MorphisecAlerts_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items
• Parsers

Schema (41 columns)

Source: Connector definition

Column Name	Type
action	string
application	string
applicationPath	string
attackModule	string
attackSeverity	string
classification	string
defenderDescription	dynamic
defenderId	string
description	string
detectionDescription	string
detectionEngineVersion	dynamic
detectionName	string
detectionPath	dynamic
engine	string
filePath	string
hostname	string
id	string
kernel	string
metadataProtectorVersion	string
mitreClassification	dynamic
name	string
numberOfAttacks	dynamic
operatingSystem	string
parentProcessCommandLine	string
parentProcessSignature	string
path	dynamic
processCommandLine	string
processCommandLineArgs	dynamic
processSignature	string
protectorId	string
reviewStatus	string
signature	string
subClassification	string
threatMessageArrivalTime	datetime
threatModule	string
threatSubType	string
threatTime	datetime
threatType	string
TimeGenerated	datetime
url	dynamic
user	string

Solutions (1)

This table is used by the following solutions:

• Morphisec

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Morphisec API Data Connector (via Codeless Connector Framework)

---

Content Items Using This Table (3)

Analytic Rules (3)

In solution Morphisec:

Analytic Rule	Selection Criteria
Critical Severity Incident
Device Alert Surge
Process-Level Anomaly

Parsers Using This Table (1)

Other Parsers (1)

Parser	Solution	Selection Criteria
Morphisec	Morphisec

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index