Trellix ePO Modeling Rule

Modeling Rule

Trellix_ePO

Details

IDtrellix_epo_ModelingRule
From Version8.15.0
TagsTrellixEpoModelingRules

Schema

trellix_epo_raw

Field Type Array?
parsed_fields string
{
    "trellix_epo_raw": {
      "parsed_fields": {
        "type": "string",
        "is_array": false
      }
    }
  }