hmLoadTopic({
hmKeywords:"Événement JSON",
hmTitle:"Événements exportés au format JSON",
hmDescription:"Définissez un filtre dans une catégorie de journal de notification afin de filtrer les journaux d\'événements envoyés à Syslog.",
hmPrevLink:"admin_server_settings_export_to_syslog.html",
hmNextLink:"events_exported_to_cef_format.html",
hmParentLink:"admin_server_settings.html",
hmBreadCrumbs:"<a href=\"using.html\">Utilisation d\'ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Menu principal<\/a> &gt; Plus &gt; <a href=\"admin_server_settings.html\">Paramètres<\/a>",
hmTitlePath:"Utilisation d\'ESET PROTECT On-Prem > ESET PROTECT On-Prem Menu principal > Plus > Paramètres > Événements exportés au format JSON",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Événements exportés au format JSON<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">Définissez un filtre dans une <a href=\"admin_notif_events_on.html\" class=\"topiclink\">catégorie de journal de notification<\/a> afin de filtrer les journaux d\'événements envoyés à Syslog.<\/p>\n\r<p class=\"p_Normal\">JSON est un format léger pour l\'échange de données. Il repose sur un groupe de paires nom\/valeur et une liste classée de valeurs.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Evénements exportés<\/span><\/h2>\n\r<p class=\"p_Normal\">Cette section contient des détails sur le format et la signification des attributs de tous les événements exportés. Le message d\'événement est un objet JSON avec certaines clés obligatoires et facultatives. Chaque événement exporté contiendra la clé suivante :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:101px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:700px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Type d\'événements exportés :<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#threat\" class=\"topiclink\">Threat_Event<\/a> (<img alt=\"Détections de l&amp;#39;antivirus\" title=\"Détections de l&amp;#39;antivirus\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><\/span><span class=\"f_NormalTableUI\">détections de l\'antivirus<\/span><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#firewall\" class=\"topiclink\">FirewallAggregated_Event<\/a> (<img alt=\"Détections du pare-feu\" title=\"Détections du pare-feu\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/> <\/span><span class=\"f_NormalTableUI\">détections du pare-feu<\/span><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#hips\" class=\"topiclink\">HipsAggregated_Event<\/a> (<img alt=\"Détection du HIPS\" title=\"Détection du HIPS\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/> <\/span><span class=\"f_NormalTableUI\">détections HIPS<\/span><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#audit\" class=\"topiclink\">Audit_Event<\/a> (<a href=\"audit_log.html\" class=\"topiclink\">journal de vérification<\/a>)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#websites\" class=\"topiclink\">FilteredWebsites_Event<\/a> (sites Web filtrés : <img alt=\"Détections de la protection Web\" title=\"Détections de la protection Web\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/> <\/span><span class=\"f_NormalTableUI\">protection Web<\/span><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#eei\" class=\"topiclink\">EnterpriseInspectorAlert_Event<\/a> (<img alt=\"ESET Inspect alertes\" title=\"ESET Inspect alertes\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/> <a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspectalertes <\/a>)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#files\" class=\"topiclink\">BlockedFiles_Event<\/a> (<img alt=\"Fichiers bloqués\" title=\"Fichiers bloqués\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/> <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">fichiers bloqués<\/a>)<\/span><\/p><\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv4<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse IPv4 de l\'ordinateur générant l\'événement.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv6<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse IPv6 de l\'ordinateur générant l\'événement.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hostname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom d\'hôte de l\'ordinateur générant l\'événement.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_uuid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">UUID de l\'ordinateur générant l\'événement.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">occurred<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Heure UTC d\'occurrence de l\'événement. Le format est %d-%b-%Y %H:%M:%S<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Gravité de l\'événement. Les valeurs possibles (du moins grave au plus grave) sont les suivantes : <\/span><span class=\"f_NormalTableCode\">Information<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Avis<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Avertissement<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Erreur<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Critique<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Fatal<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Chemin complet vers le groupe statique de l\'ordinateur qui génère l\'événement. Si le chemin d\'accès comporte plus de 255 caractères, group_name contient uniquement le nom du groupe statique.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Description du groupe statique.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">os_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Informations sur le système d\'exploitation de l\'ordinateur.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Remarque\" title=\"Remarque\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">Tous les types d\'événements énumérés ci-dessous avec tous les niveaux de gravité sont signalés au serveur Syslog. Définissez un filtre dans une <a href=\"admin_notif_events_on.html\" class=\"topiclink\">catégorie de journal de notification<\/a> afin de filtrer les journaux d\'événements envoyés à Syslog.<\/p>\n\r<p class=\"p_Normal\">Les valeurs indiquées dépendent de l\'application de sécurité ESET (et de sa version) installée sur l\'ordinateur géré et ESET PROTECT On-Prem ne signalent que les données reçues. Par conséquent, ESET ne peut pas fournir une liste exhaustive de toutes les valeurs. Nous vous recommandons de surveiller votre réseau et de filtrer les journaux en fonction des valeurs que vous recevez.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"custom_keys\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Clés personnalisées selon event_type :<\/span><\/h2>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"threat\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Threat_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Tous les événements de <img alt=\"Détections de l&amp;#39;antivirus\" title=\"Détections de l&amp;#39;antivirus\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><span class=\"f_UI\">détection antivirus<\/span> générés par des terminaux gérés seront transférés à Syslog. Clé spécifique à un événement de détection :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Type de la détection<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom de la détection<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_flags<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indicateurs liés à des détections<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID d\'analyseur<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scan_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID d\'analyse<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">engine_version<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Version du moteur d\'analyse<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Type d\'objet lié à cet événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI de l\'objet<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action prise par le point de terminaison<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_error<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Message d\'erreur en cas d\'échec de « l\'action »<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indique si la détection a été gérée ou non<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">need_restart<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indique si un redémarrage est nécessaire ou non<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du compte utilisateur associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du processus associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">circumstances<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Brève description de la cause de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hachage SHA1 du flux de données (de détection).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><a id=\"firstseen\" class=\"hmanchor\"><\/a><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Heure et date auxquelles la détection s\'est produite pour la première fois sur cet ordinateur. ESET PROTECT On-Prem utilise différents formats date-heure pour l\'attribut firstseen (et tout autre attribut date-heure) en fonction du format de sortie du journal (JSON ou LEEF) :<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">JSON format : &quot;%d-%b-%Y %H:%M:%S&quot;<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">LEEF format : &quot;%b %d %Y %H:%M:%S&quot;<\/span><\/p><\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a1_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a1_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a1_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Exemple de journalisation de Threat_Event JSON :<\/a><\/p>\n\r<div id=\"toggle0186a1\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;46:&nbsp;40&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Threat_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-mg&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;1361a9f6-1d45-4561-b33a-b5d6c62c71e0&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:15&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_type&quot;:&nbsp;&quot;Virus&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_name&quot;:&nbsp;&quot;XF\/Gydhex.A&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scanner_id&quot;:&nbsp;&quot;Real-time&nbsp;file&nbsp;system&nbsp;protection&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scan_id&quot;:&nbsp;&quot;virlog.dat&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;engine_version&quot;:&nbsp;&quot;23497&nbsp;(20210621)&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_type&quot;:&nbsp;&quot;file&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_uri&quot;:&nbsp;&quot;file:\/\/\/C:\/Users\/Administrator\/Downloads\/xls\/YICT080714.xls&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action_taken&quot;:&nbsp;&quot;Deleted&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_handled&quot;:&nbsp;true,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;need_restart&quot;:&nbsp;false,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;username&quot;:&nbsp;&quot;030-MG\\\\Administrator&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\WinRAR\\\\WinRAR.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;circumstances&quot;:&nbsp;&quot;Event&nbsp;occurred&nbsp;on&nbsp;a&nbsp;newly&nbsp;created&nbsp;file.&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;firstseen&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:14&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hash&quot;:&nbsp;&quot;5B97884A45C6C05F93B22C4059F3D9189E88E8B7&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"firewall\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FirewallAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Les journaux d\'événements générés par le pare-feu d\'ESET (<img alt=\"Détections du pare-feu\" title=\"Détections du pare-feu\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/> <span class=\"f_UI\">détections du pare-feu<\/span>) sont agrégés par la gestion de l\'agent ESET Management pour éviter le gaspillage de bande passante pendant la réplication de l\'agent ESET Management ou du serveur ESET PROTECT. Clé spécifique à un événement de pare-feu :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom de l\'événement<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse de la source de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Type d\'adresse de la source de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">number<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Port de la source de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse de la destination de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Type d\'adresse de la destination de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">number<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Port de la destination de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">protocol<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Protocole<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">account<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du compte utilisateur associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">process_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du processus associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom de la règle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de règle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">inbound<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indique si la connexion était entrante ou non<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom de la détection<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">number<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de messages dupliqués générés par l\'endpoint entre deux réplications consécutives entre ESET PROTECT Server et ESET Management Agent de gestion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action entreprise<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indique si la détection a été gérée ou non<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a2_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a2_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a2_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Exemple de journalisation de FirewallAggregated_Event JSON :<\/a><\/p>\n\r<div id=\"toggle0186a2\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FirewallAggregated_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;w16test&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;13:10:04&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;Security&nbsp;vulnerability&nbsp;exploitation&nbsp;attempt&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_port&quot;:&nbsp;54568,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_port&quot;:&nbsp;80,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;protocol&quot;:&nbsp;&quot;TCP&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;account&quot;:&nbsp;&quot;NT&nbsp;AUTHORITY\\\\NETWORK&nbsp;SERVICE&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;process_name&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Apache&nbsp;Software&nbsp;Foundation\\\\apache-tomcat-9.0.41\\\\bin\\\\tomcat9.exe&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;inbound&quot;:&nbsp;true,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;threat_name&quot;:&nbsp;&quot;CVE-2017-5638.Struts2&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;aggregate_count&quot;:&nbsp;1<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"hips\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">HIPSAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Les événements du système HIPS (<img alt=\"Détection du HIPS\" title=\"Détection du HIPS\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/> <span class=\"f_UI\">détections HIPS<\/span>) sont filtrés selon la <span class=\"f_UI\">gravité<\/span> avant d\'être transmis plus en avant en tant que messages Syslog. Les attributs spécifiques à HIPS sont les suivants :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">application<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom de l\'application<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">operation<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Opération<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Cible<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action entreprise<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action prise par le point de terminaison<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom de la règle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de règle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">number<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de messages dupliqués générés par l\'endpoint entre deux réplications consécutives entre ESET PROTECT Server et ESET Management Agent de gestion<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indique si la détection a été gérée ou non<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a3_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a3_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a3_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Exemple de journalisation de HipsAggregated_Event JSONt :<\/a><\/p>\n\r<div id=\"toggle0186a3\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;13:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;HipsAggregated_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.181&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;test-w10-uefi&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;5dbe31ae-4ca7-4e8c-972f-15c197d12474&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;11:53:21&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Critical&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;application&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\java.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;operation&quot;:&nbsp;&quot;Attempt&nbsp;to&nbsp;run&nbsp;a&nbsp;suspicious&nbsp;object&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\trojan.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;blocked&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;handled&quot;:&nbsp;true,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;rule_id&quot;:&nbsp;&quot;Suspicious&nbsp;attempt&nbsp;to&nbsp;launch&nbsp;an&nbsp;application&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;aggregate_count&quot;:&nbsp;2<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"audit\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Audit_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem transmet les messages du <a href=\"audit_log.html\" class=\"topiclink\">journal de vérification<\/a> interne à Syslog. Les attributs spécifiques sont les suivants :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">domain<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Domaine du journal d\'audit<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action en cours<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">L\'action cible s\'effectue sur<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">detail<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Description détaillée de l\'action<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">user<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Utilisateur de sécurité impliqué<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">result<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Résultat de l\'action<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a4_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a4_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a4_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Exemple de journalisation de Audit_Event :<\/a><\/p>\n\r<div id=\"toggle0186a4\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;42:&nbsp;00&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Audit_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-MG&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;72cdf05f-f9c8-49cc-863d-c6b3059a9e8e&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:42:00&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Information&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;domain&quot;:&nbsp;&quot;Native&nbsp;user&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;Login&nbsp;attempt&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;Administrator&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;detail&quot;:&nbsp;&quot;Authenticating&nbsp;native&nbsp;user&nbsp;\'Administrator\'.&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;user&quot;:&nbsp;&quot;&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;result&quot;:&nbsp;&quot;Success&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"websites\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FilteredWebsites_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem transfère les sites Web filtrés (détections de la <img alt=\"Détections de la protection Web\" title=\"Détections de la protection Web\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/><span class=\"f_UI\">protection Web<\/span>) à Syslog. Les attributs spécifiques sont les suivants :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du processus associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du compte utilisateur associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hachage SHA1 de l\'objet filtré<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Type de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de règle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action entreprise<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID d\'analyseur<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI de l\'objet<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Adresse de la destination de l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Type d\'adresse de la destination de l\'événement (25769803777 = IPv4; 25769803778 = IPv6)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indique si la détection a été gérée ou non<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a5_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a5_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a5_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Exemple de journalisation de FilteredWebsites_Event JSON :<\/a><\/p>\n\r<div id=\"toggle0186a5\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;56:&nbsp;03&nbsp;020—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FilteredWebsites_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;win-test&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;03:56:20&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;An&nbsp;attempt&nbsp;to&nbsp;connect&nbsp;to&nbsp;URL&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;192.255.255.255&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;scanner_id&quot;:&nbsp;&quot;HTTP&nbsp;filter&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;action_taken&quot;:&nbsp;&quot;blocked&quot;, &nbsp; &nbsp; &nbsp; &nbsp;&quot;object_uri&quot;:&nbsp;&quot;https:\/\/test.com&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hash&quot;:&nbsp;&quot;ABCDAA625E6961037B8904E113FD0C232A7D0EDC&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;WIN-TEST\\\\Administrator&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Web&nbsp;browser\\\\brwser.exe&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rule_id&quot;:&nbsp;&quot;Blocked&nbsp;by&nbsp;PUA&nbsp;blacklist&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"eei\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">EnterpriseInspectorAlert_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem transfère les <img alt=\"ESET Inspect alertes\" title=\"ESET Inspect alertes\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/><a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspect alarmes <\/a> à Syslog. Les attributs spécifiques sont les suivants :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du processus à l\'origine de cette alarme<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Propriétaire du processus<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rulename<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom de la règle déclenchant cette alarme<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">number<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre d\'alertes de ce type générées depuis la dernière alarme<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hachage SHA1 de l\'alarme<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eiconsolelink<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Lien vers l\'alarme dans la console ESET Inspect On-Prem<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eialarmid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Sous-partie ID du lien d\'alarme (\$1 dans ^http.*\/alarm\/([0-9]+)\$)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">computer_severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">number<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Score de gravité pour l\'ordinateur<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">number<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Score de sévérité de la règle<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a6_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a6_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a6_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Exemple de journalisation de EnterpriseInspectorAlert_Event JSON :<\/a><\/p>\n\r<div id=\"toggle0186a6\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;16&nbsp;16:19:00&nbsp;Win2016Std&nbsp;ERAServer[2772]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;EnterpriseInspectorAlert_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;shdsolec.vddjc&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;csd77ad2-2453-42f4-80a4-d86dfa9d0543&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;13-Jun-2021&nbsp;07:45:00&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;ProcessName&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;UserName&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rulename&quot;:&nbsp;&quot;RuleName2&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;count&quot;:&nbsp;158,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;eiconsolelink&quot;:&nbsp;&quot;http:\/\/eiserver.tmp\/linkToConsole&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;computer_severity_score&quot;:&nbsp;&quot;1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity_score&quot;:&nbsp;&quot;1&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"files\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">BlockedFiles_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem transfère les <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">fichiers bloqués<\/a> ESET Inspect On-Prem <img alt=\"Fichiers bloqués\" title=\"Fichiers bloqués\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/> à Syslog. Les attributs spécifiques sont les suivants :<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du processus associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nom du compte utilisateur associé à l\'événement<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hachage SHA1 du fichier bloqué<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI de l\'objet<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action entreprise<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Heure et date auxquelles la détection s\'est produite pour la première fois sur cet ordinateur <a href=\"events-exported-to-json-format.html#firstseen\" class=\"topiclink\">format de la date et de l\'heure<\/a>.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cause<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Description du fichier bloqué<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">chaine<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">facultatif<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indique si la détection a été gérée ou non<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
