Details
| ID | trend_micro_vision_one_ModelingRule |
|---|---|
| From Version | 6.10.0 |
| Tags | trend_micro_vision_one |
Schema
trend_micro_vision_one_raw
| Field | Type | Array? |
|---|---|---|
accessType |
string | — |
act |
string | — |
actResult |
string | — |
activity |
string | — |
alertProvider |
string | — |
app |
string | — |
appGroup |
string | — |
behaviorCat |
string | — |
blocking |
string | — |
cat |
string | — |
category |
string | — |
component |
string | — |
compressedFileSize |
int | — |
dOSName |
string | — |
description |
string | — |
detail |
string | — |
details |
string | — |
deviceGUID |
string | — |
deviceMacAddress |
string | — |
deviceProcessName |
string | — |
dhost |
string | — |
dmac |
string | — |
domainName |
string | — |
dpt |
int | — |
dst |
string | — |
endpoint |
string | — |
endpointGUID |
string | — |
endpointHostName |
string | — |
endpointIp |
string | — |
endpointMacAddress |
string | — |
entityName |
string | — |
eventId |
string | — |
eventName |
string | — |
eventSubName |
string | — |
event_type |
string | — |
fileName |
string | — |
filePath |
string | — |
filePathName |
string | — |
fileSize |
int | — |
filters |
string | — |
hostName |
string | — |
httpReferer |
string | — |
id |
string | — |
impactScope |
string | — |
indicators |
string | — |
interestedMacAddress |
string | — |
investigationResult |
string | — |
investigationStatus |
string | — |
loggedRole |
string | — |
loggedUser |
string | — |
mDevice |
string | — |
malName |
string | — |
malType |
string | — |
matchedRules |
string | — |
mitreMapping |
string | — |
model |
string | — |
modelId |
string | — |
modelType |
string | — |
mpname |
string | — |
mpver |
string | — |
objectCmd |
string | — |
objectFileHashMd5 |
string | — |
objectFileHashSha256 |
string | — |
objectFileName |
string | — |
objectFilePath |
string | — |
objectName |
string | — |
objectSigner |
string | — |
overSsl |
string | — |
pname |
string | — |
processCmd |
string | — |
processFilePath |
string | — |
processName |
string | — |
processPid |
int | — |
processSigner |
string | — |
pver |
string | — |
request |
string | — |
requestClientApplication |
string | — |
result |
string | — |
rt_utc |
datetime | — |
ruleName |
string | — |
sOSName |
string | — |
score |
int | — |
senderGUID |
string | — |
severity |
string | — |
shost |
string | — |
smac |
string | — |
source |
string | — |
spt |
int | — |
src |
string | — |
status |
string | — |
threatName |
string | — |
uuid |
string | — |
vLANId |
string | — |
workbenchLink |
string | — |