Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update schema OLH to v1.144.0 #2

Merged
merged 1 commit into from
Dec 2, 2024
Merged

update schema OLH to v1.144.0 #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions doc/Cloud Activity Data.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -162,7 +162,7 @@
- sct
Description_EN: Additional data about the event that was not part of the request
trend-dennis-tseng marked this conversation as resolved.
Show resolved Hide resolved
or response
DL_Type: string
DL_Type: dynamic
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
Expand Down Expand Up @@ -261,7 +261,7 @@
- sct
Description_EN: Identifies the service event, including what triggered the event
trend-dennis-tseng marked this conversation as resolved.
Show resolved Hide resolved
and the result
DL_Type: string
DL_Type: dynamic
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
65 changes: 63 additions & 2 deletions doc/Detections.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,6 +88,7 @@
- pts
- scs
- sss
- ddr
Description_EN: The endpoint hostname or node where the event was detected
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -118,6 +119,7 @@
- szn
- pts
- scs
- ddr
Description_EN: The GUID of the agent which reported the detection
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -240,7 +242,8 @@
- stp
- ptn
- sss
Description_EN: IP address of the endpoint on which the event was detected
- ddr
Description_EN: The IP address of the endpoint on which the event was detected
DL_Type: dynamic
DL_CommonKey:
- IPv4
Expand Down Expand Up @@ -770,6 +773,7 @@
- xms
- qpf
- mns
- ddr
Description_EN: The name of the rule that triggered the event
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -828,6 +832,7 @@
- sss
- ams
- mns
- ddr
Description_EN: The event type
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -1449,6 +1454,7 @@
- stp
- sig
- pts
- ddr
Description_EN: The number of aggregated events
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -1894,6 +1900,7 @@
- sss
- ams
- mns
- ddr
Description_EN: The event ID from the logs of each product
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -2306,6 +2313,7 @@
- sig
- ams
- szn
- ddr
Description_EN: The host operating system name
trend-dennis-tseng marked this conversation as resolved.
Show resolved Hide resolved
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -3318,6 +3326,7 @@
ProductCode:
- sca
- pts
- ddr
Description_EN: The first time the XDR log appeared
DL_Type: string
DL_CommonKey:
Expand All @@ -3327,6 +3336,7 @@
ProductCode:
- sca
- pts
- ddr
Description_EN: The last time the XDR log appeared
DL_Type: string
DL_CommonKey:
Expand Down Expand Up @@ -3407,6 +3417,15 @@
DL_CommonKey:
DL_Searchable: false
DL_Aggregable: false
- Name: signInCountries
ProductCode:
- sca
- aad
Description_EN: The countries from which a user signed in
DL_Type: dynamic
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
- Name: endpointModel
ProductCode:
- ams
Expand Down Expand Up @@ -3477,7 +3496,8 @@
ProductCode:
- ams
- szn
Description_EN: OS version
- ddr
Description_EN: The OS version
DL_Type: string
DL_CommonKey:
DL_Searchable: true
Expand Down Expand Up @@ -3570,6 +3590,7 @@
- Name: logonUsers
ProductCode:
- ALL
- ddr
Description_EN: The telemetry events match the Security Analytics Engine filter,
trend-dennis-tseng marked this conversation as resolved.
Show resolved Hide resolved
and logonUsers stores the logonUsers value of the original events
DL_Type: dynamic
Expand Down Expand Up @@ -4706,3 +4727,43 @@
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
- Name: duration
ProductCode:
- ddr
Description_EN: The detection interval (in milliseconds)
DL_Type: string
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
- Name: aggregateUnit
ProductCode:
- ddr
Description_EN: The metric unit
DL_Type: string
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
- Name: aggregateFunction
ProductCode:
- ddr
Description_EN: The metric aggregator
DL_Type: int
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
- Name: uuids
ProductCode:
- ddr
Description_EN: The UUIDs of detection records
DL_Type: dynamic
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false
- Name: lineageId
ProductCode:
- ddr
Description_EN: The lineage ID
DL_Type: string
DL_CommonKey:
DL_Searchable: true
DL_Aggregable: false