Document toolboxDocument toolbox

casb - Cloud Access Security Broker

This group includes tags that start with the level casb. These tags identify data generated by Cloud Access Security Broker (CASB) systems.

Company

Product / Service

Data tables

Company

Product / Service

Data tables

Bitglass

  • casb.bitglass.access

  • casb.bitglass.admin

  • casb.bitglass.cloud_audit

  • casb.bitglass.cloud_summary

More information

Cisco Cloudlock

  • casb.cisco.cloudlock.activities

  • casb.cisco.cloudlock.apps

  • casb.cisco.cloudlock.incidents

  • casb.cisco.cloudlock.policies

  • casb.cisco.cloudlock.suspicious_ip

  • casb.cisco.cloudlock.threats

More information

Illumio

  • casb.illumio.events

More information

 

Microsoft Defender

  • casb.microsoft_defender.cloud_apps.activities

  • casb.microsoft_defender.cloud_apps.alerts

  • casb.microsoft_defender.cloud_apps.data_enrichment

  • casb.microsoft_defender.cloud_apps.entities

  • casb.microsoft_defender.cloud_apps.files

More information

 

Netskope CASB (Cloud Access Security Broker) 

  • casb.netskope.alert 

  • casb.netskope.application

  • casb.netskope.audit

  • casb.netskope.client

  •  casb.netskope.compromisedcredential

  • casb.netskope.incident

  • casb.netskope.infrastructure 

  • casb.netskope.malsite

  • casb.netskope.malware

  • casb.netskope.network

  • casb.netskope.page

  • casb.netskope.policy

  • casb.netskope.transaction_events

  • casb.netskope.uba

More information

 

Paloalto Prisma Cloud

Deprecated parsers

These parsers are no longer supported by Devo. Please, use sase.paloalto parsers instead if possible.

Learn more in this article.

  • casb.paloalto.prisma

  • casb.paloalto.prisma.activity_monitoring

  • casb.paloalto.prisma.admin_audit

  • casb.paloalto.prisma.incident

  • casb.paloalto.prisma.invalid

  • casb.paloalto.prisma.other

  • casb.paloalto.prisma.policy_violation

  • casb.paloalto.prisma.remediation

More information

Proofpoint

  • casb.proofpoint.alert

  • casb.proofpoint.event

More information

Trend Micro

  • casb.trendmicro.security

More information

Â