hmLoadTopic({
hmKeywords:"JSON-событие",
hmTitle:"События, экспортируемые в формат JSON",
hmDescription:"JSON — облегченный формат для обмена данными. Он построен на наборе пар «имя-значение» и упорядоченном списке значений.",
hmPrevLink:"admin_server_settings_syslog.html",
hmNextLink:"events-exported-to-leef-format.html",
hmParentLink:"admin_server_settings_export_to_syslog.html",
hmBreadCrumbs:"<a href=\"using.html\">Использование ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Главное меню<\/a> &gt; <a href=\"admin.html\">Дополнительно<\/a> &gt; <a href=\"admin_server_settings_export_to_syslog.html\">Экспорт журналов в системный журнал<\/a>",
hmTitlePath:"Использование ESET PROTECT On-Prem > ESET PROTECT On-Prem Главное меню > Дополнительно > Экспорт журналов в системный журнал > События, экспортируемые в формат JSON",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">События, экспортируемые в формат JSON<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">JSON — облегченный формат для обмена данными. Он построен на наборе пар «имя-значение» и упорядоченном списке значений.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Экспортируемые события<\/span><\/h2>\n\r<p class=\"p_Normal\">Этот раздел содержит сведения о формате и значение атрибутов всех экспортируемых событий. Сообщение о событии создается в виде объекта JSON с обязательными и необязательными ключами. Каждое экспортируемое событие будет содержать следующий ключ:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:101px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:700px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип экспортируемых событий:<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#threat\" class=\"topiclink\">Threat_Event<\/a> (обнаружения <\/span><span class=\"f_NormalTableUI\">защиты от вирусов<\/span><span class=\"f_NormalTable\"> <\/span><img alt=\"icon_antivirus\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#firewall\" class=\"topiclink\">FirewallAggregated_Event<\/a> (обнаружения <\/span><span class=\"f_NormalTableUI\">файервола<\/span><span class=\"f_NormalTable\"> <\/span><img alt=\"icon_firewall\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#hips\" class=\"topiclink\">HipsAggregated_Event<\/a> (обнаружения системы <\/span><span class=\"f_NormalTableUI\">HIPS<\/span><span class=\"f_NormalTable\"> <\/span><img alt=\"icon_hips\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#audit\" class=\"topiclink\">Audit_Event<\/a> (<a href=\"audit_log.html\" class=\"topiclink\">журнал аудита<\/a>)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#websites\" class=\"topiclink\">FilteredWebsites_Event<\/a> (отфильтрованные веб-сайты – <\/span><span class=\"f_NormalTableUI\">защита доступа в Интернет<\/span><span class=\"f_NormalTable\"> <\/span><img alt=\"icon_web_protection\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#eei\" class=\"topiclink\">EnterpriseInspectorAlert_Event<\/a> (<a href=\"eset_inspect.html\" class=\"topiclink\">предупреждения ESET Inspect<\/a> <\/span><img alt=\"icon_ei_alert\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#files\" class=\"topiclink\">BlockedFiles_Event<\/a> (<a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">заблокированные файлы<\/a> <\/span><img alt=\"icon_blocked\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/><span class=\"f_NormalTable\">)<\/span><\/p><\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv4<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv4-адрес компьютера, создавшего событие.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv6<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv6-адрес компьютера, создавшего событие.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hostname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор Имя хоста компьютера, создавшего событие.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_uuid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор UUID компьютера, создавшего событие.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">occurred<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Время события в формате UTC. Используется формат %d-%b-%Y %H:%M:%S.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Серьезность события. Возможные значения (от наименее до наиболее серьезных событий): <\/span><span class=\"f_NormalTableCode\">«Информация»<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">«Примечание»<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">«Предупреждение»<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">«Ошибка»<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">«Критическая ошибка»<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">«Неустранимая ошибка»<\/span><span class=\"f_NormalTable\">.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Полный путь статической группы компьютера, создавшего событие. Если длина пути превышает 255 символов, group_name содержит только имя статической группы.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Описание статической группы.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">os_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Информация об операционной системе компьютера.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Примечание\" title=\"Примечание\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">Все перечисленные ниже типы событий со всеми уровнями серьезности передаются на сервер системного журнала. Для фильтрации журналов событий, отправленных в системный журнал, <a href=\"admin_notif_events_on.html\" class=\"topiclink\">создайте уведомление о категории журнала<\/a> с заданным фильтром.<\/p>\n\r<p class=\"p_Normal\">Передаваемые значения зависят от продукта безопасности ESET (и его версии), установленного на управляемом компьютере, и ESET PROTECT On-Prem передает только полученные данные. Поэтому ESET не может предоставить исчерпывающий список всех значений. Рекомендуем наблюдать за сетью и фильтровать журналы на основании получаемых значений.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"custom_keys\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Настраиваемые ключи в соответствии с event_type:<\/span><\/h2>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"threat\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Threat_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Все события типа «обнаружение <span class=\"f_UI\">защиты от вирусов<\/span>» <img alt=\"icon_antivirus\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/>, которые создаются управляемыми конечными точками, будут перенаправлены в системный журнал. Ключи событий «обнаружение» перечислены в таблице ниже.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип обнаружения<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя обнаружения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_flags<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Флаги, связанные с обнаружением<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор модуля сканирования.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scan_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор сканирования.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">engine_version<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Версия модуля сканирования.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип объекта, связанного с этим событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI объекта<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие, которое выполнила конечная точка.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_error<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Сообщение об ошибке, если «действие» не было успешным.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">логическое значение<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Показывает, было ли обработано обнаружение.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">need_restart<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">логическое значение<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Показывает, нужна ли перезагрузка.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, связанного с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">circumstances<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Краткое описание причины события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">SHA1-хеш потока данных (обнаружения).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><a id=\"firstseen\" class=\"hmanchor\"><\/a><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Время и дата, когда обнаружение было выявлено впервые на этом компьютере. ESET PROTECT On-Prem использует разные форматы даты и времени для атрибута firstseen (и любого другого атрибута даты и времени) в зависимости от формата вывода журнала (JSON или LEEF):<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">JSON формат:&quot;%d-%b-%Y %H:%M:%S&quot;<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">LEEF формат:&quot;%b %d %Y %H:%M:%S&quot;<\/span><\/p><\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a1_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a1_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a1_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала JSON Threat_Event:<\/a><\/p>\n\r<div id=\"toggle0186a1\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;46:&nbsp;40&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Threat_Event&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-mg&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;1361a9f6-1d45-4561-b33a-b5d6c62c71e0&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:15&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_type&quot;:&nbsp;&quot;Virus&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_name&quot;:&nbsp;&quot;XF\/Gydhex.A&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scanner_id&quot;:&nbsp;&quot;Real-time&nbsp;file&nbsp;system&nbsp;protection&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scan_id&quot;:&nbsp;&quot;virlog.dat&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;engine_version&quot;:&nbsp;&quot;23497&nbsp;(20210621)&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_type&quot;:&nbsp;&quot;file&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_uri&quot;:&nbsp;&quot;file:\/\/\/C:\/Users\/Administrator\/Downloads\/xls\/YICT080714.xls&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action_taken&quot;:&nbsp;&quot;Deleted&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_handled&quot;:&nbsp;true,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;need_restart&quot;:&nbsp;false,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;username&quot;:&nbsp;&quot;030-MG\\\\Administrator&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\WinRAR\\\\WinRAR.exe&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;circumstances&quot;:&nbsp;&quot;Event&nbsp;occurred&nbsp;on&nbsp;a&nbsp;newly&nbsp;created&nbsp;file.&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;firstseen&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:14&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hash&quot;:&nbsp;&quot;5B97884A45C6C05F93B22C4059F3D9189E88E8B7&quot;<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"firewall\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FirewallAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Чтобы не перегружать полосу пропускания при репликации агента ESET Management или сервера ESET PROTECT, журналы событий, созданные файерволом ESET (обнаружения <span class=\"f_UI\">файервола<\/span> <img alt=\"icon_firewall\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/>), собирает управляющий агент ESET Management. Ключи событий файервола приведены в таблице ниже.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя события.<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Адрес источника события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип адреса источника события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">число<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Порт источника события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Адрес цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип адреса цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">число<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Порт цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">protocol<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Протокол<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">account<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">process_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, связанного с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">inbound<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">логическое значение<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Показывает, является ли подключение входящим.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя обнаружения.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">число<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Количество одинаковых сообщений, созданных конечной точкой в промежутке между двумя последовательными репликациями между ESET PROTECT Server и управляющим агентом ESET Management.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Показывает, было ли обработано обнаружение.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a2_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a2_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a2_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала JSON FirewallAggregated_Event:<\/a><\/p>\n\r<div id=\"toggle0186a2\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FirewallAggregated_Event&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;w16test&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;13:10:04&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;&quot;Warning&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;Security&nbsp;vulnerability&nbsp;exploitation&nbsp;attempt&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_port&quot;:&nbsp;54568,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_port&quot;:&nbsp;80,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;protocol&quot;:&nbsp;&quot;TCP&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;account&quot;:&nbsp;&quot;NT&nbsp;AUTHORITY\\\\NETWORK&nbsp;SERVICE&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;process_name&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Apache&nbsp;Software&nbsp;Foundation\\\\apache-tomcat-9.0.41\\\\bin\\\\tomcat9.exe&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;inbound&quot;:&nbsp;true,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;threat_name&quot;:&nbsp;&quot;CVE-2017-5638.Struts2&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;aggregate_count&quot;:&nbsp;1<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"hips\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">HIPSAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">События системы Host-based Intrusion Prevention System (обнаружения <span class=\"f_UI\">системы HIPS<\/span> <img alt=\"icon_hips\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/>) фильтруются по уровню <span class=\"f_UI\">серьезности<\/span> перед отправкой далее в качестве сообщений системного журнала. В таблице ниже перечислены атрибуты HIPS.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">application<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя приложения<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">operation<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Операция<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Объект<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие, которое выполнила конечная точка.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">число<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Количество одинаковых сообщений, созданных конечной точкой в промежутке между двумя последовательными репликациями между ESET PROTECT Server и управляющим агентом ESET Management.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Показывает, было ли обработано обнаружение.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a3_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a3_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a3_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала JSON HipsAggregated_Event:<\/a><\/p>\n\r<div id=\"toggle0186a3\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;13:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;HipsAggregated_Event&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.181&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;test-w10-uefi&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;5dbe31ae-4ca7-4e8c-972f-15c197d12474&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;11:53:21&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Critical&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;application&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\java.exe&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;operation&quot;:&nbsp;&quot;Attempt&nbsp;to&nbsp;run&nbsp;a&nbsp;suspicious&nbsp;object&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\trojan.exe&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;blocked&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;handled&quot;:&nbsp;true,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;rule_id&quot;:&nbsp;&quot;Suspicious&nbsp;attempt&nbsp;to&nbsp;launch&nbsp;an&nbsp;application&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;aggregate_count&quot;:&nbsp;2<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"audit\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Audit_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem перенаправляет внутренние сообщения <a href=\"audit_log.html\" class=\"topiclink\">журнала аудита<\/a> в системный журнал. В таблице ниже перечислены атрибуты.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">domain<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Домен журнала аудита<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Выполняемое действие<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Объект целевого действия<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">detail<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Подробное описание действия<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">user<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Пользователь программы для обеспечения безопасности<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">result<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Результат действия<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a4_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a4_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a4_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала Audit_Event:<\/a><\/p>\n\r<div id=\"toggle0186a4\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;42:&nbsp;00&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Audit_Event&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-MG&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;72cdf05f-f9c8-49cc-863d-c6b3059a9e8e&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:42:00&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Information&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;domain&quot;:&nbsp;&quot;Native&nbsp;user&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;Login&nbsp;attempt&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;Administrator&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;detail&quot;:&nbsp;&quot;Authenticating&nbsp;native&nbsp;user&nbsp;\'Administrator\'.&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;user&quot;:&nbsp;&quot;&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;result&quot;:&nbsp;&quot;Success&quot;<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"websites\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FilteredWebsites_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem перенаправляет отфильтрованные веб-сайты (обнаружения средством <img alt=\"icon_web_protection\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/><span class=\"f_UI\">Защита доступа в Интернет<\/span>) в системный журнал. В таблице ниже перечислены атрибуты.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, связанного с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Хеш SHA1 отфильтрованного объекта<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип события<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор модуля сканирования.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI объекта<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Адрес цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип адреса цели события (25769803777 = IPv4; 25769803778 = IPv6)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Показывает, было ли обработано обнаружение.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a5_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a5_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a5_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала JSON FilteredWebsites_Event:<\/a><\/p>\n\r<div id=\"toggle0186a5\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;56:&nbsp;03&nbsp;020—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FilteredWebsites_Event&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;win-test&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;03:56:20&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;An&nbsp;attempt&nbsp;to&nbsp;connect&nbsp;to&nbsp;URL&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;192.255.255.255&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;scanner_id&quot;:&nbsp;&quot;HTTP&nbsp;filter&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;action_taken&quot;:&nbsp;&quot;blocked&quot;, &nbsp; &nbsp; &nbsp; &nbsp;&quot;object_uri&quot;:&nbsp;&quot;https:\/\/test.com&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hash&quot;:&nbsp;&quot;ABCDAA625E6961037B8904E113FD0C232A7D0EDC&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;WIN-TEST\\\\Administrator&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Web&nbsp;browser\\\\brwser.exe&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rule_id&quot;:&nbsp;&quot;Blocked&nbsp;by&nbsp;PUA&nbsp;blacklist&quot;<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"eei\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">EnterpriseInspectorAlert_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem перенаправляет <a href=\"eset_inspect.html\" class=\"topiclink\">предупреждения ESET Inspect<\/a> в системный журнал. В таблице ниже перечислены атрибуты.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, инициировавшего это предупреждение<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Владелец процесса<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rulename<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя правила, инициировавшего это предупреждение<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">число<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Число уведомлений этого типа, созданных с момента последнего предупреждения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Хеш SHA1 предупреждения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eiconsolelink<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ссылка на предупреждение в консоли ESET Inspect On-Prem<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eialarmid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Подчасть идентификатора ссылки на предупреждение (\$1 в ^http.*\/alarm\/([0-9]+)\$)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">computer_severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">число<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Оценка серьезности угроз на компьютере<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">число<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Оценка серьезности правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a6_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a6_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a6_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала JSON EnterpriseInspectorAlert_Event:<\/a><\/p>\n\r<div id=\"toggle0186a6\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;16&nbsp;16:19:00&nbsp;Win2016Std&nbsp;ERAServer[2772]:&nbsp;{<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;EnterpriseInspectorAlert_Event&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;shdsolec.vddjc&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;csd77ad2-2453-42f4-80a4-d86dfa9d0543&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;13-Jun-2021&nbsp;07:45:00&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;ProcessName&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;UserName&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rulename&quot;:&nbsp;&quot;RuleName2&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;count&quot;:&nbsp;158,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;eiconsolelink&quot;:&nbsp;&quot;http:\/\/eiserver.tmp\/linkToConsole&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;computer_severity_score&quot;:&nbsp;&quot;1&quot;,<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity_score&quot;:&nbsp;&quot;1&quot;<\/span><\/p>\n\r<p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"files\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">BlockedFiles_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem перенаправляет <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">заблокированные файлы<\/a> ESET Inspect On-Prem<img alt=\"icon_blocked\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/> в системный журнал. В таблице ниже перечислены атрибуты.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, связанного с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Хеш SHA1 заблокированного файла<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI объекта<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Время и дата, когда обнаружение было впервые выявлено на этом компьютере (<a href=\"events-exported-to-json-format.html#firstseen\" class=\"topiclink\">формат даты и времени<\/a>).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cause<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Описание заблокированного файла<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">строка<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">необязательно<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Показывает, было ли обработано обнаружение.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
