Details
| ID | fireeye_hx_ModelingRule |
|---|---|
| From Version | 6.8.0 |
Schema
fireeye_hx_raw
| Field | Type | Array? |
|---|---|---|
_id |
string | — |
appliance |
string | — |
categoryOutcome |
string | — |
categoryTupleDescription |
string | — |
cefName |
string | — |
cefSeverity |
string | — |
cefVersion |
string | — |
condition |
string | — |
cs1 |
string | — |
cs10 |
string | — |
cs10Label |
string | — |
cs1Label |
string | — |
cs2 |
string | — |
cs2Label |
string | — |
cs3 |
string | — |
cs3Label |
string | — |
cs4 |
string | — |
cs4Label |
string | — |
cs6 |
string | — |
cs6Label |
string | — |
cs7 |
string | — |
cs7Label |
string | — |
cs8 |
string | — |
cs8Label |
string | — |
cs9 |
string | — |
cs9Label |
string | — |
dhost |
string | — |
dmac |
string | — |
dntdom |
string | — |
dst |
string | — |
dvchost |
string | — |
event_id |
int | — |
event_type |
string | — |
event_values |
string | — |
externalId |
string | — |
filePath |
string | — |
fname |
string | — |
indicator |
string | — |
md5values |
string | — |
msg |
string | — |
request |
string | — |
resolution |
string | — |
source |
string | — |
subtype |
string | — |
suser |
string | — |
fireeye_hx_audit_raw
| Field | Type | Array? |
|---|---|---|
_raw_log |
string | — |