Document toolboxDocument toolbox

xdr.cynet

Introduction

The tags beginning with xdr.cynet identify events generated by Cynet. 

Valid tags and data tables

The full tag must have 4 levels. The first two are fixed as xdr.cynet. The third level identifies the type of events sent, and the fourth level indicates the event subtype. 

Technology

Brand

Type

Subtype

Technology

Brand

Type

Subtype

xdr

cynet

  • alerts

  • audit

  • va

  • events

  • patch_validation

  • installed_softwares

  • patches.existing

  • patches.missing

  • agents

  • risky_apps

These are the valid tags and corresponding data tables that will receive the parsers' data:

Tag

Data table

Tag

Data table

xdr.cynet.alerts.events

xdr.cynet.alerts.events

xdr.cynet.audit.events

xdr.cynet.audit.events

xdr.cynet.va.patch_validation

xdr.cynet.va

xdr.cynet.va.installed_softwares

xdr.cynet.va

xdr.cynet.va.patches.existing

xdr.cynet.va

xdr.cynet.va.patches.missing

xdr.cynet.va

xdr.cynet.va.agents

xdr.cynet.va

xdr.cynet.va.risky_apps

xdr.cynet.va

How is the data sent to Devo?

Logs generated by Cynet XDR are forwarded to Devo using a dedicated collector. Contact us if you need to forward these events to your Devo domain so we can guide you through the process.Â