Abnormal Security Modeling Rule

Modeling Rule

Abnormal Security

Details

IDAbnormal_Security_ModelingRule
From Version8.4.0

Schema

abnormal_security_email_protection_raw

Field Type Array?
abxMessageId string
abxPortalUrl string
attachmentNames string
attackStrategy string
attackType string
attackVector string
attackedParty string
autoRemediated string
ccEmails string
fromAddress string
fromName string
internetMessageId string
isRead string
postRemediated string
recipientAddress string
remediationStatus string
replyToEmails string
returnPath string
senderIpAddress string
subject string
summaryInsights string
threatId string
toAddresses string
urls string
fromversion: 8.4.0
name: Abnormal Security Modeling Rule
id: Abnormal_Security_ModelingRule
tags:
rules: ''
schema: ''
supportedModules:
- xsiam