Proofpoint Threat Response Modeling Rule

Details

ID	`proofpoint_threat_response_ModelingRule`
From Version	6.10.0
Tags	proofpoint

Schema

`proofpoint_threat_response_raw`

Field	Type	Array?
`event`	string	—
`hosts`	string	—
`id`	int	—
`incident_field_values`	string	—
`updated_at`	datetime	—

Source

ProofpointThreatResponseModelingRules_1_3.xif ProofpointThreatResponseModelingRules_1_3.yml ProofpointThreatResponseModelingRules_1_3_schema.json

Download History Raw

{
    "proofpoint_threat_response_raw": {
        "id": {
            "type": "int",
            "is_array": false
        },
        "event": {
            "type": "string",
            "is_array": false
        },
        "hosts": {
            "type": "string",
            "is_array": false
        },
        "incident_field_values": {
            "type": "string",
            "is_array": false
        },
        "updated_at": {
            "type": "datetime",
            "is_array": false
        }
    }
}