/

edr.cybereason

Document toolbox

edr.cybereason

Owned by Juan Tomás Alonso Nieto (Deactivated)

Last updated: Aug 25, 2023

3 min read

[ 1 Introduction ] [ 2 Tag structure ] [ 3 Table structure ]

Introduction

The tags begin with edr.cybereason identify the events generated by Cybereason.

Tag structure

The full tag must have at least 2 levels. The first two are fixed as edr.cybereason. The third level identifies the type of events sent.

Product / Services	Tags	Data tables

Product / Services	Tags	Data tables
Cybereason	`edr.cybereason.malop`	`edr.cybereason`
	`edr.cybereason.api_malop`	`edr.cybereason.api_malop`
	`edr.cybereason.api_malware`	`edr.cybereason.api_malware`
	`edr.cybereason.malop`	`edr.cybereason.malop`
	`edr.cybereason.malware`	`edr.cybereason.malware`
	`edr.cybereason.useractions`	`edr.cybereason.useractions`

For more information, read more about Devo tags.

Table structure

These are the fields displayed in these tables:

Related content

cef0.cybereason

cef0.cybereason

More like this

cef0.cybereason

cef0.cybereason

More like this

xdr.cynet

More like this

edr.mcafee

More like this

edr.cisco

More like this

threatintel.socradar

threatintel.socradar

More like this