CheckPointHEC Classifier

CheckPointHEC Classifier to CheckPointHEC Security Event Type

Check Point Harmony Email and Collaboration (HEC) Classification

Details

ID	`CheckPointHEC Classifier`
Type	classification
Version	-1
From Version	6.9.0
Default Incident Type	—
Feed	No

Key Type Map

Key	Incident Type
`anomaly`	CheckPointHEC Security Event
`alert`	CheckPointHEC Security Event
`dlp`	CheckPointHEC Security Event
`malicious_url`	CheckPointHEC Security Event
`malicious_url_click`	CheckPointHEC Security Event
`malware`	CheckPointHEC Security Event
`phishing`	CheckPointHEC Security Event
`shadow_it`	CheckPointHEC Security Event
`suspicious_phishing`	CheckPointHEC Security Event
`suspicious_malware`	CheckPointHEC Security Event
`spam`	CheckPointHEC Security Event
`graymail`	CheckPointHEC Security Event

Source

classifier-CheckPointHEC.json

Download History Raw

{
    "description": "CheckPointHEC Classifier to CheckPointHEC Security Event Type",
    "feed": false,
    "id": "CheckPointHEC Classifier",
    "keyTypeMap": {
        "anomaly": "CheckPointHEC Security Event",
        "alert": "CheckPointHEC Security Event",
        "dlp": "CheckPointHEC Security Event",
        "malicious_url": "CheckPointHEC Security Event",
        "malicious_url_click": "CheckPointHEC Security Event",
        "malware": "CheckPointHEC Security Event",
        "phishing": "CheckPointHEC Security Event",
        "shadow_it": "CheckPointHEC Security Event",
        "suspicious_phishing": "CheckPointHEC Security Event",
        "suspicious_malware": "CheckPointHEC Security Event",
        "spam": "CheckPointHEC Security Event",
        "graymail": "CheckPointHEC Security Event"
    },
    "name": "CheckPointHEC Classifier",
    "propagationLabels": [
        "all"
    ],
    "transformer": {
        "simple": "type"
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.9.0"
}