Endpoint Protection WithSecure Modeling Rule

Details

ID	`Endpoint_Protection_WithSecure_ModelingRule`
From Version	6.10.0
Tags	Endpoint_Protection

Schema

`withsecure_endpoint_protection_raw`

Field	Type	Array?
`action`	string	—
`details`	string	—
`device`	string	—
`engine`	string	—
`id`	string	—
`severity`	string	—
`source`	string	—

Source

WithSecure.xif WithSecure.yml WithSecure_schema.json

Download History Raw

{
    "withsecure_endpoint_protection_raw": {
        "details": {
            "type": "string",
            "is_array": false
        },
        "severity": {
            "type": "string",
            "is_array": false
        },
        "engine": {
            "type": "string",
            "is_array": false
        },
        "id": {
            "type": "string",
            "is_array": false
        },
        "action": {
            "type": "string",
            "is_array": false
        },
        "source": {
            "type": "string",
            "is_array": false
        },
        "device": {
            "type": "string",
            "is_array": false
        }
    }
}