For the complete documentation index, see llms.txt. This page is also available as Markdown.

VM

The VM entity represents an Azure Virtual Machine resource.

Field
Type
Possible Operators
Description

Guid

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Unique identifier for the entity in Forestall

ObjectID

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Azure Object ID of the virtual machine

FSName

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Display name used in Forestall

TenantID

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Azure AD Tenant ID the VM belongs to

AAD Login Extension Installed

BOOLEAN

N/A (toggle)

Whether the Microsoft Entra ID (AAD) login extension is installed on the VM

risk

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Risk score calculated by Forestall.

ExposurePoint

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Exposure point score calculated by Forestall.

Last updated

Was this helpful?