BloodHound Enterprise Modeling Rule

Modeling Rule

Details

ID	`BloodHound_Enterprise_ModelingRule`
From Version	8.4.0

Schema

`bloodhound_enterprise_raw`

Field	Type	Array?
`action`	string	—
`actor_email`	string	—
`actor_id`	string	—
`actor_name`	string	—
`fields`	string	—
`source_ip_address`	string	—
`status`	string	—

Source

BloodHoundEnterprise.xif BloodHoundEnterprise.yml BloodHoundEnterprise_schema.json

Download History Raw

fromversion: 8.4.0  # Will be updated with XSIAM version updates
id: BloodHound_Enterprise_ModelingRule
name: BloodHound Enterprise Modeling Rule
rules: ''
schema: ''
tags: ''
supportedModules:
- xsiam