{
  "version": "Notebook/1.0",
  "items": [
    {
      "type": 1,
      "content": {
        "json": "# DomainTools Threat Intelligence Dashboard\nVisualize and correlate DomainTools threat domain data.\n---\n\nThis workbook provides insights into domains flagged by DomainTools, their ingestion frequency, domain types."
      },
      "name": "Header"
    },
    {
      "type": 3,
      "content": {
        "version": "KqlItem/1.0",
        "query": "DomainToolsThreatIntelDomains_CL\n| where TimeGenerated > ago(12h)\n| summarize Count = count() by bin(TimeGenerated, 1h), domaintype\n| order by TimeGenerated asc\n| render barchart",
        "size": 0,
        "title": "Domains in Last 12 Hours",
        "timeContext": {
          "durationMs": 43200000
        },
        "queryType": 0,
        "resourceType": "microsoft.operationalinsights/workspaces",
        "visualization": "barchart"
      },
      "name": "Last12HourDomains"
    },
    {
      "type": 3,
      "content": {
        "version": "KqlItem/1.0",
        "query": "DomainToolsThreatIntelDomains_CL\n| summarize Count = count() by domaintype\n| render piechart",
        "size": 3,
        "title": "Domain Count by Type",
        "queryType": 0,
        "resourceType": "microsoft.operationalinsights/workspaces"
      },
      "customWidth": "50",
      "name": "DomainTypePie",
      "styleSettings": {
        "maxWidth": "50%"
      }
    },
    {
      "type": 3,
      "content": {
        "version": "KqlItem/1.0",
        "query": "DomainToolsThreatIntelDomains_CL\n| summarize TotalDomains = count(), LatestIngestion = max(TimeGenerated)",
        "size": 4,
        "title": "Overview: Ingested Domains Summary",
        "timeContext": {
          "durationMs": 2592000000
        },
        "queryType": 0,
        "resourceType": "microsoft.operationalinsights/workspaces",
        "gridSettings": {
          "labelSettings": [
            {
              "columnId": "TotalDomains",
              "label": "Total Domains Ingested"
            },
            {
              "columnId": "LatestIngestion",
              "label": "Recent Ingestion Date & Time"
            }
          ]
        }
      },
      "customWidth": "50",
      "name": "Summary",
      "styleSettings": {
        "maxWidth": "50%"
      }
    }
  ],
  "fromTemplateId": "sentinel-Workbook",
  "$schema": "https://github.com/Microsoft/Application-Insights-Workbooks/blob/master/schema/workbook.json"
}