Document toolboxDocument toolbox

endpoint - Endpoint

This group includes tags that start with the level endpoint. These tags identify data generated by endpoint-related systems.

Company

Product / Service

Data tables

Company

Product / Service

Data tables

image-20240423-082554.png

Airlock Digital

  • endpoint.airlock.allowlist.audit

More information

Bitdefender

  • endpoint.bitdefender.agent

  • endpoint.bitdefender.agent.active_host

  • endpoint.bitdefender.agent.active_host_ping

  • endpoint.bitdefender.agent.alert

  • endpoint.bitdefender.agent.connection_connect

  • endpoint.bitdefender.agent.ctc_raw_process_create

  • endpoint.bitdefender.agent.detection

  • endpoint.bitdefender.agent.external_notification_on_process

  • endpoint.bitdefender.agent.file_create

  • endpoint.bitdefender.agent.file_delete

  • endpoint.bitdefender.agent.file_modify

  • endpoint.bitdefender.agent.file_move

  • endpoint.bitdefender.agent.file_read

  • endpoint.bitdefender.agent.filescan_detection

  • endpoint.bitdefender.agent.generic_logging

  • endpoint.bitdefender.agent.interface_added

  • endpoint.bitdefender.agent.interface_change

  • endpoint.bitdefender.agent.log_on

  • endpoint.bitdefender.agent.log_out

  • endpoint.bitdefender.agent.logon_failed

  • endpoint.bitdefender.agent.network_connection

  • endpoint.bitdefender.agent.network_interfaces

  • endpoint.bitdefender.agent.process_create

  • endpoint.bitdefender.agent.process_create_execve

  • endpoint.bitdefender.agent.process_create_fork

  • endpoint.bitdefender.agent.process_signal

  • endpoint.bitdefender.agent.rca_insight

  • endpoint.bitdefender.agent.rca_insight_event

  • endpoint.bitdefender.agent.reg_delete_key

  • endpoint.bitdefender.agent.reg_delete_value

  • endpoint.bitdefender.agent.reg_modify_value

  • endpoint.bitdefender.agent.scheduled_task_create

  • endpoint.bitdefender.agent.service_added

  • endpoint.bitdefender.agent.terminate_process

  • endpoint.bitdefender.agent.user_account_settings_change

  • endpoint.bitdefender.agent.user_logout

  • endpoint.bitdefender.agent.user_session_list

  • endpoint.bitdefender.agent.user_specific_logging

  • endpoint.bitdefender.agent.xrca

  • endpoint.bitdefender.agent.xrca_event

  • endpoint.bitdefender.agent.modify_value

  • endpoint.bitdefender.gravityzone.product_modules_status

More information

Carbon Black Protection

  • endpoint.carbonblack.protection

More information

SentinelOne Singularity Mobile

  • endpoint.sentinelone.mobile.audit

  • endpoint.sentinelone.mobile.threat

More information

Symantec Endpoint Protection Manager

  • endpoint.symantec.sepm.agent_activity

  • endpoint.symantec.sepm.agent_behavior

  • endpoint.symantec.sepm.agent_risk

  • endpoint.symantec.sepm.agent_scan

  • endpoint.symantec.sepm.agent_security

  • endpoint.symantec.sepm.agent_system

  • endpoint.symantec.sepm.agent_traffic

  • endpoint.symantec.sepm.others

More information

 

VMware Carbon Black

  • endpoint.vmware.cbc_api.alerts

  • endpoint.vmware.cbc_defender.audit_logs

  • endpoint.vmware.cbc_event_forwarder

  • endpoint.vmware.cbc_event_forwarder.cb_analytics

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_apicall

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_crossproc

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_fileless_scriptload

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_filemod

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_moduleload

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_netconn

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_procend

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_procstart

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_regmod

  • endpoint.vmware.cbc_event_forwarder.endpoint_event_scriptload

  • endpoint.vmware.cbc_event_forwarder.kognos_alerts

  • endpoint.vmware.cbc_event_forwarder.kognos_events

  • endpoint.vmware.cbc_event_forwarder.unknown

  • endpoint.vmware.cbc_liveops.live_query

More information