Forcepoint Email Security Modeling Rules

Details

ID	`Forcepoint_Email_Security_ModelingRule`
From Version	8.15.0

Schema

`forcepoint_email_security_raw`

Field	Type	Array?
`act`	string	—
`app`	string	—
`cat`	string	—
`cc`	string	—
`cefDeviceEventClassId`	string	—
`cefDeviceVersion`	string	—
`cefName`	string	—
`cefSeverity`	string	—
`cs1`	string	—
`deliveryCode`	string	—
`dst`	string	—
`duser`	string	—
`dvc`	string	—
`dvchost`	string	—
`element`	string	—
`exceptionReason`	string	—
`externalId`	string	—
`fnameAndfileHash`	string	—
`from`	string	—
`hybridSpamScore`	string	—
`in`	string	—
`localSpamScore`	string	—
`messageId`	string	—
`msg`	string	—
`page`	string	—
`reason`	string	—
`spriv`	string	—
`src`	string	—
`suser`	string	—
`to`	string	—
`trueSrc`	string	—
`url`	string	—
`x_mailer`	string	—

Source

ForcepointEmailSecurity_2_11.xif ForcepointEmailSecurity_2_11.yml ForcepointEmailSecurity_2_11_schema.json

Download History Raw

fromversion: 8.15.0
id: Forcepoint_Email_Security_ModelingRule
name: Forcepoint Email Security Modeling Rules
rules: ''
schema: ''
tags: ''
supportedModules:
- xsiam