edr.blackberry

[ 1 Introduction ] [ 2 Tag structure ] [ 3 Table structure ]

Introduction

The tags begin with edr.blackberry identify the events generated by Blackberry.

Tag structure

The full tag must have 4 levels. The first two are fixed as edr.blackberry. The third level identifies the type of events sent, and the fourth level indicates the event subtype.

Product / Services	Tags	Data tables

Product / Services	Tags	Data tables
Blackberry	`edr.blackberry.cylance.devices`	`edr.blackberry.cylance.devices`
	`edr.blackberry.cylance.optics_detections`	`edr.blackberry.cylance.optics_detections`
	`edr.blackberry.cylance.optics_detections_rules`	`edr.blackberry.cylance.optics_detections_rules`
	`edr.blackberry.cylance.optics_detections_exceptions`	`edr.blackberry.cylance.optics_detections_exceptions`
	`edr.blackberry.cylance.policies`	`edr.blackberry.cylance.policies`
	`edr.blackberry.cylance.threats`	`edr.blackberry.cylance.threats`
	`edr.blackberry.cylance.users`	`edr.blackberry.cylance.users`

For more information, read more about Devo tags.

Table structure

These are the fields displayed in these tables: