azure / Azure-Sentinel
Components

An overview of source code logical components.

Intro

Logical decomposition is a representation of the organization of the main source code, where every and each file is put in exactly one logical component.

Logical Decompositions Overview

Analyzed system has 1 logical decomposition:

Logical Decomposition #1: PRIMARY

The decompositions is based on the folder structure at level 1 (relative to the source code root).

Bubble Chart | Tree Map
Component Sizes (Lines of Code)
The "primary" logical decomposition has 12 components.
  • 6,161 files, 393,808 LOC (36.8% vs. main code).
  • "Solutions" is biggest, containing 62.57% of LOC.
  • "Summary rules" is smallest, containing 0.05% of LOC.


Solutions246415 LOC (23%) 3,838 files
Parsers63987 LOC (5%) 371 files
Hunting Queries26731 LOC (2%) 1,105 files
Tools17831 LOC (1%) 80 files
Detections14964 LOC (1%) 483 files
DataConnectors14255 LOC (1%) 128 files
ASIM5454 LOC (<1%) 70 files
Exploration Queries2285 LOC (<1%) 56 files
Playbooks692 LOC (<1%) 18 files
Watchlists593 LOC (<1%) 4 files
Tutorials415 LOC (<1%) 1 file
Summary rules186 LOC (<1%) 7 files
Component Commits
Components ordered by number of commits
Total Commits per Component
All commits, some commits may include files from multiple components.
Solutions7273 commits (16%)
Detections4663 commits (10%)
Parsers3148 commits (6%)
Hunting Queries2975 commits (6%)
Tools1837 commits (4%)
DataConnectors1807 commits (4%)
ASIM912 commits (2%)
Exploration Queries378 commits (<1%)
Playbooks376 commits (<1%)
Watchlists63 commits (<1%)
Tutorials24 commits (<1%)
Summary rules16 commits (<1%)
Yearly File Updates Trend per Components
The number of file changes in commits
animated commit history: all time cumulative | 12 months window
2025 2024 2023 2022 2021 2020 2019
Solutions
8886
96222
115972
56690
13041
Hunting Queries
818
9761
27405
26684
9779
1344
357
Parsers
326
8828
18711
10392
363
29
Detections
30
7906
31740
22375
19405
2752
1018
DataConnectors
366
2296
2236
754
1268
498
29
ASIM
48
1204
3971
1689
Tools
197
937
2750
947
697
35
Summary rules
112
Playbooks
26
82
464
52
67
30
Exploration Queries
2
57
857
143
1092
905
9
Watchlists
24
28
58
Tutorials
5
19


Dependencies between components in same commits (past 180 days)
The number on the lines shows the number of shared commits.
See detailed temporal dependencies report...

G Solutions Solutions Solutions--Solutions 432 Parsers Parsers Solutions--Parsers 48 DataConnectors DataConnectors Solutions--DataConnectors 78 Tools Tools Solutions--Tools 76 Hunting Queries Hunting Queries Solutions--Hunting Queries 69 Detections Detections Solutions--Detections 56 ASIM ASIM Solutions--ASIM 43 Playbooks Playbooks Solutions--Playbooks 42 Exploration Queries Exploration Queries Solutions--Exploration Queries 21 Parsers--Parsers 90 Parsers--Tools 19 Parsers--Hunting Queries 28 Parsers--Detections 19 Parsers--ASIM 39 Parsers--Exploration Queries 10 DataConnectors--Parsers 31 DataConnectors--DataConnectors 61 DataConnectors--ASIM 21 Tools--DataConnectors 43 Tools--Tools 59 Tools--Detections 29 Tools--ASIM 10 Tools--Playbooks 17 Tools--Exploration Queries 12 Hunting Queries--DataConnectors 45 Hunting Queries--Tools 39 Hunting Queries--Hunting Queries 52 Hunting Queries--Detections 36 Hunting Queries--ASIM 25 Hunting Queries--Exploration Queries 14 Detections--DataConnectors 29 Detections--Detections 18 Detections--ASIM 21 ASIM--ASIM 38 Playbooks--Parsers 22 Playbooks--DataConnectors 24 Playbooks--Hunting Queries 25 Playbooks--Detections 35 Playbooks--ASIM 27 Playbooks--Playbooks 20 Playbooks--Exploration Queries 19 Exploration Queries--DataConnectors 11 Exploration Queries--Detections 20 Exploration Queries--ASIM 15 Summary rules Summary rules Summary rules--Solutions 14 Summary rules--DataConnectors 11 Summary rules--Tools 5 Summary rules--Hunting Queries 13 Summary rules--Playbooks 4 Summary rules--Summary rules 16

2025-05-06 21:46