hmLoadTopic({
hmKeywords:"JSON-Ereignis",
hmTitle:"Export von Ereignissen im JSON-Format",
hmDescription:"Definieren Sie einen Filter in einer Kategorie für Benachrichtigungs-Logs, um die an Syslog gesendeten Ereignis-Logs zu filtern.",
hmPrevLink:"admin_server_settings_export_to_syslog.html",
hmNextLink:"events_exported_to_cef_format.html",
hmParentLink:"admin_server_settings.html",
hmBreadCrumbs:"<a href=\"using.html\">Verwendung von ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Hauptmenü<\/a> &gt; Mehr &gt; <a href=\"admin_server_settings.html\">Einstellungen<\/a>",
hmTitlePath:"Verwendung von ESET PROTECT On-Prem > ESET PROTECT On-Prem Hauptmenü > Mehr > Einstellungen > Export von Ereignissen im JSON-Format",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Export von Ereignissen im JSON-Format<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">Definieren Sie einen Filter in einer <a href=\"admin_notif_events_on.html\" class=\"topiclink\">Kategorie für Benachrichtigungs-Logs<\/a>, um die an Syslog gesendeten Ereignis-Logs zu filtern.<\/p>\n\r<p class=\"p_Normal\">JSON ist ein schlankes Format für den Austausch von Daten. Dieses Format verwendet eine Sammlung von Name-Wert-Paaren und eine geordnete Liste von Werten.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Exportierte Ereignisse<\/span><\/h2>\n\r<p class=\"p_Normal\">Dieser Abschnitt enthält Details zu Format und Bedeutung der Attribute aller exportierten Ereignisse. Die Ereignisnachricht ist ein JSON-Objekt mit obligatorischen und optionalen Schlüsseln. Jedes exportierte Ereignis enthält den folgenden Schlüssel:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:101px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:700px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Typ der exportierten Ereignisse:<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#threat\" class=\"topiclink\">Threat_Event<\/a> (<img alt=\"Virenschutz-Ereignisse\" title=\"Virenschutz-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><\/span><span class=\"f_NormalTableUI\">Virenschutz<\/span><span class=\"f_NormalTable\">-Ereignisse)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#firewall\" class=\"topiclink\">FirewallAggregated_Event<\/a> (<img alt=\"Firewall-Ereignisse\" title=\"Firewall-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/> <\/span><span class=\"f_NormalTableUI\">Firewall<\/span><span class=\"f_NormalTable\">-Ereignisse)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#hips\" class=\"topiclink\">HipsAggregated_Event<\/a> (<img alt=\"HIPS-Ereignisse\" title=\"HIPS-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/> <\/span><span class=\"f_NormalTableUI\">HIPS<\/span><span class=\"f_NormalTable\">-Ereignisse)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#audit\" class=\"topiclink\">Audit_Event<\/a> (<a href=\"audit_log.html\" class=\"topiclink\">Audit-Log<\/a>)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#websites\" class=\"topiclink\">FilteredWebsites_Event<\/a> (Gefilterte Websites –<img alt=\"Web-Schutz-Ereignisse\" title=\"Web-Schutz-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/> <\/span><span class=\"f_NormalTableUI\">Web-Schutz<\/span><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#eei\" class=\"topiclink\">EnterpriseInspectorAlert_Event<\/a> (<img alt=\"ESET Inspect warnungen\" title=\"ESET Inspect warnungen\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/> <a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspect-Warnungen<\/a>)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#files\" class=\"topiclink\">BlockedFiles_Event<\/a> (<img alt=\"Gesperrte Dateien\" title=\"Gesperrte Dateien\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/> <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">Blockierte Dateien<\/a>)<\/span><\/p><\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv4<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv4-Adresse des Computers, der das Ereignis generiert hat.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv6<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv6-Adresse des Computers, der das Ereignis generiert hat.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hostname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hostname des Computers, der das Ereignis generiert hat.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_uuid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">UUID des Computers, der das Ereignis generiert hat.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">occurred<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">UTC-Zeitpunkt, zu dem das Ereignis aufgetreten ist. Format: %d-%b-%Y %H:%M:%S<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Schweregrad des Ereignisses. Mögliche Werte (vom niedrigsten zum höchsten Schweregrad): <\/span><span class=\"f_NormalTableCode\">Information<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Hinweis<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Warnung<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Error<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Kritisch<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Schwerwiegend<\/span><span class=\"f_NormalTable\">.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Der vollständige Pfad zur statischen Gruppe des Computers, der das Ereignis generiert hat. Wenn der Pfad länger als 255 Zeichen ist, enthält group_name nur den Namen der statischen Gruppe.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Beschreibung der statischen Gruppe.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">os_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Informationen zum Betriebssystem des Computers.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Hinweis\" title=\"Hinweis\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">Alle unten aufgelisteten Ereignistypen mit allen Schweregraden werden an den Syslog-Server gemeldet. Definieren Sie einen Filter in einer <a href=\"admin_notif_events_on.html\" class=\"topiclink\">Kategorie für Benachrichtigungs-Logs<\/a>, um die an Syslog gesendeten Ereignis-Logs zu filtern.<\/p>\n\r<p class=\"p_Normal\">Die gemeldeten Werte hängen davon ab, welche ESET Sicherheitsanwendung (und welche Version) auf dem verwalteten Computer installiert ist. ESET PROTECT On-Prem meldet nur die empfangenen Daten. Daher kann ESET keine vollständige Liste der Werte zur Verfügung stellen. Wir empfehlen, ihr Netzwerk im Blick zu behalten und die Logs anhand der erhaltenen Werte zu filtern.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"custom_keys\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Benutzerdefinierte Schlüssel gemäß event_type:<\/span><\/h2>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"threat\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Threat_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Alle von verwalteten Endpoints generierten <img alt=\"Virenschutz-Ereignisse\" title=\"Virenschutz-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><span class=\"f_UI\">Virenschutz<\/span>-Ereignisse werden an Syslog weitergeleitet. Spezifische Schlüssel für Ereignisse:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ereignisart<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ereignisname<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_flags<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ereignisbezogene Flags<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Scanner-ID<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scan_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Scan-ID<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">engine_version<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Version des Prüfmoduls<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Art des Objekts, auf sich das Ereignis bezieht<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Objekt-URI<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Auf dem Endpunkt ausgeführte Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_error<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Fehlermeldung, wenn die Aktion nicht erfolgreich war<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gibt an, ob das Ereignis verarbeitet wurde<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">need_restart<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gibt an, ob ein Neustart erforderlich ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Benutzerkontos, das mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Prozesses, der mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">circumstances<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Kurze Beschreibung der Ursache des Ereignisses<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">SHA1-Hash des Datenstroms (Ereignis).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><a id=\"firstseen\" class=\"hmanchor\"><\/a><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Zeitpunkt der ersten Erkennung des Ereignisses auf diesem Computer. Das von ESET PROTECT On-Prem verwendete Datums- und Zeitformat für das firstseen-Attribut (und andere Datums- und Uhrzeitattribute) hängt vom Log-Ausgabeformat ab (JSON oder LEEF):<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">JSON formatieren&quot;%d-%b-%Y %H:%M:%S&quot;<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">LEEF formatieren&quot;%b %d %Y %H:%M:%S&quot;<\/span><\/p><\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a1_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a1_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a1_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">„Threat_Event“-JSON-Log-Beispiel:<\/a><\/p>\n\r<div id=\"toggle0186a1\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;46:&nbsp;40&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Threat_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-mg&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;1361a9f6-1d45-4561-b33a-b5d6c62c71e0&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:15&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_type&quot;:&nbsp;&quot;Virus&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_name&quot;:&nbsp;&quot;XF\/Gydhex.A&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scanner_id&quot;:&nbsp;&quot;Real-time&nbsp;file&nbsp;system&nbsp;protection&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scan_id&quot;:&nbsp;&quot;virlog.dat&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;engine_version&quot;:&nbsp;&quot;23497&nbsp;(20210621)&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_type&quot;:&nbsp;&quot;file&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_uri&quot;:&nbsp;&quot;file:\/\/\/C:\/Users\/Administrator\/Downloads\/xls\/YICT080714.xls&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action_taken&quot;:&nbsp;&quot;Deleted&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_handled&quot;:&nbsp;true,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;need_restart&quot;:&nbsp;false,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;username&quot;:&nbsp;&quot;030-MG\\\\Administrator&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\WinRAR\\\\WinRAR.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;circumstances&quot;:&nbsp;&quot;Event&nbsp;occurred&nbsp;on&nbsp;a&nbsp;newly&nbsp;created&nbsp;file.&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;firstseen&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:14&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hash&quot;:&nbsp;&quot;5B97884A45C6C05F93B22C4059F3D9189E88E8B7&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"firewall\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FirewallAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Die von ESET Firewall generierten Ereignis-Logs (<img alt=\"Firewall-Ereignisse\" title=\"Firewall-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/> <span class=\"f_UI\">Firewall<\/span>-Ereignisse) werden von dem verwaltenden ESET Management Agent aggregiert, um die benötigte Bandbreite für die Replikation zwischen ESET Management Agent und ESET PROTECT Server zu reduzieren. Spezifische Schlüssel für Firewall-Ereignisse:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ereignisname<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse der Ereignisquelle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Art der Adresse der Ereignisquelle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nummer<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Port der Ereignisquelle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse des Ereignisziels<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Art der Adresse des Ereignisziels<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nummer<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Port des Ereignisziels<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">protocol<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Protokoll<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">account<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Benutzerkontos, das mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">process_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Prozesses, der mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Regelname<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Regel-ID<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">inbound<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gibt an, ob die Verbindung eingehend war<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ereignisname<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nummer<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Anzahl der duplizierten Nachrichten, die vom Endpoint zwischen zwei aufeinander folgenden Replikationen zwischen ESET PROTECT Server und verwaltendem ESET Management Agent generiert wurden<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ausgeführte Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gibt an, ob das Ereignis verarbeitet wurde<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a2_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a2_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a2_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">„FirewallAggregated_Event“-JSON-Log-Beispiel:<\/a><\/p>\n\r<div id=\"toggle0186a2\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FirewallAggregated_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;w16test&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;13:10:04&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;Security&nbsp;vulnerability&nbsp;exploitation&nbsp;attempt&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_port&quot;:&nbsp;54568,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_port&quot;:&nbsp;80,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;protocol&quot;:&nbsp;&quot;TCP&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;account&quot;:&nbsp;&quot;NT&nbsp;AUTHORITY\\\\NETWORK&nbsp;SERVICE&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;process_name&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Apache&nbsp;Software&nbsp;Foundation\\\\apache-tomcat-9.0.41\\\\bin\\\\tomcat9.exe&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;inbound&quot;:&nbsp;true,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;threat_name&quot;:&nbsp;&quot;CVE-2017-5638.Struts2&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;aggregate_count&quot;:&nbsp;1<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"hips\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">HIPSAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Ereignisse aus dem HIPS (Host-based Intrusion Prevention System) (<img alt=\"HIPS-Ereignisse\" title=\"HIPS-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/> <span class=\"f_UI\">HIPS<\/span>-Ereignisse) werden zunächst nach <span class=\"f_UI\">Schweregrad<\/span> gefiltert und anschließend als Syslog-Nachrichten weitergeleitet. HIPS-spezifische Attribute:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">application<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Anwendungsname<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">operation<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Vorgang<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ziel<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ausgeführte Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Auf dem Endpunkt ausgeführte Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Regelname<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Regel-ID<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nummer<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Anzahl der duplizierten Nachrichten, die vom Endpoint zwischen zwei aufeinander folgenden Replikationen zwischen ESET PROTECT Server und verwaltendem ESET Management Agent generiert wurden<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gibt an, ob das Ereignis verarbeitet wurde<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a3_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a3_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a3_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">„HipsAggregated_Event“-JSON-Log-Beispiel:<\/a><\/p>\n\r<div id=\"toggle0186a3\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;13:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;HipsAggregated_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.181&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;test-w10-uefi&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;5dbe31ae-4ca7-4e8c-972f-15c197d12474&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;11:53:21&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Critical&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;application&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\java.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;operation&quot;:&nbsp;&quot;Attempt&nbsp;to&nbsp;run&nbsp;a&nbsp;suspicious&nbsp;object&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\trojan.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;blocked&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;handled&quot;:&nbsp;true,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;rule_id&quot;:&nbsp;&quot;Suspicious&nbsp;attempt&nbsp;to&nbsp;launch&nbsp;an&nbsp;application&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;aggregate_count&quot;:&nbsp;2<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"audit\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Audit_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem leitet die internen <a href=\"audit_log.html\" class=\"topiclink\">Audit-Log<\/a>-Nachrichten an Syslog weiter. Spezifische Attribute:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">domain<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Audit-Log-Domäne<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ausgeführte Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ziel der Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">detail<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ausführliche Beschreibung der Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">user<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Beteiligter Sicherheitsbenutzer<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">result<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Resultat der Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a4_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a4_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a4_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">„Audit_Event“-Log-Beispiel:<\/a><\/p>\n\r<div id=\"toggle0186a4\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;42:&nbsp;00&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Audit_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-MG&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;72cdf05f-f9c8-49cc-863d-c6b3059a9e8e&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:42:00&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Information&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;domain&quot;:&nbsp;&quot;Native&nbsp;user&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;Login&nbsp;attempt&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;Administrator&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;detail&quot;:&nbsp;&quot;Authenticating&nbsp;native&nbsp;user&nbsp;\'Administrator\'.&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;user&quot;:&nbsp;&quot;&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;result&quot;:&nbsp;&quot;Success&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"websites\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FilteredWebsites_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem leitet die gefilterten Websites (<img alt=\"Web-Schutz-Ereignisse\" title=\"Web-Schutz-Ereignisse\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/><span class=\"f_UI\">Web-Schutz<\/span>-Ereignisse) an Syslog weiter. Spezifische Attribute:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Prozesses, der mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Benutzerkontos, das mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">SHA1-Hash des gefilterten Objekts<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ereignistyp<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Regel-ID<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ausgeführte Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Scanner-ID<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Objekt-URI<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse des Ereignisziels<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Art der Adresse des Ereignisziels (25769803777 = IPv4; 25769803778 = IPv6)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gibt an, ob das Ereignis verarbeitet wurde<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a5_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a5_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a5_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">„FilteredWebsites_Event“-JSON-Log-Beispiel:<\/a><\/p>\n\r<div id=\"toggle0186a5\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;56:&nbsp;03&nbsp;020—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FilteredWebsites_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;win-test&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;03:56:20&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;An&nbsp;attempt&nbsp;to&nbsp;connect&nbsp;to&nbsp;URL&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;192.255.255.255&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;scanner_id&quot;:&nbsp;&quot;HTTP&nbsp;filter&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;action_taken&quot;:&nbsp;&quot;blocked&quot;, &nbsp; &nbsp; &nbsp; &nbsp;&quot;object_uri&quot;:&nbsp;&quot;https:\/\/test.com&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hash&quot;:&nbsp;&quot;ABCDAA625E6961037B8904E113FD0C232A7D0EDC&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;WIN-TEST\\\\Administrator&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Web&nbsp;browser\\\\brwser.exe&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rule_id&quot;:&nbsp;&quot;Blocked&nbsp;by&nbsp;PUA&nbsp;blacklist&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"eei\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">EnterpriseInspectorAlert_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem leitet <img alt=\"ESET Inspect warnungen\" title=\"ESET Inspect warnungen\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/><a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspect-Alarmmeldungen<\/a> an Syslog weiter. Spezifische Attribute:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Prozesses, der den Alarm ausgelöst hat<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Eigentümer des Prozesses<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rulename<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name der Regel, die den Alarm ausgelöst hat<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nummer<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Anzahl der Alarmmeldungen von diesem Typ seit dem letzten Alarm<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">SHA1-Hash des Alarms<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eiconsolelink<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Link zum Alarm in der ESET Inspect On-Prem-Konsole<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eialarmid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID-Komponente des Alarmlinks (\$1 in ^http.*\/alarm\/([0-9]+)\$)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">computer_severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nummer<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Computer-Schweregradsbewertung<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nummer<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Regel-Schweregradsbewertung<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a6_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a6_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a6_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">„EnterpriseInspectorAlert_Event“-JSON-Log-Beispiel:<\/a><\/p>\n\r<div id=\"toggle0186a6\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;16&nbsp;16:19:00&nbsp;Win2016Std&nbsp;ERAServer[2772]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;EnterpriseInspectorAlert_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;shdsolec.vddjc&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;csd77ad2-2453-42f4-80a4-d86dfa9d0543&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;13-Jun-2021&nbsp;07:45:00&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;ProcessName&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;UserName&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rulename&quot;:&nbsp;&quot;RuleName2&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;count&quot;:&nbsp;158,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;eiconsolelink&quot;:&nbsp;&quot;http:\/\/eiserver.tmp\/linkToConsole&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;computer_severity_score&quot;:&nbsp;&quot;1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity_score&quot;:&nbsp;&quot;1&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"files\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">BlockedFiles_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem leitet von ESET Inspect On-Prem<img alt=\"Gesperrte Dateien\" title=\"Gesperrte Dateien\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/><a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\"> blockierte Dateien<\/a> an Syslog weiter. Spezifische Attribute:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Prozesses, der mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Name des Benutzerkontos, das mit dem Ereignis verknüpft ist<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">SHA1-Hash der blockierten Datei<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Objekt-URI<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ausgeführte Aktion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Zeitpunkt der ersten Erkennung des Ereignisses auf diesem Computer (<a href=\"events-exported-to-json-format.html#firstseen\" class=\"topiclink\">Datums- und Uhrzeitformat<\/a>).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cause<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Beschreibung der blockierten Datei<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">optional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gibt an, ob das Ereignis verarbeitet wurde<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
