Endpoint

DetectionType

String

Detection type

Possible values are:

•UnknownAlarm

•RuleActivated

•MalwareFoundOnDisk

•MalwareFoundInMemory

•ExploitDetected

•FirewallDetection

•HipsDetection

•BlockedAddress

•CryptoBlockerDetection

Scanner

String

Name of the scanner that triggered the event

Severity

String

Severity of the detection

Possible values are:

•Information

•Warning

•Threat

ThreatHandled

Bool

Information if the threat has been handled

true/false

ThreatName

String

Name of the threat

ThreatType

String

Type of the threat

Possible values are:

•Malware

•Nearmiss

•PUA

•DangerousApp

•BlockedFile

•UnsafeApp