Vectra AI Event Collector Modeling Rule

Details

ID	`VectraAI_Event_collector_ModelingRule`
From Version	6.10.0
Tags	Vectra Detection Audits

Schema

`vectra_vectra_raw`

Field	Type	Array?
`category`	string	—
`description`	string	—
`detection_type`	string	—
`dvchost`	string	—
`headend_addr`	string	—
`id`	int	—
`message`	string	—
`result`	string	—
`role`	string	—
`source_ip`	string	—
`src_host`	string	—
`src_ip`	string	—
`state`	string	—
`summary`	string	—
`tags`	string	—
`threat`	int	—
`user`	string	—
`version`	string	—

Source

Vectra_AIEventCollector_1_3.xif Vectra_AIEventCollector_1_3.yml Vectra_AIEventCollector_1_3_schema.json

Download History Raw

fromversion: 6.10.0
id: VectraAI_Event_collector_ModelingRule
name: Vectra AI Event Collector Modeling Rule
rules: ''
schema: ''
tags: Vectra Detection Audits
supportedModules:
- xsiam