diff --git a/doc/Detections.yaml b/doc/Detections.yaml index 61b0614..c491048 100644 --- a/doc/Detections.yaml +++ b/doc/Detections.yaml @@ -1875,6 +1875,7 @@ - sig - sca - szn + - scs Description_EN: The user principal name used to sign in to the proxy Sample: - sample_email@trendmicro.com @@ -5196,6 +5197,60 @@ DL_CommonKey: DL_Searchable: true DL_Aggregable: false +- Name: actionName + ProductCode: + - scs + Description_EN: The action being taken + Sample: + - get + - list + - create + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: resourceCategory + ProductCode: + - scs + Description_EN: The category of the object + Sample: + - roles + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: resourceName + ProductCode: + - scs + Description_EN: The specific name of the object + Sample: + - pod-reader + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: resourceNamespace + ProductCode: + - scs + Description_EN: The namespace where the referenced resource exists + Sample: + - default + - kube-system + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: requestDecision + ProductCode: + - scs + Description_EN: Whether the request was allowed or denied by the authorization + system + Sample: + - allow/deny + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false - Name: ruleSetName ProductCode: - scs @@ -6148,6 +6203,7 @@ ProductCode: - sca - sem + - scs Description_EN: The network protocol response code Sample: - '302' diff --git a/doc_v2/Cloud/Trend Vision One Container Security.yaml b/doc_v2/Cloud/Trend Vision One Container Security.yaml index df6d566..7b71181 100644 --- a/doc_v2/Cloud/Trend Vision One Container Security.yaml +++ b/doc_v2/Cloud/Trend Vision One Container Security.yaml @@ -977,6 +977,20 @@ DL_CommonKey: DL_Searchable: true DL_Aggregable: false +- Name: principalName + ProductCode: + - sws + - sig + - sca + - szn + - scs + Description_EN: The user principal name used to sign in to the proxy + Sample: + - sample_email@trendmicro.com + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false - Name: detectionType ProductCode: - pdi @@ -1377,6 +1391,60 @@ DL_CommonKey: DL_Searchable: true DL_Aggregable: false +- Name: actionName + ProductCode: + - scs + Description_EN: The action being taken + Sample: + - get + - list + - create + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: resourceCategory + ProductCode: + - scs + Description_EN: The category of the object + Sample: + - roles + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: resourceName + ProductCode: + - scs + Description_EN: The specific name of the object + Sample: + - pod-reader + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: resourceNamespace + ProductCode: + - scs + Description_EN: The namespace where the referenced resource exists + Sample: + - default + - kube-system + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false +- Name: requestDecision + ProductCode: + - scs + Description_EN: Whether the request was allowed or denied by the authorization + system + Sample: + - allow/deny + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false - Name: ruleSetName ProductCode: - scs @@ -1488,6 +1556,19 @@ DL_CommonKey: DL_Searchable: false DL_Aggregable: false +- Name: respCode + ProductCode: + - sca + - sem + - scs + Description_EN: The network protocol response code + Sample: + - '302' + - '200' + DL_Type: string + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: true - Name: customAssetTags ProductCode: - xes diff --git a/doc_v2/Email/Trend Micro Cloud App Security.yaml b/doc_v2/Email/Trend Micro Cloud App Security.yaml index 84c1d51..9358c43 100644 --- a/doc_v2/Email/Trend Micro Cloud App Security.yaml +++ b/doc_v2/Email/Trend Micro Cloud App Security.yaml @@ -510,6 +510,7 @@ - sig - sca - szn + - scs Description_EN: The user principal name used to sign in to the proxy Sample: - sample_email@trendmicro.com @@ -1056,6 +1057,7 @@ ProductCode: - sca - sem + - scs Description_EN: The network protocol response code Sample: - '302' diff --git a/doc_v2/Email/Trend Micro Email Security.yaml b/doc_v2/Email/Trend Micro Email Security.yaml index 762b6eb..2317744 100644 --- a/doc_v2/Email/Trend Micro Email Security.yaml +++ b/doc_v2/Email/Trend Micro Email Security.yaml @@ -805,6 +805,7 @@ ProductCode: - sca - sem + - scs Description_EN: The network protocol response code Sample: - '302' diff --git a/doc_v2/Network/Trend Micro Web Security.yaml b/doc_v2/Network/Trend Micro Web Security.yaml index 5d6aab4..bd94dea 100644 --- a/doc_v2/Network/Trend Micro Web Security.yaml +++ b/doc_v2/Network/Trend Micro Web Security.yaml @@ -205,6 +205,7 @@ - sig - sca - szn + - scs Description_EN: The user principal name used to sign in to the proxy Sample: - sample_email@trendmicro.com diff --git a/doc_v2/Network/Zero Trust Secure Access - Internet Access.yaml b/doc_v2/Network/Zero Trust Secure Access - Internet Access.yaml index b4c0672..163a638 100644 --- a/doc_v2/Network/Zero Trust Secure Access - Internet Access.yaml +++ b/doc_v2/Network/Zero Trust Secure Access - Internet Access.yaml @@ -474,6 +474,7 @@ - sig - sca - szn + - scs Description_EN: The user principal name used to sign in to the proxy Sample: - sample_email@trendmicro.com diff --git a/doc_v2/Network/Zero Trust Secure Access - Private Access.yaml b/doc_v2/Network/Zero Trust Secure Access - Private Access.yaml index 71b89e2..73b4610 100644 --- a/doc_v2/Network/Zero Trust Secure Access - Private Access.yaml +++ b/doc_v2/Network/Zero Trust Secure Access - Private Access.yaml @@ -302,6 +302,7 @@ - sig - sca - szn + - scs Description_EN: The user principal name used to sign in to the proxy Sample: - sample_email@trendmicro.com diff --git a/doc_v2/Others/Audit Log.yaml b/doc_v2/Others/Audit Log.yaml new file mode 100644 index 0000000..937650e --- /dev/null +++ b/doc_v2/Others/Audit Log.yaml @@ -0,0 +1,10 @@ +- Name: eventRawData + ProductCode: + - aal + Description_EN: The original event log string (JSON format) + Sample: '{"type":"audit","timestamp":"2020-02-20T08:10:01.904Z","serviceName":"uic","componentName":"backend","siteName":"us-east-1-xdr-eks-prod","customerId":"74b629cb-8fc6-4a1b-a00f-b5003ab9f0e3","identifier":{"id":"db09668d-9d85-42ee-946f-5f8d37f288b2","type":"managedAccount","name":"John + Smith","email":"john_smith@abc.com"},"userId":"db09668d-9d85-42ee-946f-5f8d37f288b2","user":"xdr-stg@trendmicro.com","roleId":"53a580c5-d952-43e1-8ce3-79eac4961ee6","role":"admin","sourceIp":"180.10.1.2","access":0,"category":"01","activity":"01","result":true,"triggerService":"awb","details":{"ipAddr":"10.0.0.1"}}' + DL_Type: dynamic + DL_CommonKey: + DL_Searchable: true + DL_Aggregable: false diff --git a/doc_v2/Others/Mobile Security.yaml b/doc_v2/Others/Mobile Security.yaml index 9cdfbfe..3662b88 100644 --- a/doc_v2/Others/Mobile Security.yaml +++ b/doc_v2/Others/Mobile Security.yaml @@ -1,1119 +1,1122 @@ -- Name: endpointGuid +- Name: endpointHostName ProductCode: + - sds + - pds + - sao + - xes + - sig - ams - Description_EN: Host GUID of the endpoint on which the event was detected + - szn + - pts + - scs + - sss + - ddr + Description_EN: The endpoint hostname or node where the event was detected Sample: - - 11111111-1111-1111-1111-111111111111 + - 10.10.10.10 (swpos-aws-aza02) [i-0f0f0f0f0f0f0f0f0] + - ip-10-10-10-10.us-west-1.compute.internal DL_Type: string DL_CommonKey: - - EndpointID + - EndpointName DL_Searchable: true DL_Aggregable: true -- Name: endpointHostName +- Name: endpointGUID ProductCode: + - sds + - sao + - pds + - xes + - sig - ams - Description_EN: The host name of the endpoint on which the event was detected + - szn + - pts + - scs + - ddr + Description_EN: The GUID of the agent which reported the detection Sample: - - PHILIPSIBE09 - - WHAM6WK8XG2 - - MacBook-Pro-del-Meno + - ae4d64aa-f8b8-bb36-b265-f59272ed342f + - 8fb979f6-1376-bed3-227f-f2886e66194e + - ca2b3a7e-8415-c571-cc19-e45f69470026 DL_Type: string DL_CommonKey: - - EndpointName + - EndpointID DL_Searchable: true DL_Aggregable: true -- Name: endpointIp +- Name: request ProductCode: + - pdi + - xns + - sao + - ptp + - sds + - sig + - sca + - stp + - sem + - pds - ams - Description_EN: IP address of the endpoint on which the event was detected + - szn + Description_EN: The notable URLs Sample: - - 10.10.10.10 - - ::1 - - fe80::1 - DL_Type: dynamic + - http://example.page.com/canonical.html + - http://10.10.10.10 + - https://drive.google.com/ + DL_Type: string DL_CommonKey: - - IPv4 - - IPv6 + - URL DL_Searchable: true DL_Aggregable: true -- Name: eventId +- Name: eventName ProductCode: + - sds + - pdi + - xns + - sao + - pds + - ptp + - sca + - sem + - xes + - stp + - sig + - ptn + - szn + - pts + - xms + - sfs + - sfc + - sss - ams - Description_EN: Event type - Sample: [] - DL_Type: int + - mns + - ddr + Description_EN: The event type + Sample: + - LOG_INSPECTION_EVENT + - SECURITY_RISK_DETECTION + - WEB_THREAT_DETECTION + - LOG_INSPECTION_EVENT + - MALWARE_DETECTION + - PROCESS_ACTIVITY + - WEB_POLICY_VIOLATION + - DEEP_PACKET_INSPECTION_EVENT + - INTEGRITY_MONITORING_EVENT + - DISRUPTIVE_APPLICATION_DETECTION + - PRODUCT_SUMMARY + - PRODUCT_UPDATE + - BEHAVIORAL_VIOLATION + - FIREWALL_POLICY_VIOLATION + - SUSPICIOUS_BEHAVIOUR_DETECTION + - DENYLIST_CHANGE + - MACHINE_LEARNING_DETECTION + - DLP_VIOLATION + - MALWARE_OUTBREAK_DETECTION + - SENSITIVE_DATA_DETECTION + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: true -- Name: eventSubId +- Name: act ProductCode: + - scs + - pdi + - xns + - sao + - sds + - sca + - ptp + - xes + - sws + - sem + - pds + - stp + - sig + - ptn + - szn + - xms - ams - Description_EN: The access type + - mns + - sss + Description_EN: The actions taken to mitigate the event Sample: - - 2 - TELEMETRY_PROCESS_CREATE - - 101 - TELEMETRY_FILE_CREATE - - 204 - TELEMETRY_CONNECTION_CONNECT_OUTBOUND - DL_Type: int + - log + - isolate + - terminate + - not blocked + - Block + - No action + - Reset + - Pass + - User Decision + DL_Type: dynamic DL_CommonKey: DL_Searchable: true DL_Aggregable: true -- Name: eventTime +- Name: actResult ProductCode: + - sao + - sca + - sds + - pds + - pts - ams - Description_EN: The time the agent detected the event + Description_EN: The result of an action Sample: - - 1657781088000 - DL_Type: real + - Dropped + - Successful + - Accepted + DL_Type: dynamic DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: logonUser +- Name: pname ProductCode: + - sds + - pdi + - xns + - sao + - pds + - sca + - sem + - ptp + - xes + - sws + - stp + - sig - ams - Description_EN: The logon user name + - scs + - xms + Description_EN: The internal product ID Sample: - - root - - SISTEMA - - oracle - DL_Type: dynamic + - Trend Micro Deep Security + - Deep Discovery Inspector + - Apex One + DL_Type: string DL_CommonKey: - - UserAccount DL_Searchable: true - DL_Aggregable: true -- Name: objectFileHashSha256 + DL_Aggregable: false +- Name: urlCat ProductCode: + - pdi + - xns + - sws + - sao + - sig + - sca - ams - Description_EN: The SHA256 hash of target process image or target file + - sds + Description_EN: The requested URL category Sample: - - 39109eef00821658893b45634fe2f4664f880da9242712df907f1327d4ceefb8 - - 49fa3e206abf6a1f4546417dbe09f3f06b38847866a4a66de75bd90f39cb6c1c - - 0969321ad5a0923f0f03896ad2c10e49290515c44b721d773942a37f62a24893 - DL_Type: string + - Untested + - '158' + - Web Advertisement + DL_Type: dynamic DL_CommonKey: - - FileSHA2 DL_Searchable: true DL_Aggregable: false -- Name: objectFilePath +- Name: majorVirusType ProductCode: + - pds + - sds - ams - Description_EN: The file path of the target process image or target file + - ptn + - pts + - sfc + Description_EN: The virus type Sample: - - /usr/bin/bash - - /bin/bash - - /opt/folder1/probes/system/processes/processes + - Virus + - Suspicious Activity + - Trojan + - TROJ DL_Type: string DL_CommonKey: - - FileFullPath - - FileName DL_Searchable: true DL_Aggregable: false -- Name: pname +- Name: detectionName ProductCode: + - sao - ams - Description_EN: Internal product ID (Deprecated, use productCode) + Description_EN: The general name for the detection Sample: - - '2200' - - '751' - - '533' + - Troj.Win32.TRX.XXPE50F13017 + - Troj.Win32.TRX.XXPE50FFF059 DL_Type: string DL_CommonKey: DL_Searchable: true - DL_Aggregable: true -- Name: request + DL_Aggregable: false +- Name: detectionType ProductCode: + - pdi + - xns + - sds + - sws + - sao + - sca + - pds + - sem + - sig - ams - Description_EN: Request URL + - szn + - scs + Description_EN: The detection type Sample: - - http://10.10.10.10/fake/site - - http:///fake/param.cgi?action=list&group=Alarm.Status - - http://fake.com/ + - '1' + - File + - Process + - net DL_Type: string DL_CommonKey: - - URL DL_Searchable: true DL_Aggregable: false -- Name: srcFileHashSha256 +- Name: eventId ProductCode: + - sds + - pdi + - xns + - sao + - pds + - sca + - xes + - sem + - pts + - scs + - xms + - sfs + - sfc + - sss - ams - Description_EN: The SHA256 hash of source file + - mns + - ddr + Description_EN: The event ID from the logs of each product Sample: - - 4eaa002225f4ea2dedcd19b7f1337d7c58ea7dd6d4571c12468dde95e6bcfdaf - - e30508e2088bc16b2a84233ced64995f738deaef2366ac6c86b35c93bbcd9d80 - - 16b20a3ad485b4fbbe3028c7e743b226db21ea93cacc8b3d7d7d4a731bf02333 + - 100100 + - 100101 + - 100116 + - 100117 + - 100119 DL_Type: string DL_CommonKey: - - FileSHA2 DL_Searchable: true - DL_Aggregable: false -- Name: srcFilePath + DL_Aggregable: true +- Name: osName ProductCode: + - sig - ams - Description_EN: The source file path + - szn + - ddr + - sss + Description_EN: The host OS name Sample: - - \\cnva-apps\megaclockprod\traveler\travelerprint.accdb - - c:\program files\common files\microsoft shared\clicktorun\officesvcmgrschedule.xml - - q:\a7_dbs\a4_pkg\a4_packaging.accde + - Linux + - windows 10.0.22000 + - windows 10.0.19044 + - windows 10.0.19043 DL_Type: string DL_CommonKey: - - FileFullPath - - FileName DL_Searchable: true DL_Aggregable: false -- Name: marsAccount +- Name: pver ProductCode: + - sds + - pdi + - xns + - pds + - sao + - ptp + - stp + - sig - ams - Description_EN: The account for Trend Micro Mobile Apps Reputation Service + - scs + - sfs + - sfc + - sss + Description_EN: The product version Sample: - - XDRv1 + - 20.0.0.4726 + - 20.0.0.4416 + - 6.2.1125 DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: endpointModel +- Name: score ProductCode: + - pdi + - xns + - sao + - sca - ams - Description_EN: The endpoint device model + - sds + Description_EN: The Web Reputation Services URL rating Sample: - - Pixel 3 XL - DL_Type: string + - 71 + - 81 + - 0 + DL_Type: int DL_CommonKey: - DL_Searchable: true - DL_Aggregable: true -- Name: userType + DL_Searchable: false + DL_Aggregable: false +- Name: mailbox ProductCode: + - sca + - sem - ams - Description_EN: The user type + - xms + Description_EN: The mailbox that is protected by Trend Micro Sample: - - Microsoft Endpoint Manager - - Azure Active Directory - - VMware Workspace ONE UEM + - sample_email@trendmicro.com DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: eventHashId +- Name: endpointModel ProductCode: - ams - Description_EN: The event hash ID + Description_EN: Mobile device model Sample: - - '-8406473586387535914' - - '138486453338666581' - - '-7909265752378976284' + - M2101K9G DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: firstSeen +- Name: appPkgName ProductCode: - ams - Description_EN: The time when the event started (in milliseconds) + Description_EN: The app package name Sample: - - 1656355418449 + - com.example.app_pkg_name_file DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: lastSeen +- Name: appLabel ProductCode: - ams - Description_EN: The time when the event ended (in milliseconds) + Description_EN: App name Sample: - - 1656355418449 + - Mobile Security Virus Test Application DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: pver +- Name: appVerCode ProductCode: - ams - Description_EN: The product version + Description_EN: The app version code Sample: - - 1.2.0.2752 - - 1.0.345 - - 1.2.0.2657 - DL_Type: string + - 1 + DL_Type: int DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: osName +- Name: appPublicKeySha1 ProductCode: - ams - Description_EN: The host operating system name + Description_EN: The app public key (SHA-1) Sample: - - Windows - - Linux - - macOS + - 72080A6B4EB11105B28E31C4753BC91414500AD4 DL_Type: string DL_CommonKey: + - FileSHA1 DL_Searchable: true - DL_Aggregable: true -- Name: osVer + DL_Aggregable: false +- Name: appSize ProductCode: - ams - Description_EN: The OS version + Description_EN: The app size (in bytes) Sample: - - Amazon Linux 2 - - 10.0.19044 - - 10.0.19042 + - '28461' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectHashId +- Name: appDexSha256 ProductCode: - ams - Description_EN: The event object hash ID - Sample: - - '8576474808125313522' - - '-599270888483415002' - - '2177864258235728980' - - '2432229257' + Description_EN: The app dex encoded using SHA-256 + Sample: + - 08736EDDD3682AC26D9FD42DA2A20B0BADB5C85A5456A0AE85B52D60C564F290 DL_Type: string DL_CommonKey: + - FileSHA2 DL_Searchable: true - DL_Aggregable: false -- Name: objectFileSize + DL_Aggregable: true +- Name: appIsSystem ProductCode: - ams - Description_EN: The target file size + Description_EN: Whether the app is a system app Sample: - - '0' - - '59456' - - '60' - DL_Type: string + - false + DL_Type: bool DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectFileCreation +- Name: osVer ProductCode: - ams - Description_EN: The time the target file was created (in milliseconds) + - szn + - ddr + Description_EN: The OS version Sample: - - '1652131848000' - - '1577865600000' - - '1648279273000' + - '11' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectFileModifiedTime +- Name: minorVirusType ProductCode: - ams - Description_EN: The modification time of the target file (in milliseconds) + Description_EN: Minor virus type Sample: - - '1652131848000' - - '1577865600000' - - '1648279273000' + - RANSOMWARE + - BANKER + - CREDENTIAL DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectFirstSeen +- Name: endpointGuid ProductCode: - ams - Description_EN: The time when the object first appeared (in milliseconds) + Description_EN: Host GUID of the endpoint on which the event was detected Sample: - - '1656458063638' - - '1656260547165' - - '0' + - 11111111-1111-1111-1111-111111111111 DL_Type: string DL_CommonKey: + - EndpointID DL_Searchable: true - DL_Aggregable: false -- Name: objectLastSeen + DL_Aggregable: true +- Name: endpointHostName ProductCode: - ams - Description_EN: The time when the object was last seen (in milliseconds) + Description_EN: The host name of the endpoint on which the event was detected Sample: - - '1656458354730' - - '1656260580722' - - '0' + - PHILIPSIBE09 + - WHAM6WK8XG2 + - MacBook-Pro-del-Meno DL_Type: string DL_CommonKey: + - EndpointName DL_Searchable: true - DL_Aggregable: false -- Name: srcFileHashId + DL_Aggregable: true +- Name: endpointIp ProductCode: - ams - Description_EN: The source file hash ID + Description_EN: IP address of the endpoint on which the event was detected Sample: - - '1102079405020678318' - - '-6926286289273504319' - - '8528955148329941480' - DL_Type: string + - 10.10.10.10 + - ::1 + - fe80::1 + DL_Type: dynamic DL_CommonKey: + - IPv4 + - IPv6 DL_Searchable: true - DL_Aggregable: false -- Name: srcFileSize + DL_Aggregable: true +- Name: eventId ProductCode: - ams - Description_EN: The source file size - Sample: - - '0' - - '131072' - - '196608' - DL_Type: string + Description_EN: Event type + Sample: [] + DL_Type: int DL_CommonKey: DL_Searchable: true - DL_Aggregable: false -- Name: srcFileCreation + DL_Aggregable: true +- Name: eventSubId ProductCode: - ams - Description_EN: The time when the source file was created (in milliseconds) + Description_EN: The access type Sample: - - '1577865600000' - - '1626201752000' - - '1626201750000' - DL_Type: string + - 2 - TELEMETRY_PROCESS_CREATE + - 101 - TELEMETRY_FILE_CREATE + - 204 - TELEMETRY_CONNECTION_CONNECT_OUTBOUND + DL_Type: int DL_CommonKey: DL_Searchable: true - DL_Aggregable: false -- Name: srcFileModifiedTime + DL_Aggregable: true +- Name: eventTime ProductCode: - ams - Description_EN: The time when the source file was modified (in milliseconds) + Description_EN: The time the agent detected the event Sample: - - '1626201752000' - - '1626201750000' - - '1577865600000' - DL_Type: string + - 1657781088000 + DL_Type: real DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: srcFirstSeen +- Name: logonUser ProductCode: - ams - Description_EN: The time when the source file first appeared (in milliseconds) + Description_EN: The logon user name Sample: - - '0' - - '1656355418449' - - '1656714760440' - DL_Type: string + - root + - SISTEMA + - oracle + DL_Type: dynamic DL_CommonKey: + - UserAccount DL_Searchable: true - DL_Aggregable: false -- Name: srcLastSeen + DL_Aggregable: true +- Name: objectFileHashSha256 ProductCode: - ams - Description_EN: The time when the source file was last seen (in milliseconds) + Description_EN: The SHA256 hash of target process image or target file Sample: - - '0' - - '1656355418449' - - '1656715147313' + - 39109eef00821658893b45634fe2f4664f880da9242712df907f1327d4ceefb8 + - 49fa3e206abf6a1f4546417dbe09f3f06b38847866a4a66de75bd90f39cb6c1c + - 0969321ad5a0923f0f03896ad2c10e49290515c44b721d773942a37f62a24893 DL_Type: string DL_CommonKey: + - FileSHA2 DL_Searchable: true DL_Aggregable: false -- Name: appOrSystemEventHashId +- Name: objectFilePath ProductCode: - ams - Description_EN: The event object hash ID + Description_EN: The file path of the target process image or target file Sample: - - 3859886410 + - /usr/bin/bash + - /bin/bash + - /opt/folder1/probes/system/processes/processes DL_Type: string DL_CommonKey: + - FileFullPath + - FileName DL_Searchable: true DL_Aggregable: false -- Name: appLabel +- Name: pname ProductCode: - ams - Description_EN: The app name (if the subject is an app) + Description_EN: Internal product ID (Deprecated, use productCode) Sample: - - Collection Nes Games + - '2200' + - '751' + - '533' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: true -- Name: appPkgName +- Name: request ProductCode: - ams - Description_EN: The app package name (if the subject is an app) + Description_EN: Request URL Sample: - - com.ConsolesXX.CollectionNesGames + - http://10.10.10.10/fake/site + - http:///fake/param.cgi?action=list&group=Alarm.Status + - http://fake.com/ DL_Type: string DL_CommonKey: + - URL DL_Searchable: true - DL_Aggregable: true -- Name: appPublicKeySha1 + DL_Aggregable: false +- Name: srcFileHashSha256 ProductCode: - ams - Description_EN: The SHA-1 hash of the app public key (if the subject is an app) + Description_EN: The SHA256 hash of source file Sample: - - 05FC638156219800DADAC48D8E621E0BCBD3C321 + - 4eaa002225f4ea2dedcd19b7f1337d7c58ea7dd6d4571c12468dde95e6bcfdaf + - e30508e2088bc16b2a84233ced64995f738deaef2366ac6c86b35c93bbcd9d80 + - 16b20a3ad485b4fbbe3028c7e743b226db21ea93cacc8b3d7d7d4a731bf02333 DL_Type: string DL_CommonKey: - - FileSHA1 + - FileSHA2 DL_Searchable: true - DL_Aggregable: true -- Name: appSize + DL_Aggregable: false +- Name: srcFilePath ProductCode: - ams - Description_EN: The app size (in bytes) if the subject is an app + Description_EN: The source file path Sample: - - 16906043 + - \\cnva-apps\megaclockprod\traveler\travelerprint.accdb + - c:\program files\common files\microsoft + shared\clicktorun\officesvcmgrschedule.xml + - q:\a7_dbs\a4_pkg\a4_packaging.accde DL_Type: string DL_CommonKey: + - FileFullPath + - FileName DL_Searchable: true DL_Aggregable: false -- Name: appIsSystem +- Name: marsAccount ProductCode: - ams - Description_EN: Whether the app is a system app + Description_EN: The account for Trend Micro Mobile Apps Reputation Service Sample: - - false - DL_Type: bool + - XDRv1 + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: appVerCode +- Name: endpointModel ProductCode: - ams - Description_EN: The app version code (if the subject is an app) + Description_EN: The endpoint device model Sample: - - 0 + - Pixel 3 XL DL_Type: string DL_CommonKey: DL_Searchable: true - DL_Aggregable: false -- Name: systemEventAttr + DL_Aggregable: true +- Name: userType ProductCode: - ams - Description_EN: The attributes of the system event (if the subject is a system event) + Description_EN: The user type Sample: - - usbdebugging + - Microsoft Endpoint Manager + - Azure Active Directory + - VMware Workspace ONE UEM DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectAppDexSha256 +- Name: eventHashId ProductCode: - ams - Description_EN: The SHA-256 hash of the app Dex value + Description_EN: The event hash ID Sample: - - C23A87B77B06442FD9AF9A80DD87191EDEADFAB766C862EBC592FE18063D0449 + - '-8406473586387535914' + - '138486453338666581' + - '-7909265752378976284' DL_Type: string DL_CommonKey: - - FileSHA2 DL_Searchable: true - DL_Aggregable: true -- Name: objectAppInstalledTime + DL_Aggregable: false +- Name: firstSeen ProductCode: - ams - Description_EN: The time of app installation (in milliseconds) + Description_EN: The time when the event started (in milliseconds) Sample: - - 1607935850 + - 1656355418449 DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectAppLabel +- Name: lastSeen ProductCode: - ams - Description_EN: The app name + Description_EN: The time when the event ended (in milliseconds) Sample: - - Collection Nes Games + - 1656355418449 DL_Type: string DL_CommonKey: DL_Searchable: true - DL_Aggregable: true -- Name: objectAppPackageName + DL_Aggregable: false +- Name: pver ProductCode: - ams - Description_EN: The app package name + Description_EN: The product version Sample: - - com.ConsolesXX.CollectionNesGames + - 1.2.0.2752 + - 1.0.345 + - 1.2.0.2657 DL_Type: string DL_CommonKey: DL_Searchable: true - DL_Aggregable: true -- Name: objectAppPublicKeySha1 + DL_Aggregable: false +- Name: osName ProductCode: - ams - Description_EN: The SHA-1 hash of the app public key + Description_EN: The host operating system name Sample: - - 05FC638156219800DADAC48D8E621E0BCBD3C321 + - Windows + - Linux + - macOS DL_Type: string DL_CommonKey: - - FileSHA1 DL_Searchable: true DL_Aggregable: true -- Name: objectAppSha256 +- Name: osVer ProductCode: - ams - Description_EN: The SHA-256 hash of the app + Description_EN: The OS version Sample: - - 692BC8E6BC51807A24BEACC13ED2B68E1F954E152863430E3179FA812937B8B0 + - Amazon Linux 2 + - 10.0.19044 + - 10.0.19042 DL_Type: string DL_CommonKey: - - FileSHA2 DL_Searchable: true - DL_Aggregable: true -- Name: objectAppSize + DL_Aggregable: false +- Name: objectHashId ProductCode: - ams - Description_EN: The app size (in bytes) + Description_EN: The event object hash ID Sample: - - 16906043 + - '8576474808125313522' + - '-599270888483415002' + - '2177864258235728980' + - '2432229257' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectAppIsSystemApp +- Name: objectFileSize ProductCode: - ams - Description_EN: Whether the app is a system app + Description_EN: The target file size Sample: - - true - DL_Type: bool + - '0' + - '59456' + - '60' + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectAppVerCode +- Name: objectFileCreation ProductCode: - ams - Description_EN: The app version code + Description_EN: The time the target file was created (in milliseconds) Sample: - - 0 + - '1652131848000' + - '1577865600000' + - '1648279273000' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectAppVerName +- Name: objectFileModifiedTime ProductCode: - ams - Description_EN: The app version + Description_EN: The modification time of the target file (in milliseconds) Sample: - - 1.0 + - '1652131848000' + - '1577865600000' + - '1648279273000' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectAppBehavior +- Name: objectFirstSeen ProductCode: - ams - Description_EN: The activity that occurred on the app + Description_EN: The time when the object first appeared (in milliseconds) Sample: - - GRANTED_CAMERA_PERMISSION - - APP_NO_ICON - - APP_HIDE_ICON + - '1656458063638' + - '1656260547165' + - '0' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectAppBehaviorAttr +- Name: objectLastSeen ProductCode: - ams - Description_EN: The attributes of the app activity + Description_EN: The time when the object was last seen (in milliseconds) Sample: - - android.intent.action.BOOT_COMPLETED + - '1656458354730' + - '1656260580722' + - '0' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectSystemEventAttr +- Name: srcFileHashId ProductCode: - ams - Description_EN: The system event attributes + Description_EN: The source file hash ID Sample: - - LOCK_SCREEN + - '1102079405020678318' + - '-6926286289273504319' + - '8528955148329941480' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: extraInfo +- Name: srcFileSize ProductCode: - ams - Description_EN: The extra information about the app + Description_EN: The source file size Sample: - - N/A - - Web Client Common - - DCERPC Services - DL_Type: dynamic + - '0' + - '131072' + - '196608' + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: objectCertAttr +- Name: srcFileCreation ProductCode: - ams - Description_EN: The SHA-1 hash of the certificate public key + Description_EN: The time when the source file was created (in milliseconds) Sample: - - 05FC638156219800DADAC48D8E621E0BCBD3C321 + - '1577865600000' + - '1626201752000' + - '1626201750000' DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: endpointHostName +- Name: srcFileModifiedTime ProductCode: - - sds - - pds - - sao - - xes - - sig - ams - - szn - - pts - - scs - - sss - - ddr - Description_EN: The endpoint hostname or node where the event was detected + Description_EN: The time when the source file was modified (in milliseconds) Sample: - - 10.10.10.10 (swpos-aws-aza02) [i-0f0f0f0f0f0f0f0f0] - - ip-10-10-10-10.us-west-1.compute.internal + - '1626201752000' + - '1626201750000' + - '1577865600000' DL_Type: string DL_CommonKey: - - EndpointName DL_Searchable: true - DL_Aggregable: true -- Name: endpointGUID + DL_Aggregable: false +- Name: srcFirstSeen ProductCode: - - sds - - sao - - pds - - xes - - sig - ams - - szn - - pts - - scs - - ddr - Description_EN: The GUID of the agent which reported the detection + Description_EN: The time when the source file first appeared (in milliseconds) Sample: - - ae4d64aa-f8b8-bb36-b265-f59272ed342f - - 8fb979f6-1376-bed3-227f-f2886e66194e - - ca2b3a7e-8415-c571-cc19-e45f69470026 + - '0' + - '1656355418449' + - '1656714760440' DL_Type: string DL_CommonKey: - - EndpointID DL_Searchable: true - DL_Aggregable: true -- Name: request + DL_Aggregable: false +- Name: srcLastSeen ProductCode: - - pdi - - xns - - sao - - ptp - - sds - - sig - - sca - - stp - - sem - - pds - ams - - szn - Description_EN: The notable URLs + Description_EN: The time when the source file was last seen (in milliseconds) Sample: - - http://example.page.com/canonical.html - - http://10.10.10.10 - - https://drive.google.com/ + - '0' + - '1656355418449' + - '1656715147313' DL_Type: string DL_CommonKey: - - URL DL_Searchable: true - DL_Aggregable: true -- Name: eventName + DL_Aggregable: false +- Name: appOrSystemEventHashId ProductCode: - - sds - - pdi - - xns - - sao - - pds - - ptp - - sca - - sem - - xes - - stp - - sig - - ptn - - szn - - pts - - xms - - sfs - - sfc - - sss - ams - - mns - - ddr - Description_EN: The event type + Description_EN: The event object hash ID Sample: - - LOG_INSPECTION_EVENT - - SECURITY_RISK_DETECTION - - WEB_THREAT_DETECTION - - LOG_INSPECTION_EVENT - - MALWARE_DETECTION - - PROCESS_ACTIVITY - - WEB_POLICY_VIOLATION - - DEEP_PACKET_INSPECTION_EVENT - - INTEGRITY_MONITORING_EVENT - - DISRUPTIVE_APPLICATION_DETECTION - - PRODUCT_SUMMARY - - PRODUCT_UPDATE - - BEHAVIORAL_VIOLATION - - FIREWALL_POLICY_VIOLATION - - SUSPICIOUS_BEHAVIOUR_DETECTION - - DENYLIST_CHANGE - - MACHINE_LEARNING_DETECTION - - DLP_VIOLATION - - MALWARE_OUTBREAK_DETECTION - - SENSITIVE_DATA_DETECTION + - 3859886410 DL_Type: string DL_CommonKey: DL_Searchable: true - DL_Aggregable: true -- Name: act + DL_Aggregable: false +- Name: appLabel ProductCode: - - scs - - pdi - - xns - - sao - - sds - - sca - - ptp - - xes - - sws - - sem - - pds - - stp - - sig - - ptn - - szn - - xms - ams - - mns - - sss - Description_EN: The actions taken to mitigate the event + Description_EN: The app name (if the subject is an app) Sample: - - log - - isolate - - terminate - - not blocked - - Block - - No action - - Reset - - Pass - - User Decision - DL_Type: dynamic + - Collection Nes Games + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: true -- Name: actResult +- Name: appPkgName ProductCode: - - sao - - sca - - sds - - pds - - pts - ams - Description_EN: The result of an action + Description_EN: The app package name (if the subject is an app) Sample: - - Dropped - - Successful - - Accepted - DL_Type: dynamic + - com.ConsolesXX.CollectionNesGames + DL_Type: string DL_CommonKey: DL_Searchable: true - DL_Aggregable: false -- Name: pname + DL_Aggregable: true +- Name: appPublicKeySha1 ProductCode: - - sds - - pdi - - xns - - sao - - pds - - sca - - sem - - ptp - - xes - - sws - - stp - - sig - ams - - scs - - xms - Description_EN: The internal product ID + Description_EN: The SHA-1 hash of the app public key (if the subject is an + app) Sample: - - Trend Micro Deep Security - - Deep Discovery Inspector - - Apex One + - 05FC638156219800DADAC48D8E621E0BCBD3C321 DL_Type: string DL_CommonKey: + - FileSHA1 DL_Searchable: true - DL_Aggregable: false -- Name: urlCat + DL_Aggregable: true +- Name: appSize ProductCode: - - pdi - - xns - - sws - - sao - - sig - - sca - ams - - sds - Description_EN: The requested URL category + Description_EN: The app size (in bytes) if the subject is an app Sample: - - Untested - - '158' - - Web Advertisement - DL_Type: dynamic + - 16906043 + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: majorVirusType +- Name: appIsSystem ProductCode: - - pds - - sds - ams - - ptn - - pts - - sfc - Description_EN: The virus type + Description_EN: Whether the app is a system app Sample: - - Virus - - Suspicious Activity - - Trojan - - TROJ - DL_Type: string + - false + DL_Type: bool DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: detectionName +- Name: appVerCode ProductCode: - - sao - ams - Description_EN: The general name for the detection + Description_EN: The app version code (if the subject is an app) Sample: - - Troj.Win32.TRX.XXPE50F13017 - - Troj.Win32.TRX.XXPE50FFF059 + - 0 DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: detectionType +- Name: systemEventAttr ProductCode: - - pdi - - xns - - sds - - sws - - sao - - sca - - pds - - sem - - sig - ams - - szn - - scs - Description_EN: The detection type + Description_EN: The attributes of the system event (if the subject is a system + event) Sample: - - '1' - - File - - Process - - net + - usbdebugging DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: eventId +- Name: objectAppDexSha256 ProductCode: - - sds - - pdi - - xns - - sao - - pds - - sca - - xes - - sem - - pts - - scs - - xms - - sfs - - sfc - - sss - ams - - mns - - ddr - Description_EN: The event ID from the logs of each product + Description_EN: The SHA-256 hash of the app Dex value Sample: - - 100100 - - 100101 - - 100116 - - 100117 - - 100119 + - C23A87B77B06442FD9AF9A80DD87191EDEADFAB766C862EBC592FE18063D0449 DL_Type: string DL_CommonKey: + - FileSHA2 DL_Searchable: true DL_Aggregable: true -- Name: osName +- Name: objectAppInstalledTime ProductCode: - - sig - ams - - szn - - ddr - - sss - Description_EN: The host OS name + Description_EN: The time of app installation (in milliseconds) Sample: - - Linux - - windows 10.0.22000 - - windows 10.0.19044 - - windows 10.0.19043 + - 1607935850 DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: pver +- Name: objectAppLabel ProductCode: - - sds - - pdi - - xns - - pds - - sao - - ptp - - stp - - sig - ams - - scs - - sfs - - sfc - - sss - Description_EN: The product version + Description_EN: The app name Sample: - - 20.0.0.4726 - - 20.0.0.4416 - - 6.2.1125 + - Collection Nes Games DL_Type: string DL_CommonKey: DL_Searchable: true - DL_Aggregable: false -- Name: score + DL_Aggregable: true +- Name: objectAppPackageName ProductCode: - - pdi - - xns - - sao - - sca - ams - - sds - Description_EN: The Web Reputation Services URL rating + Description_EN: The app package name Sample: - - 71 - - 81 - - 0 - DL_Type: int + - com.ConsolesXX.CollectionNesGames + DL_Type: string DL_CommonKey: - DL_Searchable: false - DL_Aggregable: false -- Name: mailbox + DL_Searchable: true + DL_Aggregable: true +- Name: objectAppPublicKeySha1 ProductCode: - - sca - - sem - ams - - xms - Description_EN: The mailbox that is protected by Trend Micro + Description_EN: The SHA-1 hash of the app public key Sample: - - sample_email@trendmicro.com + - 05FC638156219800DADAC48D8E621E0BCBD3C321 DL_Type: string DL_CommonKey: + - FileSHA1 DL_Searchable: true - DL_Aggregable: false -- Name: endpointModel + DL_Aggregable: true +- Name: objectAppSha256 ProductCode: - ams - Description_EN: Mobile device model + Description_EN: The SHA-256 hash of the app Sample: - - M2101K9G + - 692BC8E6BC51807A24BEACC13ED2B68E1F954E152863430E3179FA812937B8B0 DL_Type: string DL_CommonKey: + - FileSHA2 DL_Searchable: true - DL_Aggregable: false -- Name: appPkgName + DL_Aggregable: true +- Name: objectAppSize ProductCode: - ams - Description_EN: The app package name + Description_EN: The app size (in bytes) Sample: - - com.example.app_pkg_name_file + - 16906043 DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: appLabel +- Name: objectAppIsSystemApp ProductCode: - ams - Description_EN: App name + Description_EN: Whether the app is a system app Sample: - - Mobile Security Virus Test Application - DL_Type: string + - true + DL_Type: bool DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: appVerCode +- Name: objectAppVerCode ProductCode: - ams Description_EN: The app version code Sample: - - 1 - DL_Type: int + - 0 + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: appPublicKeySha1 +- Name: objectAppVerName ProductCode: - ams - Description_EN: The app public key (SHA-1) + Description_EN: The app version Sample: - - 72080A6B4EB11105B28E31C4753BC91414500AD4 + - 1.0 DL_Type: string DL_CommonKey: - - FileSHA1 DL_Searchable: true DL_Aggregable: false -- Name: appSize +- Name: objectAppBehavior ProductCode: - ams - Description_EN: The app size (in bytes) + Description_EN: The activity that occurred on the app Sample: - - '28461' + - GRANTED_CAMERA_PERMISSION + - APP_NO_ICON + - APP_HIDE_ICON DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: appDexSha256 +- Name: objectAppBehaviorAttr ProductCode: - ams - Description_EN: The app dex encoded using SHA-256 + Description_EN: The attributes of the app activity Sample: - - 08736EDDD3682AC26D9FD42DA2A20B0BADB5C85A5456A0AE85B52D60C564F290 + - android.intent.action.BOOT_COMPLETED DL_Type: string DL_CommonKey: - - FileSHA2 DL_Searchable: true DL_Aggregable: false -- Name: appIsSystem +- Name: objectSystemEventAttr ProductCode: - ams - Description_EN: Whether the app is a system app + Description_EN: The system event attributes Sample: - - false - DL_Type: bool + - LOCK_SCREEN + DL_Type: string DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: osVer +- Name: extraInfo ProductCode: - ams - - szn - - ddr - Description_EN: The OS version + Description_EN: The extra information about the app Sample: - - '11' - DL_Type: string + - N/A + - Web Client Common + - DCERPC Services + DL_Type: dynamic DL_CommonKey: DL_Searchable: true DL_Aggregable: false -- Name: minorVirusType +- Name: objectCertAttr ProductCode: - ams - Description_EN: Minor virus type + Description_EN: The SHA-1 hash of the certificate public key Sample: - - RANSOMWARE - - BANKER - - CREDENTIAL + - 05FC638156219800DADAC48D8E621E0BCBD3C321 DL_Type: string DL_CommonKey: DL_Searchable: true diff --git a/pages/Cloud/Agentless Vulnerability & Threat Detection.md b/pages/Cloud/Agentless Vulnerability & Threat Detection.md index fe9009a..c0c5ca2 100644 --- a/pages/Cloud/Agentless Vulnerability & Threat Detection.md +++ b/pages/Cloud/Agentless Vulnerability & Threat Detection.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -543,7 +543,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -608,7 +608,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -664,7 +664,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -944,7 +944,7 @@ This documentation provides detailed information about all fields available for @@ -477,7 +477,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -688,7 +688,7 @@ This documentation provides detailed information about all fields available for @@ -485,7 +485,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -838,7 +838,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • diff --git a/pages/Cloud/Trend Vision One Container Security.md b/pages/Cloud/Trend Vision One Container Security.md index dcb9905..e4ea6da 100644 --- a/pages/Cloud/Trend Vision One Container Security.md +++ b/pages/Cloud/Trend Vision One Container Security.md @@ -238,12 +238,27 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • + + actionName + string + true + - + The action being taken + + + + Trend Vision One Container Security + clusterId string @@ -448,7 +463,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -561,7 +576,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -603,7 +618,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -652,7 +667,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1315,7 +1330,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -1392,6 +1407,23 @@ This documentation provides detailed information about all fields available for + + principalName + string + true + - + The user principal name used to sign in to the proxy + sample_email@trendmicro.com + + + + processCmd string @@ -1649,7 +1681,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -1679,6 +1711,67 @@ This documentation provides detailed information about all fields available for + + requestDecision + string + true + - + Whether the request was allowed or denied by the authorization system + allow/deny + Trend Vision One Container Security + + + resourceCategory + string + true + - + The category of the object + roles + Trend Vision One Container Security + + + resourceName + string + true + - + The specific name of the object + pod-reader + Trend Vision One Container Security + + + resourceNamespace + string + true + - + The namespace where the referenced resource exists + + + + Trend Vision One Container Security + + + respCode + string + true + - + The network protocol response code + + + + + + + ruleIdStr string @@ -2091,7 +2184,7 @@ This documentation provides detailed information about all fields available for ## Field Statistics -- **Total Fields:** 104 +- **Total Fields:** 111 - **Layer:** Cloud - **Product:** Trend Vision One Container Security diff --git a/pages/Email/Email Sensor.md b/pages/Email/Email Sensor.md index 2eff4a3..4366ed2 100644 --- a/pages/Email/Email Sensor.md +++ b/pages/Email/Email Sensor.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -696,7 +696,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -773,7 +773,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -895,7 +895,7 @@ This documentation provides detailed information about all fields available for @@ -1805,7 +1805,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • diff --git a/pages/Email/Trend Micro Cloud App Security.md b/pages/Email/Trend Micro Cloud App Security.md index 5453686..f621eab 100644 --- a/pages/Email/Trend Micro Cloud App Security.md +++ b/pages/Email/Trend Micro Cloud App Security.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -264,7 +264,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Endpoint & Workload Security
  • Trend Micro Deep Security
  • TXOne StellarOne
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • @@ -654,7 +654,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -760,7 +760,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -837,7 +837,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1075,7 +1075,7 @@ This documentation provides detailed information about all fields available for @@ -1989,7 +1989,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -2077,6 +2077,7 @@ This documentation provides detailed information about all fields available for
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • Zero Trust Secure Access - Private Access
  • +
  • Trend Vision One Container Security
  • @@ -2158,7 +2159,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • @@ -2179,6 +2180,7 @@ This documentation provides detailed information about all fields available for @@ -2484,7 +2486,7 @@ This documentation provides detailed information about all fields available for
  • Network Sensor
  • Trend Micro Apex One as a Service
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • @@ -2620,7 +2622,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • diff --git a/pages/Email/Trend Micro Email Security.md b/pages/Email/Trend Micro Email Security.md index e4f3436..3d2e0ad 100644 --- a/pages/Email/Trend Micro Email Security.md +++ b/pages/Email/Trend Micro Email Security.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -649,7 +649,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -712,7 +712,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -789,7 +789,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -984,7 +984,7 @@ This documentation provides detailed information about all fields available for @@ -1884,7 +1884,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -1994,7 +1994,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • @@ -2015,6 +2015,7 @@ This documentation provides detailed information about all fields available for diff --git a/pages/Endpoint/Data Detection and Response.md b/pages/Endpoint/Data Detection and Response.md index 2195cf7..0f8dfa7 100644 --- a/pages/Endpoint/Data Detection and Response.md +++ b/pages/Endpoint/Data Detection and Response.md @@ -332,7 +332,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -359,7 +359,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -424,7 +424,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -480,7 +480,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -684,7 +684,7 @@ This documentation provides detailed information about all fields available for @@ -701,7 +701,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -743,7 +743,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -1481,7 +1481,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1566,7 +1566,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -4909,7 +4909,7 @@ if ($arrService.Status -ne "Running")
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • diff --git a/pages/Endpoint/Trend Cloud One - Endpoint & Workload Security.md b/pages/Endpoint/Trend Cloud One - Endpoint & Workload Security.md index 1ebb1bd..85a1259 100644 --- a/pages/Endpoint/Trend Cloud One - Endpoint & Workload Security.md +++ b/pages/Endpoint/Trend Cloud One - Endpoint & Workload Security.md @@ -259,7 +259,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -285,7 +285,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Endpoint & Workload Security
  • Trend Micro Deep Security
  • TXOne StellarOne
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • @@ -825,7 +825,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -1029,7 +1029,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -1071,7 +1071,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -1249,7 +1249,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1320,7 +1320,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1974,7 +1974,7 @@ This documentation provides detailed information about all fields available for @@ -5171,7 +5171,7 @@ if ($arrService.Status -ne "Running")
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -5337,7 +5337,7 @@ if ($arrService.Status -ne "Running")
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • @@ -5670,7 +5670,7 @@ if ($arrService.Status -ne "Running")
  • Network Sensor
  • Trend Micro Apex One as a Service
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • @@ -6493,7 +6493,7 @@ if ($arrService.Status -ne "Running")
  • Trend Micro Apex One as a Service
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • diff --git a/pages/Endpoint/Trend Micro Apex One as a Service.md b/pages/Endpoint/Trend Micro Apex One as a Service.md index aff1f87..e7deab3 100644 --- a/pages/Endpoint/Trend Micro Apex One as a Service.md +++ b/pages/Endpoint/Trend Micro Apex One as a Service.md @@ -259,7 +259,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -285,7 +285,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Endpoint & Workload Security
  • Trend Micro Deep Security
  • TXOne StellarOne
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • @@ -955,7 +955,7 @@ This documentation provides detailed information about all fields available for @@ -1000,7 +1000,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -1290,7 +1290,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -1332,7 +1332,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -2121,7 +2121,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -2206,7 +2206,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -6011,7 +6011,7 @@ if ($arrService.Status -ne "Running")
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -7118,7 +7118,7 @@ if ($arrService.Status -ne "Running")
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -7354,7 +7354,7 @@ if ($arrService.Status -ne "Running")
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • @@ -7732,7 +7732,7 @@ if ($arrService.Status -ne "Running")
  • Network Sensor
  • Trend Micro Apex One as a Service
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • @@ -8818,7 +8818,7 @@ if ($arrService.Status -ne "Running")
  • Trend Micro Apex One as a Service
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • diff --git a/pages/Endpoint/Trend Micro Deep Security.md b/pages/Endpoint/Trend Micro Deep Security.md index 28dbbcf..383b35a 100644 --- a/pages/Endpoint/Trend Micro Deep Security.md +++ b/pages/Endpoint/Trend Micro Deep Security.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -264,7 +264,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Endpoint & Workload Security
  • Trend Micro Deep Security
  • TXOne StellarOne
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • @@ -367,7 +367,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -521,7 +521,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -548,7 +548,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -613,7 +613,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -669,7 +669,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1053,7 +1053,7 @@ This documentation provides detailed information about all fields available for @@ -1468,7 +1468,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -1580,7 +1580,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • diff --git a/pages/Network/Mobile Network Security.md b/pages/Network/Mobile Network Security.md index 549896f..bf90b41 100644 --- a/pages/Network/Mobile Network Security.md +++ b/pages/Network/Mobile Network Security.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -498,7 +498,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -554,7 +554,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • diff --git a/pages/Network/Network Sensor.md b/pages/Network/Network Sensor.md index 50fad8a..ee19c4b 100644 --- a/pages/Network/Network Sensor.md +++ b/pages/Network/Network Sensor.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -1231,7 +1231,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -1730,7 +1730,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1807,7 +1807,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -3222,7 +3222,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -3292,7 +3292,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -3565,7 +3565,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • @@ -4172,7 +4172,7 @@ Date: Thu, 19 Aug 2021 06:24:00 GMT
  • Network Sensor
  • Trend Micro Apex One as a Service
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • @@ -5120,7 +5120,7 @@ Date: Thu, 19 Aug 2021 06:24:00 GMT
  • Trend Micro Apex One as a Service
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • diff --git a/pages/Network/TippingPoint Security Management System.md b/pages/Network/TippingPoint Security Management System.md index 6b8e412..7897ccb 100644 --- a/pages/Network/TippingPoint Security Management System.md +++ b/pages/Network/TippingPoint Security Management System.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -475,7 +475,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -631,7 +631,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -686,7 +686,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -719,7 +719,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • diff --git a/pages/Network/Trend Cloud One - Network Security.md b/pages/Network/Trend Cloud One - Network Security.md index d17b0f5..79b066f 100644 --- a/pages/Network/Trend Cloud One - Network Security.md +++ b/pages/Network/Trend Cloud One - Network Security.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -431,7 +431,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -587,7 +587,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -642,7 +642,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -706,7 +706,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • diff --git a/pages/Network/Trend Micro Deep Discovery Inspector.md b/pages/Network/Trend Micro Deep Discovery Inspector.md index c923860..fc14223 100644 --- a/pages/Network/Trend Micro Deep Discovery Inspector.md +++ b/pages/Network/Trend Micro Deep Discovery Inspector.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -1217,7 +1217,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -1716,7 +1716,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1793,7 +1793,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -3194,7 +3194,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -3264,7 +3264,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -3515,7 +3515,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • @@ -4122,7 +4122,7 @@ Date: Thu, 19 Aug 2021 06:24:00 GMT
  • Network Sensor
  • Trend Micro Apex One as a Service
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • @@ -5056,7 +5056,7 @@ Date: Thu, 19 Aug 2021 06:24:00 GMT
  • Trend Micro Apex One as a Service
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • diff --git a/pages/Network/Trend Micro Web Security.md b/pages/Network/Trend Micro Web Security.md index 60d0a74..547265e 100644 --- a/pages/Network/Trend Micro Web Security.md +++ b/pages/Network/Trend Micro Web Security.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -319,7 +319,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -412,7 +412,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Web Security
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • Email Sensor
  • @@ -458,6 +458,7 @@ This documentation provides detailed information about all fields available for
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • Zero Trust Secure Access - Private Access
  • +
  • Trend Vision One Container Security
  • @@ -599,7 +600,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • diff --git a/pages/Network/Zero Trust Secure Access - Internet Access.md b/pages/Network/Zero Trust Secure Access - Internet Access.md index fe1144f..163e1df 100644 --- a/pages/Network/Zero Trust Secure Access - Internet Access.md +++ b/pages/Network/Zero Trust Secure Access - Internet Access.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -489,7 +489,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -694,7 +694,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -740,7 +740,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -818,7 +818,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -1242,7 +1242,7 @@ This documentation provides detailed information about all fields available for @@ -1413,6 +1413,7 @@ This documentation provides detailed information about all fields available for
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • Zero Trust Secure Access - Private Access
  • +
  • Trend Vision One Container Security
  • @@ -1482,7 +1483,7 @@ This documentation provides detailed information about all fields available for
  • TippingPoint Security Management System
  • Trend Cloud One - Network Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Vision One Container Security
  • File Security
  • File Security Storage
  • @@ -1555,7 +1556,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • @@ -1991,7 +1992,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Zero Trust Secure Access - Internet Access
  • Trend Micro Cloud App Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Trend Cloud One - Endpoint & Workload Security
  • diff --git a/pages/Network/Zero Trust Secure Access - Private Access.md b/pages/Network/Zero Trust Secure Access - Private Access.md index e0b8ddf..4b6e249 100644 --- a/pages/Network/Zero Trust Secure Access - Private Access.md +++ b/pages/Network/Zero Trust Secure Access - Private Access.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -373,7 +373,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Trend Micro Email Security
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • Trend Vision One Container Security
  • @@ -546,7 +546,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -592,7 +592,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -670,7 +670,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -763,7 +763,7 @@ This documentation provides detailed information about all fields available for @@ -888,7 +889,7 @@ This documentation provides detailed information about all fields available for
  • Trend Cloud One - Network Security
  • Trend Micro Email Security
  • Trend Micro Deep Security
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • diff --git a/pages/Others/Audit Log.md b/pages/Others/Audit Log.md new file mode 100644 index 0000000..170841c --- /dev/null +++ b/pages/Others/Audit Log.md @@ -0,0 +1,223 @@ +--- +layout: default +title: Audit Log - Others +--- + +# Audit Log +**Layer:** Others + +This documentation provides detailed information about all fields available for Audit Log. + + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Field NameTypeSearchableGeneral FieldDescriptionExampleProducts
    eventRawDatadynamictrue-The original event log string (JSON format){"type":"audit","timestamp":"2020-02-20T08:10:01.904Z","serviceName":"uic","componentName":"backend","siteName":"us-east-1-xdr-eks-prod","customerId":"74b629cb-8fc6-4a1b-a00f-b5003ab9f0e3","identifier":{"id":"db09668d-9d85-42ee-946f-5f8d37f288b2","type":"managedAccount","name":"John Smith","email":"john_smith@abc.com"},"userId":"db09668d-9d85-42ee-946f-5f8d37f288b2","user":"xdr-stg@trendmicro.com","roleId":"53a580c5-d952-43e1-8ce3-79eac4961ee6","role":"admin","sourceIp":"180.10.1.2","access":0,"category":"01","activity":"01","result":true,"triggerService":"awb","details":{"ipAddr":"10.0.0.1"}}Audit Log
    +
    + +## Field Statistics +- **Total Fields:** 1 +- **Layer:** Others +- **Product:** Audit Log + +--- +*Generated by XDR Common Schema Public Doc Generator V2* diff --git a/pages/Others/Mobile Security.md b/pages/Others/Mobile Security.md index ab4915c..5c2dadd 100644 --- a/pages/Others/Mobile Security.md +++ b/pages/Others/Mobile Security.md @@ -300,8 +300,8 @@ This documentation provides detailed information about all fields available for string true - - The app name (if the subject is an app) - Collection Nes Games + App name + Mobile Security Virus Test Application Mobile Security @@ -309,8 +309,8 @@ This documentation provides detailed information about all fields available for string true - - App name - Mobile Security Virus Test Application + The app name (if the subject is an app) + Collection Nes Games Mobile Security @@ -327,8 +327,8 @@ This documentation provides detailed information about all fields available for string true - - The app package name (if the subject is an app) - com.ConsolesXX.CollectionNesGames + The app package name + com.example.app_pkg_name_file Mobile Security @@ -336,8 +336,8 @@ This documentation provides detailed information about all fields available for string true - - The app package name - com.example.app_pkg_name_file + The app package name (if the subject is an app) + com.ConsolesXX.CollectionNesGames Mobile Security @@ -345,8 +345,8 @@ This documentation provides detailed information about all fields available for string true FileSHA1 - The SHA-1 hash of the app public key (if the subject is an app) - 05FC638156219800DADAC48D8E621E0BCBD3C321 + The app public key (SHA-1) + 72080A6B4EB11105B28E31C4753BC91414500AD4 Mobile Security @@ -354,8 +354,8 @@ This documentation provides detailed information about all fields available for string true FileSHA1 - The app public key (SHA-1) - 72080A6B4EB11105B28E31C4753BC91414500AD4 + The SHA-1 hash of the app public key (if the subject is an app) + 05FC638156219800DADAC48D8E621E0BCBD3C321 Mobile Security @@ -363,8 +363,8 @@ This documentation provides detailed information about all fields available for string true - - The app size (in bytes) if the subject is an app - 16906043 + The app size (in bytes) + 28461 Mobile Security @@ -372,26 +372,26 @@ This documentation provides detailed information about all fields available for string true - - The app size (in bytes) - 28461 + The app size (in bytes) if the subject is an app + 16906043 Mobile Security appVerCode - string + int true - - The app version code (if the subject is an app) - 0 + The app version code + 1 Mobile Security appVerCode - int + string true - - The app version code - 1 + The app version code (if the subject is an app) + 0 Mobile Security @@ -444,15 +444,6 @@ This documentation provides detailed information about all fields available for - - endpointGuid - string - true - EndpointID - Host GUID of the endpoint on which the event was detected - 11111111-1111-1111-1111-111111111111 - Mobile Security - endpointGUID string @@ -482,18 +473,12 @@ This documentation provides detailed information about all fields available for - endpointHostName + endpointGuid string true - EndpointName - The host name of the endpoint on which the event was detected - - - + EndpointID + Host GUID of the endpoint on which the event was detected + 11111111-1111-1111-1111-111111111111 Mobile Security @@ -524,6 +509,21 @@ This documentation provides detailed information about all fields available for + + endpointHostName + string + true + EndpointName + The host name of the endpoint on which the event was detected + + + + Mobile Security + endpointIp dynamic @@ -549,8 +549,8 @@ This documentation provides detailed information about all fields available for string true - - The endpoint device model - Pixel 3 XL + Mobile device model + M2101K9G Mobile Security @@ -558,8 +558,8 @@ This documentation provides detailed information about all fields available for string true - - Mobile device model - M2101K9G + The endpoint device model + Pixel 3 XL Mobile Security @@ -577,15 +577,6 @@ This documentation provides detailed information about all fields available for Mobile Security - - eventId - int - true - - - Event type - - - Mobile Security - eventId string @@ -623,6 +614,15 @@ This documentation provides detailed information about all fields available for + + eventId + int + true + - + Event type + - + Mobile Security + eventName string @@ -1074,21 +1074,6 @@ This documentation provides detailed information about all fields available for LOCK_SCREEN Mobile Security - - osName - string - true - - - The host operating system name - - - - Mobile Security - osName string @@ -1114,16 +1099,16 @@ This documentation provides detailed information about all fields available for - osVer + osName string true - - The OS version + The host operating system name Mobile Security @@ -1144,16 +1129,16 @@ This documentation provides detailed information about all fields available for - pname + osVer string true - - Internal product ID (Deprecated, use productCode) + The OS version Mobile Security @@ -1192,16 +1177,16 @@ This documentation provides detailed information about all fields available for - pver + pname string true - - The product version + Internal product ID (Deprecated, use productCode) Mobile Security @@ -1238,16 +1223,16 @@ This documentation provides detailed information about all fields available for - request + pver string true - URL - Request URL + - + The product version Mobile Security @@ -1282,6 +1267,21 @@ This documentation provides detailed information about all fields available for + + request + string + true + URL + Request URL + + + + Mobile Security + score int diff --git a/pages/Others/TXOne EdgeOne.md b/pages/Others/TXOne EdgeOne.md index 4ea27bd..095aaff 100644 --- a/pages/Others/TXOne EdgeOne.md +++ b/pages/Others/TXOne EdgeOne.md @@ -238,7 +238,7 @@ This documentation provides detailed information about all fields available for
  • TXOne EdgeOne
  • Zero Trust Secure Access - Private Access
  • Email Sensor
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Agentless Vulnerability & Threat Detection
  • @@ -463,7 +463,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -601,7 +601,7 @@ This documentation provides detailed information about all fields available for @@ -273,7 +273,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Deep Security
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -300,7 +300,7 @@ This documentation provides detailed information about all fields available for
  • Trend Micro Apex One as a Service
  • Endpoint Sensor
  • Zero Trust Secure Access - Internet Access
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Zero Trust Secure Access - Private Access
  • TXOne StellarOne
  • Trend Vision One Container Security
  • @@ -360,7 +360,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -416,7 +416,7 @@ This documentation provides detailed information about all fields available for
  • File Security
  • File Security Storage
  • Agentless Vulnerability & Threat Detection
  • -
  • Trend Vision One Mobile Security
  • +
  • Mobile Security
  • Mobile Network Security
  • Data Detection and Response
  • @@ -595,7 +595,7 @@ This documentation provides detailed information about all fields available for