Details
| ID | McafeeEpo_ModelingRule |
|---|---|
| From Version | 8.15.0 |
| Tags | McafeeEpoModelingRules |
Schema
mcafee_epo_raw
| Field | Type | Array? |
|---|---|---|
AgentGUID |
string | — |
AnalyzerContentVersion |
string | — |
AnalyzerHostName |
string | — |
AnalyzerMAC |
string | — |
AnalyzerName |
string | — |
AnalyzerRuleName |
string | — |
AnalyzerVersion |
string | — |
AutoID |
int | — |
FileMD5Hash |
string | — |
IPAddress |
string | — |
IPHostName |
string | — |
NodeName |
string | — |
OSPlatform |
string | — |
OSType |
string | — |
SourceFilePath |
string | — |
SourceHostName |
string | — |
SourceMAC |
string | — |
SourceParentProcessName |
string | — |
SourcePort |
int | — |
SourceProcessHash |
string | — |
SourceProcessName |
string | — |
SourceUserName |
string | — |
TargetFileName |
string | — |
TargetHash |
string | — |
TargetHostName |
string | — |
TargetMAC |
string | — |
TargetName |
string | — |
TargetPath |
string | — |
TargetPort |
int | — |
TargetProcessName |
string | — |
TargetSigned |
boolean | — |
TargetSigner |
string | — |
TargetURL |
string | — |
TargetUserName |
string | — |
ThreatActionTaken |
string | — |
ThreatCategory |
string | — |
ThreatEventID |
int | — |
ThreatHandled |
boolean | — |
ThreatName |
string | — |
ThreatSeverity |
int | — |