Trend Micro Email Security Modeling Rule

Details

ID	`Trend_Micro_Email_Security_ModelingRule`
From Version	8.15.0

Schema

`trend_micro_email_security_raw`

Field	Type	Array?
`action`	string	—
`attachments`	string	—
`deliveredTo`	string	—
`deliveryTime`	datetime	—
`details`	string	—
`direction`	string	—
`domainName`	string	—
`embeddedUrls`	string	—
`eventSubtype`	string	—
`eventType`	string	—
`genTime`	datetime	—
`headerFrom`	string	—
`headerTo`	string	—
`logType`	string	—
`mailID`	string	—
`messageID`	string	—
`policyAction`	string	—
`policyName`	string	—
`reason`	string	—
`recipient`	string	—
`recipients`	string	—
`sender`	string	—
`senderIP`	string	—
`size`	int	—
`subject`	string	—
`timestamp`	datetime	—
`tlsInfo`	string	—

Source

TrendMicroEmailSecurityModelingRule_2_11.xif TrendMicroEmailSecurityModelingRule_2_11.yml TrendMicroEmailSecurityModelingRule_2_11_schema.json

Download History Raw

fromversion: 8.15.0
id: Trend_Micro_Email_Security_ModelingRule
name: Trend Micro Email Security Modeling Rule
rules: ''
schema: ''
supportedModules:
- xsiam