casb - Cloud Access Security Broker

This group includes tags that start with the level casb. These tags identify data generated by Cloud Access Security Broker (CASB) systems.

Company	Product / Service	Data tables

Company	Product / Service	Data tables
	Bitglass	`casb.bitglass.access` `casb.bitglass.admin` `casb.bitglass.cloud_audit` `casb.bitglass.cloud_summary` More information
	Cisco Cloudlock	`casb.cisco.cloudlock.activities` `casb.cisco.cloudlock.apps` `casb.cisco.cloudlock.incidents` `casb.cisco.cloudlock.policies` `casb.cisco.cloudlock.suspicious_ip` `casb.cisco.cloudlock.threats` More information
	Illumio	`casb.illumio.events` More information
	Microsoft Defender	`casb.microsoft_defender.cloud_apps.activities` `casb.microsoft_defender.cloud_apps.alerts` `casb.microsoft_defender.cloud_apps.data_enrichment` `casb.microsoft_defender.cloud_apps.entities` `casb.microsoft_defender.cloud_apps.files` More information
	Netskope CASB (Cloud Access Security Broker)	`casb.netskope.alert` `casb.netskope.application` `casb.netskope.audit` `casb.netskope.client` `casb.netskope.compromisedcredential` `casb.netskope.incident` `casb.netskope.infrastructure` `casb.netskope.malsite` `casb.netskope.malware` `casb.netskope.network` `casb.netskope.page` `casb.netskope.policy` `casb.netskope.transaction_events` `casb.netskope.uba` More information
	Paloalto Prisma Cloud	Deprecated parsers These parsers are no longer supported by Devo. Please, use `sase.paloalto` parsers instead if possible. Learn more in this article. `casb.paloalto.prisma` `casb.paloalto.prisma.activity_monitoring` `casb.paloalto.prisma.admin_audit` `casb.paloalto.prisma.incident` `casb.paloalto.prisma.invalid` `casb.paloalto.prisma.other` `casb.paloalto.prisma.policy_violation` `casb.paloalto.prisma.remediation` More information
	Proofpoint	`casb.proofpoint.alert` `casb.proofpoint.event` More information
	Trend Micro	`casb.trendmicro.security` More information