Content Comparison

...

These are the fields displayed in this table:

cef0.trellix.dlpPrevent

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
act	`str`
app	`str`
dvc	`ip4`
dst	`ip4`
dhost	`str`
duser	`str`
fileId	`str`
fsize	`int8`
fileHash	`str`
filePath	`str`
flexNumber1	`int4`
flexNumber1Label	`str`
msg	`str`
policyName	`str`
ResourceName	`str`
rt	`timestamp`
sourceServiceName	`str`
src	`ip4`
shost	`str`
suser	`str`
original_message_id	`str`
original_sender	`str`
original_subject	`str`
email_encryption_type	`str`
file_sig	`str`
file_size	`int8`
dlp_hostname	`str`
hostdomain_name	`str`
mac_address	`mac`
uuid	`str`
protocol	`str`
protocol_response	`str`
protocol_response_line	`str`
product_phase	`str`
error_code	`str`
error_category	`str`
error_text	`str`
error_description	`str`
evidence_copy_error	`str`
server_response_code	`str`
receive_tls	`str`
send_tls	`str`
receive_auth	`str`
send_auth	`str`
modified_recipients	`str`
email_sender	`str`
email_recipients	`str`
capture_search_id	`str`
capture_search_query	`str`
current_bucket_id	`str`
new_bucket_id	`str`
bucket_id_in_use	`str`
rows_written	`str`
db_error_string	`str`
directory_name	`str`
sss_path	`str`
sss_offset	`str`
sss_metadata_size	`str`
sss_size	`str`
source_port	`str`
request_id	`str`
given_request_id	`str`
transaction_id	`str`
pii_deletion	`str`
pii_deleted_records	`str`
product	`str`
hardware_component	`str`
build_tag	`str`
scan_host_ip	`ip4`
cs1Label	`str`
cs1	`str`
cs2Label	`str`
cs2	`str`
cs3Label	`str`
cs3	`str`
cs4Label	`str`
cs4	`str`
cs5Label	`str`
cs5	`str`
cs6Label	`str`
cs6	`str`
cn1Label	`str`
cn1	`int8`
cn2Label	`str`
cn2	`int8`
cn3Label	`str`
cn3	`int8`
rawMessage	`str`		✓
hostchain	`str`		✓
tag	`str`	cefTag	✓

Version	Old Version 2	New Version 3
Changes made by	Juan Tomás Alonso Nieto	Juan Tomás Alonso Nieto
Saved on	Sept 26, 2023	Sept 26, 2023

Versions Compared

Key

cef0.trellix.dlpPrevent