Proofpoint ObserveIT Modeling Rule

Details

ID	`Proofpoint_ObserveIT_ModelingRule`
From Version	8.2.0

Schema

`observeit_observeit_raw`

Field	Type	Array?
`cat`	string	—
`cefDeviceEventClassId`	string	—
`cefSeverity`	string	—
`cs1`	string	—
`cs2`	string	—
`destinationServiceName`	string	—
`dhost`	string	—
`dntdom`	string	—
`duid`	string	—
`duser`	string	—
`externalId`	string	—
`reason`	string	—
`shost`	string	—
`sourceServiceName`	string	—
`sproc`	string	—
`src`	string	—
`suser`	string	—

Source

ProofpointObserveIT.xif ProofpointObserveIT.yml ProofpointObserveIT_schema.json

Download History Raw

fromversion: 8.2.0
id: Proofpoint_ObserveIT_ModelingRule
name: Proofpoint ObserveIT Modeling Rule
rules: ''
schema: ''
tags:
supportedModules:
- xsiam