Antivirus

This group includes tables that start with the level av. These tables receive data generated by antivirus and protection software.

Company	Product / service	Data tables
	Mobile Threat Prevention	`av.checkpoint.mtp.audit` `av.checkpoint.mtp.event`
	F-Secure Internet Gatekeeper	`av.fsecure.igk.access`
	McAfee ePolicy Orchestrator (McAfee ePO)	`av.mcafee.epo.agent` ^+info `av.mcafee.epo.endpointsecurity` ^+info `av.mcafee.epo.virusscan` ^+info
	SentinelOne Endpoint Protection Platform (EPP)	`av.sentinelone.events`
	Sophos AntiVirus	`av.sophos.applicationcontrol` ^+info `av.sophos.devicecontrol` ^+info `av.sophos.enterprise` ^+info `av.sophos.events` ^+info `av.sophos.tamperprotection` ^+info `av.sophos.threatinstances` ^+info `av.sophos.threats` ^+info
	Symantec Endpoint Protection	`av.symantec.sep.mail`
	Symantec Endpoint Protection Cloud	`av.symantec.sepc.events`
	Deep Security Software	`av.trendmicro.deepsec.agent` `av.trendmicro.deepsec.console` `av.trendmicro.deepsec.manager`
	InterScan Web Security Virtual Appliance	`av.trendmicro.iwsva.event`