Details
| ID | AMP_ModelingRule |
|---|---|
| From Version | 8.15.0 |
Schema
cisco_secure_endpoint_raw
| Field | Type | Array? |
|---|---|---|
cloud_ioc |
string | — |
command_line |
string | — |
computer |
string | — |
connector_guid |
string | — |
detection |
string | — |
detection_id |
string | — |
error |
string | — |
event_type |
string | — |
file |
string | — |
id |
int | — |
network_info |
string | — |
severity |
string | — |
tactics |
string | — |
techniques |
string | — |
threat_hunting |
string | — |
vulnerabilities |
string | — |