Details
| ID | VMWare_Carbon_Black_Cloud_ModelingRule |
|---|---|
| From Version | 8.15.0 |
Schema
vmware_carbon_black_cloud_raw
| Field | Type | Array? |
|---|---|---|
alert_url |
string | — |
clientIp |
string | — |
description |
string | — |
device_external_ip |
string | — |
device_id |
int | — |
device_internal_ip |
string | — |
device_name |
string | — |
device_os |
string | — |
device_os_version |
string | — |
device_policy |
string | — |
device_policy_id |
int | — |
device_target_value |
string | — |
device_username |
string | — |
eventId |
string | — |
flagged |
boolean | — |
id |
string | — |
loginName |
string | — |
ml_classification_final_verdict |
string | — |
orgName |
string | — |
org_key |
string | — |
parent_pid |
int | — |
policy_applied |
string | — |
primary_event_id |
string | — |
process_cmdline |
string | — |
process_issuer |
string | — |
process_md5 |
string | — |
process_name |
string | — |
process_pid |
int | — |
process_sha256 |
string | — |
process_username |
string | — |
reason |
string | — |
report_description |
string | — |
report_id |
string | — |
report_link |
string | — |
report_name |
string | — |
requestUrl |
string | — |
run_state |
string | — |
sensor_action |
string | — |
severity |
int | — |
threat_id |
string | — |
type |
string | — |