Samsung_Knox_Process_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items

Schema (34 columns)

Source: KQL validation test schema

Column Name	Type
Atime	datetime
CmdLine	string
Ctime	datetime
Cwd	string
DeviceImei1	string
DeviceImei2	string
DeviceModel	string
DeviceSerialNumber	string
DeviceWifimac	string
Egid	int
Euid	int
EventGuid	long
ExitCode	int
Fsgid	int
Fsuid	int
Gid	int
MitreTtp	dynamic
Mtime	datetime
Name	string
OwnerGid	int
OwnerUid	int
Path	string
Pid	int
Ppid	int
PrimaryImei	string
Profile	string
Severity	string
Sgid	int
Suid	int
Syscall	int
Tid	int
TimeGenerated	datetime
Uid	int
Version	string

Solutions (1)

This table is used by the following solutions:

• Samsung Knox Asset Intelligence

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Samsung Knox Asset Intelligence

---

Content Items Using This Table (3)

Analytic Rules (1)

In solution Samsung Knox Asset Intelligence:

Analytic Rule	Selection Criteria
Samsung Knox - Application Privilege Escalation or Change Events

Workbooks (2)

In solution Samsung Knox Asset Intelligence:

Workbook	Selection Criteria
SamsungKnoxAssetIntelligence

GitHub Only:

Workbook	Selection Criteria
SamsungKnoxAssetIntelligence

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index