--- title: Attribute mapping and classification for the Service Graph Connector for Microsoft Defender for IoT \(On-premises Management Console\) description: The following tables describe the attribute mapping and classification for sensors and devices. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/operational-technology/operational-technology-manager/attribute-mapping-sgc-msft-d4iot-on-prem.html release: australia product: Operational Technology Manager classification: operational-technology-manager topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 7 breadcrumb: [Service Graph Connector for Microsoft Defender for IoT \(On-premises Management Console\), Integrate, Operational Technology Manager, Operational Technology] --- # Attribute mapping and classification for the Service Graph Connector for Microsoft Defender for IoT \(On-premises Management Console\) The following tables describe the attribute mapping and classification for sensors and devices.
Payload field name Data type Mapped to table Mapped to field Description
id String format: /subscriptions/<subscription-id>/provider/<provider>/locations/<location>/sites/<site>/sensor/<sensor-name> - sys\_object\_source - cmdb\_ci\_nids - snk in sys\_object\_source - correlation\_id Unique ID for the sensor.
name String cmdb\_ci\_nids name Name of the sensor.
properties.hostname String cmdb\_ci\_nids fqdn Host name of the sensor.
properties.ip String cmdb\_ci\_ip\_address ip\_address IP address of the sensor.
properties.learningMode Boolean cmdb\_ci\_nids False or unavailable: Life Cycle Stage \(life\_cycle\_stage\) : Operational Life Cycle Stage Status \(life\_cycle\_stage\_status\): In Use True: Life Cycle Stage \(life\_cycle\_stage\) : Operational Life Cycle Stage Status \(life\_cycle\_stage\_status\): Learning Learning mode status of the IoT sensor.
properties.mac String cmdb\_ci\_network\_adapter name, mac\_address MAC address of the sensor.
properties.sensorStatus String cmdb\_ci\_nids connection\_state Status of the IoT sensor.
properties.sensorVersion String cmdb\_ci\_nids firmware\_version Version of the IoT sensor.
properties.upSince\_utc Date and time as string cmdb\_ci\_nids first\_discovered Startup time.
properties.zone String cmdb\_ci\_nids zone Zone of the IoT sensor.
Payload field name Data type Mapped to table Mapped to field Description
id String format: /subscriptions/subscription-id>/providers/<providers-id>/location/<location>/deviceGroups/<device-Group>/devices/<name-field> - sys\_object\_source - cmdb\_ot\_entity - cmdb\_key\_value\_v2 - snk in sys\_object\_source - discovery\_source\_id in cmdb\_ot\_entity Unique ID for the device.
resourceGroup \(Empty\) cmdb\_key\_value\_v2 \(Empty\) Resource group
tenantId \(Empty\) cmdb\_key\_value\_v2 \(Empty\) Tenant ID
properties.authorizedState String cmdb\_key\_value\_v2 \(Empty\) Authorized state of the device
properties.criticality String cmdb\_ot\_entity business\_criticality Criticality of the device
properties.deviceName String cmdb\_ci name Name of the device.
properties.deviceSubTypeDisplayName String cmdb\_ci sys\_class\_name Device subtype display name.
properties.firstSeen Date and time as string - cmdb\_ci - cmdb\_ci\_ot\_control\_module \(if control modules are present\) first\_discovered First time the device was seen.
properties.lastSeen Date and time as string - cmdb\_ci - cmdb\_ci\_ot\_control\_module \(if control modules are present\) most\_recent\_discovery Last time the device was seen.
properties.purdueLevel String cmdb\_ot\_entity purdue\_level Purdue level of the device.
properties.operatingSystem.distribution String cmdb\_ci\_computer os OS distribution
properties.operatingSystem.version String cmdb\_ci\_computer os\_version OS version
properties.operatingSystem.platform String cmdb\_ci\_computer os\_domain OS platform
properties.operatingSystem.architecture String cmdb\_ci\_computer os\_address\_width OS architecture
properties.additionalFields.plcKeyState \(Empty\) cmdb\_ci\_ot\_plc switch\_position PLC key state
properties.additionalFields.plcRunState \(Empty\) cmdb\_ci\_ot\_plc switch\_remote\_mode PLC run state
properties.hardware Object \(Empty\) \(Empty\) Device hardware data
properties.hardware.model String cmdb\_ci \(Empty\) Hardware model
properties.hardware.serialNumber String cmdb\_serial\_number serial\_number Hardware serial number
properties.hardware.vendor String cmdb\_ci manufacturer Hardware vendor
properties.nics Array of Objects \(Empty\) \(Empty\) List of the device network interface cards.
properties.nics\[\{\}\] Object \(Empty\) \(Empty\) Network interface card properties
properties.nics\[\{\}\].ipv4Address String cmdb\_ci\_ip\_address ip\_address IPv4 address
properties.nics\[\{\}\].macAddress String cmdb\_ci\_network\_adapter name, mac MAC Address
properties.slots Array of Objects \(Empty\) \(Empty\) List of the device slot in the backplane.
properties.slots\[\{\}\] Object \(Empty\) \(Empty\) Slot data in PLC backplane.
properties.slots\[\{\}\].firmwareVersion String cmdb\_ci\_ot\_control\_module firmware\_version Firmware version of the slot.
properties.slots\[\{\}\].model String cmdb\_ci\_ot\_control\_module model\_id Model of the slot.
properties.slots\[\{\}\].rackNumber Integer cmdb\_ci\_ot\_control\_module rack\_number Rack number in the backplane
properties.slots\[\{\}\].serialNumber String cmdb\_ci\_ot\_control\_module serial\_number Serial number of the slot.
properties.slots\[\{\}\].slotNumber Integer cmdb\_ci\_ot\_control\_module slot\_number Slot number inside the rack.
properties.slots\[\{\}\].hardwareVendor String cmdb\_ci\_ot\_control\_module vendor Hardware vendor of the slot.
Microsoft Azure device sub type name Microsoft Azure device type name Operating system/firmware NOW class NOW table NOW OT type
Alarm Siren \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Alarm System \(Empty\) \(Empty\) OT Control System cmdb\_ci\_ot\_control OT Control System
ATM \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Backup Server \(Empty\) \(Empty\) Server cmdb\_ci\_server NULL
Barcode Scanner \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
DB Server \(Empty\) \(Empty\) Server cmdb\_ci\_server NULL
DCS Controller Industrial \(Empty\) DCS cmdb\_ci\_ot\_dcs NULL
Domain Controller \(Empty\) \(Empty\) Server cmdb\_ci\_server NULL
Door Control Panel \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
DVR \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Elevator \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Engineering Station Industrial \(Empty\) EWS cmdb\_ci\_ot\_ews EWS
Fire Alarm \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Fire Detector \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Firewall \(Empty\) \(Empty\) IP Firewall cmdb\_ci\_ip\_firewall NULL
Game console \(Empty\) \(Empty\) Game Console cmdb\_ci\_game\_console NULL
Historian \(Empty\) \(Empty\) Historian cmdb\_ci\_ot\_historian Historian
HMI Industrial \(Empty\) HMI cmdb\_ci\_ot\_hmi HMI
Humidity Sensor \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
HVAC \(Empty\) \(Empty\) HVAC Equipment cmdb\_ci\_hvac NULL
I/O Adapter \(Empty\) \(Empty\) Network Adapter \(Empty\) NA
IED \(Empty\) \(Empty\) IED cmdb\_ci\_ot\_ied ied
Industrial Packaging System \(Empty\) \(Empty\) OT Field Device cmdb\_ci\_ot\_field\_device OT Field Device
Industrial Robot \(Empty\) \(Empty\) Industrial Robot cmdb\_ci\_ot\_industrial\_robot Industrial Robot
Industrial Scale \(Empty\) \(Empty\) OT Field Device cmdb\_ci\_ot\_field\_device OT Field Device
Intercom \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
IP Camera \(Empty\) \(Empty\) IP Camera cmdb\_ci\_ip\_camera NULL
IP Telephone \(Empty\) \(Empty\) IP phone cmdb\_ci\_ip\_phone NULL
Marquee \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Meter \(Empty\) \(Empty\) Industrial Sensor cmdb\_ci\_ot\_industrial\_sensor Industrial Sensor
Motion Detector \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Multicast/Broadcast \(Empty\) \(Empty\) Netgear cmdb\_ci\_netgear NULL
NTP Server \(Empty\) \(Empty\) Server cmdb\_ci\_server NULL
People Counter System \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Physical Location \(Empty\) \(Empty\) \(Empty\) \(Empty\) NULL
PLC Industrial \(Empty\) PLC cmdb\_ci\_ot\_plc PLC
Pneumatic Device \(Empty\) \(Empty\) Industrial Actuator cmdb\_ci\_ot\_industrial\_actuator Industrial Actuator
Printer \(Empty\) \(Empty\) Printer cmdb\_ci\_printer NULL
Protocol Converter \(Empty\) \(Empty\) Netgear cmdb\_ci\_netgear NULL
Punch Clock \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Robot Controller \(Empty\) \(Empty\) OT Control System cmdb\_ci\_ot\_control OT Control System
Router \(Empty\) \(Empty\) IP Router cmdb\_ci\_ip\_router NULL
RTU \(Empty\) \(Empty\) RTU cmdb\_ci\_ot\_rtu NULL
Server Server \(Empty\) Server cmdb\_ci\_server NULL
Servo Drive \(Empty\) \(Empty\) Industrial Actuator cmdb\_ci\_ot\_industrial\_actuator Industrial Actuator
Slot \(Empty\) \(Empty\) OT Control Module cmdb\_ci\_ot\_control\_module OT Control Module
Smart Light \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Smart Phone \(Empty\) \(Empty\) Handheld Computing Device cmdb\_ci\_handheld\_computing NULL
Smart Switch \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Smart TV \(Empty\) \(Empty\) Smart Television cmdb\_ci\_stv NULL
Storage \(Empty\) \(Empty\) Server cmdb\_ci\_server NULL
Switch Network Device \(Empty\) IP Switch cmdb\_ci\_ip\_switch NULL
Tablet \(Empty\) \(Empty\) Handheld Computing Device cmdb\_ci\_handheld\_computing NULL
Terminal Station \(Empty\) \(Empty\) Computer cmdb\_ci\_computer NULL
Thermostat \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot NULL
Turnstile \(Empty\) \(Empty\) IoT device cmdb\_ci\_iot  
Uninterruptable Power Supply \(Empty\) \(Empty\) UPS cmdb\_ci\_ups NULL
Variable Frequency Drive \(Empty\) \(Empty\) Industrial Drive cmdb\_ci\_ot\_industrial\_drive Industrial Drive
VPN Gateway \(Empty\) \(Empty\) Netgear cmdb\_ci\_netgear NULL
Wifi Pineapple \(Empty\) \(Empty\) Netgear cmdb\_ci\_netgear NULL
Wireless Access Point \(Empty\) \(Empty\) Wireless Access Point cmdb\_ci\_wap\_network NULL
WLAN access point Network Device \(Empty\) Wireless Access Point cmdb\_ci\_wap\_network NULL
Workstation Workstation \(Empty\) Computer cmdb\_ci\_computer NULL
Unknown All \(Empty\) Operational Technology \(OT\) cmdb\_ci\_ot Operational Technology \(OT\)
Unclassified Unclassified or All \(Empty\) Operational Technology \(OT\) cmdb\_ci\_ot Operational Technology \(OT\)
Any other type \(Empty\) \(Empty\) Operational Technology \(OT\) cmdb\_ci\_ot Operational Technology \(OT\)
Any above type value except with designation Network and IoT \(Empty\) - windows server - windows server, version 2004\[8\] - windows server, version 1909\[9\] - windows server, version 1903\[9\] - windows server 2019 - windows server 2016 - windows server 2012 r2 - windows server 2012 - windows server 2008 r2 - windows server 2008 - windows server 2003 r2 - windows server 2003 - windows 2000 server - windows nt 4.0 server - windows nt 3.51 server - windows nt 3.5 server - windows nt 3.1 server Windows Server cmdb\_ci\_linux\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) - linux - arch - centos - debian - fedora - suse - red hat - rhel - ubuntu - oracle Linux Server cmdb\_ci\_linux\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) aix AIX Server cmdb\_ci\_aix\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) esx ESX Server cmdb\_ci\_esx\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) - hp/ux - hpux HP-UX Server cmdb\_ci\_hpux\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) - hyper-v - hyperv - hyper HypverV Server cmdb\_ci\_hyper\_v\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) - solaris - sunos - sun os Solaris Server cmdb\_ci\_solaris\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) - macos x server - macos server - os x - osx OSX Server cmdb\_ci\_osx\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) - unix - gnu Unix Server cmdb\_ci\_unix\_server Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) - win - windows - Microsoft - windows 1.0, 1.02, 1.03, 1.04, 2.03, 2.10, 2.11, 3.0, 3.1, 3.2, 7, 8, 8.1, 10, 98, 95 - windows 2000 - windows for workgroups 3.11 - windows me - windows nt 3.1, 3.5, 3.51, 4.0 - windows vista - windows xp - windows xp professional x64 edition Base Computer class cmdb\_ci\_computer Same as when the operating system isn't present.
Any above type value except with designation Network and IoT \(Empty\) server Base Server Class cmdb\_ci\_server Same as when the operating system isn't present.
**Parent Topic:**[Service Graph Connector for Microsoft Defender for IoT \(On-premises Management Console\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/operational-technology/operational-technology-manager/integration-sgc-microsoft-defender-iot-on-prem.md)