NVIDIA DOCA Argus Modeling Rule

Modeling Rule

NVIDIA DOCA Argus

Details

IDNVIDIA_DOCA_Argus_ModelingRule
From Version8.4.0

Schema

nvidia_doca_argus_raw

Field Type Array?
activity_data string
bluefield_network_interface_ipv4_address string
bluefield_network_interface_ipv6_address string
bluefield_network_interface_mac_address string
bluefield_network_interface_name string
bluefield_system_information string
destination_ip_address string
destination_port string
message_id string
message_type string
name string
network_connection_details string
occurred_message_time_iso_8601_ns string
os_version string
process_command_line_arguments string
process_details string
process_execution_path string
process_hash_md5 string
process_hash_sha256 string
process_name string
product_name string
product_version string
protocol string
severity string
source_ip_address string
source_port string
unique_identifier string
vendor_name string
workload_information string
workload_network_interface_ipv4_address string
workload_network_interface_ipv6_address string
workload_network_interface_mac_address string
workload_network_interface_name string
fromversion: 8.4.0 # Will be updated with XSIAM version updates
name: NVIDIA DOCA Argus Modeling Rule
id: NVIDIA_DOCA_Argus_ModelingRule
rules: ''
schema: ''
tags: ''
supportedModules:
- xsiam