Trellix Email Security Cloud Modeling Rule

Modeling Rule

Details

ID	`Trellix_Email_Security_Cloud_ModelingRule`
From Version	8.15.0

Schema

`fireeye_etp_raw`

Field	Type	Array?
`_ENTRY_STATUS`	string	—
`_TIME`	datetime	—
`attributes`	string	—
`event_id`	int	—
`event_type`	string	—
`id`	string	—
`included`	string	—
`links`	string	—

Source

FireEyeETPEventCollectorModelingRules_2_11.xif FireEyeETPEventCollectorModelingRules_2_11.yml FireEyeETPEventCollectorModelingRules_2_11_schema.json

Download History Raw

fromversion: 8.15.0
id: Trellix_Email_Security_Cloud_ModelingRule
name: Trellix Email Security Cloud Modeling Rule
rules: ''
schema: ''
supportedModules:
- xsiam