diff --git a/.script/tests/KqlvalidationsTests/CustomTables/SentinelOne_CL.json b/.script/tests/KqlvalidationsTests/CustomTables/SentinelOne_CL.json
index 6f7c3076b3a..4ea5a75943b 100644
--- a/.script/tests/KqlvalidationsTests/CustomTables/SentinelOne_CL.json
+++ b/.script/tests/KqlvalidationsTests/CustomTables/SentinelOne_CL.json
@@ -389,6 +389,10 @@
     "Name": "_ResourceId",
     "Type": "string"
   },
+  {
+    "Name": "_ItemId",
+    "Type": "string"
+  },
   {
     "Name": "alertInfo_indicatorDescription_s",
     "Type": "string"
diff --git a/Sample Data/ASIM/SentinelOne_CL_Schema.csv b/Sample Data/ASIM/SentinelOne_CL_Schema.csv
index 7432410acb8..ff16136c833 100644
--- a/Sample Data/ASIM/SentinelOne_CL_Schema.csv	
+++ b/Sample Data/ASIM/SentinelOne_CL_Schema.csv	
@@ -311,3 +311,4 @@ RawData,6,"System.String",string
 "activeDirectory_lastUserDistinguishedName_s",309,"System.String",string
 Type,310,"System.String",string
 "_ResourceId",311,"System.String",string
+"_ItemId",312,"System.String",string