata. As a long shot, you may want to check with them, however using Logic Apps to copy it daily to Azure storage would be easier.
