BloodHound Enterprise Modeling Rule

Modeling Rule

BloodHound Enterprise (Deprecated)

Details

IDBloodHound_Enterprise_ModelingRule
From Version8.4.0

Schema

bloodhound_enterprise_raw

Field Type Array?
action string
actor_email string
actor_id string
actor_name string
fields string
source_ip_address string
status string
{
    "bloodhound_enterprise_raw": {
      "source_ip_address": {
        "type": "string",
        "is_array": false
      },
      "actor_id": {
        "type": "string",
        "is_array": false
      },
      "actor_name": {
        "type": "string",
        "is_array": false
      },
      "actor_email": {
        "type": "string",
        "is_array": false
      },
      "fields": {
        "type": "string",
        "is_array": false
      },
      "action": {
        "type": "string",
        "is_array": false
      },
      "status": {
        "type": "string",
        "is_array": false
      }
    }
  }