Symantec Endpoint Security Modeling Rule

Details

ID	`Symantec_Endpoint_Security_ModelingRule`
From Version	8.15.0

Schema

`symantec_endpoint_security_raw`

Field	Type	Array?
`actor`	string	—
`attacks`	string	—
`count`	string	—
`device_domain`	string	—
`device_name`	string	—
`device_networks`	string	—
`device_os_name`	string	—
`device_uid`	string	—
`feature_name`	string	—
`message`	string	—
`scan_name`	string	—
`threat`	string	—
`type`	string	—
`type_id`	string	—
`url`	string	—
`user`	string	—
`user_name`	string	—

Source

SymantecEndpointSecurity_2_11.xif SymantecEndpointSecurity_2_11.yml SymantecEndpointSecurity_2_11_schema.json

Download History Raw


fromversion: 8.15.0
id: Symantec_Endpoint_Security_ModelingRule
name: Symantec Endpoint Security Modeling Rule
rules: ''
schema: ''
tags: ''
supportedModules:
- xsiam