Trellix Email Security Cloud Modeling Rule

Details

ID	`Trellix_Email_Security_Cloud_ModelingRule`
From Version	8.15.0

Schema

`fireeye_etp_raw`

Field	Type	Array?
`_ENTRY_STATUS`	string	—
`_TIME`	datetime	—
`attributes`	string	—
`event_id`	int	—
`event_type`	string	—
`id`	string	—
`included`	string	—
`links`	string	—

Source

FireEyeETPEventCollectorModelingRules_2_11.xif FireEyeETPEventCollectorModelingRules_2_11.yml FireEyeETPEventCollectorModelingRules_2_11_schema.json

Download History Raw

{
    "fireeye_etp_raw": {
        "attributes": {
            "type": "string",
            "is_array": false
        },
        "id": {
            "type": "string",
            "is_array": false
        },
        "_ENTRY_STATUS": {
            "type": "string",
            "is_array": false
        },
        "event_type": {
            "type": "string",
            "is_array": false
        },
        "links": {
            "type": "string",
            "is_array": false
        },
        "included": {
            "type": "string",
            "is_array": false
        },
        "event_id": {
            "type": "int",
            "is_array": false
        },
        "_TIME": {
            "type": "datetime",
            "is_array": false
        }
    }
}