hmLoadTopic({
hmKeywords:"",
hmTitle:"События, экспортируемые в формат CEF",
hmDescription:"Настройте фильтр в категории журнала уведомлений для фильтрации журналов событий, отправляемых в системный журнал.",
hmPrevLink:"events-exported-to-json-format.html",
hmNextLink:"events-exported-to-leef-format.html",
hmParentLink:"admin_server_settings.html",
hmBreadCrumbs:"<a href=\"using.html\">Использование ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Главное меню<\/a> &gt; Дополнительно &gt; <a href=\"admin_server_settings.html\">Параметры<\/a>",
hmTitlePath:"Использование ESET PROTECT On-Prem > ESET PROTECT On-Prem Главное меню > Дополнительно > Параметры > События, экспортируемые в формат CEF",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">События, экспортируемые в формат CEF<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">Настройте фильтр в <a href=\"admin_notif_events_on.html\" class=\"topiclink\">категории журнала уведомлений<\/a> для фильтрации журналов событий, отправляемых в системный журнал.<\/p>\n\r<p class=\"p_Normal\">CEF — это текстовый формат журнала, разработанный компанией ArcSight. Формат CEF включает в себя заголовок CEF и расширение CEF. Расширение содержит список пар ключ—значение.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Заголовок CEF<\/span><\/h2>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Заголовкa<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Device Vendor<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ESET<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Device Product<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Protect<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Device Version<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">10.0.5.1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">версия ESET PROTECT On-Prem<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Device Event Class ID (Signature ID):<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">109<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Уникальный идентификатор категории события на устройстве:<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">100–199: событие об угрозе<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">200–299: событие файервола<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">300–399 HIPS событие<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">400–499 событие аудита<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">500–599 ESET Inspect событие<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">600–699: событие блокировки файлов<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">700–799: событие фильтрации веб-сайтов<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 21px; margin-left: 0;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>800–899: событие инцидента<\/p><\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Event Name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Detected port scanning attack<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Краткое описание происшедшего в рамках события<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Severity<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">5<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Серьезность<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">2 – Информация<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">3 – Уведомление<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">5 – Предупреждение<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">7 – Ошибка<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">8 – Критические ошибки<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 21px; margin-left: 0;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>10 – Неустранимая ошибка<\/p><\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Расширения CEF, общие для всех категорий<\/span><\/h2>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cat<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ESET Threat Event<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Категория события:<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">ESET Threat Event<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">ESET Firewall Event<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">ESET HIPS Event<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">ESET RA Audit Event<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">ESET Inspect Event<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">ESET Blocked File Event<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 21px; margin-left: 0;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>ESET Filtered Website Event<\/p><\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">dvc<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">10.0.12.59<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv4-адрес компьютера, создавшего событие.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">2001:0db8:85a3:0000:0000:8a2e:0370:7334<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv6-адрес компьютера, создавшего событие.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Device IPv6 Address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">dvchost<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">COMPUTER02<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя хоста компьютера с событием<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceExternalId<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">39e0feee-45e2-476a-b17f-169b592c3645<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">идентификатор UUID компьютера, создавшего событие.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rt<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Jun 04 2017 14:10:0<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Время события в формате UTC. Формат: %b %d %Y %H:%M:%S<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ESETProtectDeviceGroupName<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">All\/Lost &amp; found<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Полный путь к статической группе компьютера, создавшего событие. Если длина пути превышает 255 символов, ESETProtectDeviceGroupName содержит только имя статической группы.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ESETProtectDeviceOsName<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Microsoft Windows 11 Pro<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Информация об операционной системе компьютера.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ESETProtectDeviceGroupDescription<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Lost &amp; found static group<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Описание статической группы.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Расширения CEF по категории событий<\/span><\/h2>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">События об угрозе<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">W97M\/Kojer.A<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя найденной угрозы<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Threat Name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">25898 (20220909)<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Версия модуля обнаружения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Engine Version<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Virus<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип обнаружения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Threat Type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs4<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Real-time<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">file system protection<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор модуля сканирования.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs4Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Scanner ID<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs5<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">virlog.dat<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор сканирования.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs5Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Scan ID<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs6<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Failed to remove file<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Сообщение об ошибке, если «действие» не было успешным.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs6Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Action Error<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs7<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Event occurred on a newly created file<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Краткое описание причины события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs7Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Circumstances<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs8<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">0000000000000000000000000000000000000000<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">SHA1-хеш потока данных (обнаружения).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs8Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">act<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Cleaned by deleting file<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено конечной точкой.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">filePath<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">file:\/\/\/C:\/Users\/Administrator\/Downloads\/doc\/000001_5dc5c46b.DOC<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Объект URI<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">fileType<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">File<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип объекта, связанный с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Обнаружение обработано (1) или не обработано (0).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">0<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Перезапуск требуется (1) или не требуется (0).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Restart Needed<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">suser<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">172-MG\\\\Administrator<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">sprod<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">C:\\\\7-Zip\\\\7z.exe<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса источника события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceCustomDate1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Jun 04 2019 14:10:00<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceCustomDate1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">FirstSeen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Время и дата, когда обнаружение было впервые выявлено на компьютере. Формат: %b %d %Y %H:%M:%S<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a1_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a1_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a1_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала CEF для события об угрозе:<\/a><\/p>\n\r<div id=\"toggle0186a1\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table class=\"TableBasic\"  role=\"presentation\">\n\r<tr class=\"TableBasic\">\n\r<td class=\"TableBasic\"><p class=\"p_Normal\">CEF:O|ESET|Protect|10.0.0.0|183|File scanner cleaned a virus|5|deviceExternalId=e9d26759-fd21-47f1-9751-d2e7194c41a8 ESETProtectDeviceGroupName=All\/Lost &amp; found ESETProtectDeviceOsName=Microsoft Windows 11 Pro ESETProtectDeviceGroupDescription=Lost &amp; found static group cat=ESET Threat Event rt=Jun 04 2017 14:10:00 cs1=W97M\/Kojer.A cs1Label=Threat Name cs2=25898 (20220909) cs2Label=Engine Version cs3=Virus cs3Label=Threat Type cs4=Real-time file system protection cs4Label=Scanner ID cs5=virlog.dat cs5Label=Scan ID act=Cleaned by deleting fileType=File filePath=file:\/\/\/C:\/Users\/Administrator\/Downloads\/doc\/000001_5dc5c46b.DOC cn1=1 cn1Label=Handled suser=172-MG\\\\Administrator sprod=C:\\\\7-Zip\\\\7z.exe cs7=Event occurred on a newly created file. cs7Label=Circumstances eviceCustomDate1=Jun 04 2019 14:10:00 deviceCustomDate1Label=FirstSeen cs8=0000000000000000000000000000000000000000 cs8Label=Hash<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">События файервола<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">msg<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">TCP Port Scanning attack<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">src<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">127.0.0.1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv4-адрес источника события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">2001:0db8:85a3:0000:0000:8a2e:0370:7334<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv6-адрес источника события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Source IPv6 Address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">spt<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">36324<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Порт источника события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">dst<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">127.0.0.2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv4-адрес цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">2001:0db8:85a3:0000:0000:8a2e:0370:7335<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv6-адрес цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a3Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Destination IPv6 Address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">dpt<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">24<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Порт цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">proto<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">http<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Протокол<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">act<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Blocked<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Обнаружение обработано (1) или не обработано (0).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">suser<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">172-MG\\\\Administrator<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceProcessName<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">someApp.exe<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, связанного с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceDirection<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Соединение было входящим (0) или исходящим (1).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cnt<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Количество одинаковых сообщений, созданных конечной точкой в промежутке между двумя последовательными репликациями между решением ESET PROTECT On-Prem и агентом ESET Management.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Rule ID<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">custom_rule_12<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Rule Name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Win32\/Botnet.generic<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя угрозы<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Threat Name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a2_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a2_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a2_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала CEF для события файервола<\/a><\/p>\n\r<div id=\"toggle0186a2\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table class=\"TableBasic\"  role=\"presentation\">\n\r<tr class=\"TableBasic\">\n\r<td class=\"TableBasic\"><p class=\"p_Normal\">CEF:O|ESET|Protect|10.0.0.0|109|Detected port scanning attack|5|deviceExternalId=39e0feee-45e2-476a-b07f-169b592c3645 ESETProtectDeviceGroupName=All\/Lost &amp; found ESETProtectDeviceOsName=Microsoft Windows 11 Pro ESETProtectDeviceGroupDescription=Lost &amp; found static group cat=ESET Firewall Event rt=Jun 04 2017 14:10:00 msg=TCP Port Scanning attack src=127.0.0.1 spt=36324 dpt=21 dst=127.0.0.2 proto=http act=Blocked cnt=1 cn1=1 cn1Label=Handled suser=myAccount deviceProcessName=someApp.exe cs2=rule_118882389 cs2Label=Rule Name deviceDirection=0 cs3=Win32\/Botnet.generic cs3Label=Threat Name<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">HIPS события<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Suspicious attempt to launch an application<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Rule ID<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">custom_rule_12<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Rule Name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">C:\\\\someapp.exe<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя приложения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Application<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs4<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Attempt to run a suspicious object<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Операция<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs4Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Operation<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs5<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">C:\\\\somevirus.exe<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Объект<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs5Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">act<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Blocked<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">custom_rule_12<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Обнаружение обработано (1) или не обработано (0).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cnt<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Количество одинаковых сообщений, созданных конечной точкой в промежутке между двумя последовательными репликациями между решением ESET PROTECT On-Prem и агентом ESET Management.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a3_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a3_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a3_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала CEF для события системы HIPS<\/a><\/p>\n\r<div id=\"toggle0186a3\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table class=\"TableBasic\"  role=\"presentation\">\n\r<tr class=\"TableBasic\">\n\r<td class=\"TableBasic\"><p class=\"p_Normal\">CEF:O|ESET|Protect|10.0.0.0|303|Attempt to run a suspicious object Blocked|5|dvchost=test_bcmcjkbpgp deviceExternalId=82e114a8-9070-4868-8ee2-1e87b7b85ee3 ESETProtectDeviceGroupName=All\/Lost &amp; found ESETProtectDeviceOsName=Microsoft Windows 11 Pro ESETProtectDeviceGroupDescription=Lost &amp; found static group cat=ESET HIPS Event rt=Jun 04 2019 14:10:00 cs3=C:\\\\someapp.exe cs3Label=Application cs4=Attempt to run a suspicious object cs4Label=Operation cs5=C:\\\\somevirus.exe cs5Label=Target act=Blocked cn1=1 cn1Label=Handled cs1=Suspicious attempt to launch an application cs1Label=Rule ID cnt=1<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">События аудита<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">act<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Login attempt<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Выполняемое действие<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">suser<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Administrator<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Пользователь программы для обеспечения безопасности<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">duser<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Administrator<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Целевой пользователь системы безопасности (например, при попытках авторизации)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">msg<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Authenticating native user \'Administrator\'<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Подробное описание действия<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Native user<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Домен журнала аудита<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Audit Domain<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Success<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Результат действия<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Result<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a4_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a4_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a4_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала CEF для события аудита:<\/a><\/p>\n\r<div id=\"toggle0186a4\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table class=\"TableBasic\"  role=\"presentation\">\n\r<tr class=\"TableBasic\">\n\r<td class=\"TableBasic\"><p class=\"p_Normal\">CEF:O|ESET|Protect|10.0.0.0|449|Native user login|2|dvc=10.15.172.133 dvchost=BRNH00006D deviceExternalId=db4a82c0-e1c6-49be-8bac-a436136ed1f4 cat=ESET RA Audit Event rt=Sep 21 2022 13:10:23 cs1=Native user cs1Label=Audit Domain act=Login attempt duser=Administrator msg=Authenticating native user \'Administrator\'. cs2=Success cs2Label=Result<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">ESET Inspect события<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceProcessName<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">c:\\\\imagepath_bin.exe<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, инициировавшего это предупреждение<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">suser<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">HP\\\\home<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Владелец процесса<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">custom_rule_12<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя правила, инициировавшего это предупреждение<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Rule Name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">78C136C80FF3F46C2C98F5C6B3B5BB581F8903A9<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Хэш SHA1 предупреждения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs4<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">https:\/\/inspect.eset.com:443\/console\/alarm\/126<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Ссылка на предупреждение в веб-консоли ESET Inspect On-Prem<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs4Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">EI Console Link<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs5<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">126<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Подчасть идентификатора ссылки на предупреждение (\$1 в ^http.*\/alarm\/([0-9]+)\$)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs5Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">EI Alarm ID<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">275<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Оценка серьезности угроз на компьютере<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ComputerSeverityScore<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">60<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Оценка серьезности правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">SeverityScore<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cnt<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Количество предупреждений одного типа, созданных с момента последнего предупреждения<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a5_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a5_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a5_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала CEF для события ESET Inspect:<\/a><\/p>\n\r<div id=\"toggle0186a5\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table class=\"TableBasic\"  role=\"presentation\">\n\r<tr class=\"TableBasic\">\n\r<td class=\"TableBasic\"><p class=\"p_Normal\">CEF:O|ESET|Protect|10.0.0.0|500|ESET Inspect Alert|5|dvchost=test_lrghlbjyoa deviceExternalId=432a30af-6ac7-4b61-ae5c-5141bfc5d878 ESETProtectDeviceGroupName=All\/Lost &amp; found ESETProtectDeviceOsName=Microsoft Windows 11 Pro ESETProtectDeviceGroupDescription=Lost &amp; found static group cat=ESET Inspect Alert rt=Sep 21 2022 07:31:55 deviceProcessName=c:\\\\mother_process_info_imagepath_dir\\\\mother_process_info_imagepath_bin.exe suser=HP\\\\home cs2=9_1_0addd4e8baf8e87d4bc4ed77fadc cs2Label=Rule Name cs3=78C136C80FF3F46C2C98F5C6B3B5BB581F8903A9 cs3Label=Hash cs4=https:\/\/dev-inspect.eset.com:443\/console\/alarm\/126 cs4Label=EI Console Link cs5=126 cs5Label=EI Alarm ID cn1=275 cn1Label=ComputerSeverityScore cn2=60 cn2Label=SeverityScore<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">События блокировки файлов<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">act<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Execution blocked<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Обнаружение обработано (1) или не обработано (0).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">suser<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">HP\\\\home<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceProcessName<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">C:\\\\Windows\\\\explorer.exe<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, связанного с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">78C136C80FF3F46C2C98F5C6B3B5BB581F8903A9<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Хеш SHA1 заблокированного файла<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">filePath<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">C:\\\\totalcmd\\\\TOTALCMD.EXE<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Объект URI<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">msg<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ESET Inspect<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Описание заблокированного файла<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceCustomDate1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Jun 04 2019 14:10:00<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceCustomDate1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">FirstSeen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Время и дата, когда обнаружение было впервые выявлено на компьютере. Формат: %b %d %Y %H:%M:%S<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Blocked by Administrator<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Причина<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Cause<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a6_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a6_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a6_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала CEF для события блокировки файлов:<\/a><\/p>\n\r<div id=\"toggle0186a6\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table class=\"TableBasic\"  role=\"presentation\">\n\r<tr class=\"TableBasic\">\n\r<td class=\"TableBasic\"><p class=\"p_Normal\">CEF:O|ESET|Protect|10.0.0.0|600|Blocked File Event|5|dvchost=test_lrghlbjyoa deviceExternalId=432a30af-6ac7-4b61-ae5c-5141bfc5d878 ESETProtectDeviceGroupName=All\/Lost &amp; found ESETProtectDeviceOsName=Microsoft Windows 11 Pro ESETProtectDeviceGroupDescription=Lost &amp; found static group cat=ESET Blocked File Event rt=Sep 21 2022 07:31:55 act=Execution blocked cn1=1 cn1Label=Handled suser=HP\\\\home deviceProcessName=C:\\\\Windows\\\\explorer.exe cs1=78C136C80FF3F46C2C98F5C6B3B5BB581F8903A9 cs1Label=Hash filePath=C:\\\\totalcmd\\\\TOTALCMD.EXE deviceCustomDate1=Sep 21 2022 07:31:55 deviceCustomDate1Label=FirstSeen cs2=Blocked by Administrator cs2Label=Cause msg=ESET Inspect<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">События фильтрации веб-сайтов<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Имя расширения<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Пример<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" style=\"vertical-align:middle;\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Описание<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">msg<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">An attempt to connect to URL<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Тип события<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">act<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Blocked<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Действие выполнено<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Обнаружение обработано (1) или не обработано (0).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cn1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">user<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Peter<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя учетной записи пользователя, связанной с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">deviceProcessName<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Firefox<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Имя процесса, связанного с событием.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Blocked by PUA blacklist<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор правила<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs1Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Rule ID<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">requestUrl<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">https:\/\/kenmmal.com\/<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URL-адрес заблокированного запроса.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">dst<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">172.17.9.224<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv4-адрес цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">2001:0db8:85a3:0000:0000:8a2e:0370:7335<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">IPv6-адрес цели события.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">c6a3Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Destination IPv6 Address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">HTTP filter<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Идентификатор модуля сканирования.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs2Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Scanner ID<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">8EECCDD290BE2E99183290FDBE4172EBE3DC7EC5<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Хеш SHA1 отфильтрованного объекта<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cs3Label<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"vertical-align:middle; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a7_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a7_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a7_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Пример журнала CEF для события фильтрации веб-сайта:<\/a><\/p>\n\r<div id=\"toggle0186a7\" class=\"dropdown-toggle-body\" style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;display:none\"><table class=\"TableBasic\"  role=\"presentation\">\n\r<tr class=\"TableBasic\">\n\r<td class=\"TableBasic\"><p class=\"p_Normal\">CEF:O|ESET|Protect|10.0.0.0|716|Filtered Website Event|5|dvchost=test_lrghlbjyoa deviceExternalId=432a30af-6ac7-4b61-ae5c-5141bfc5d878 ESETProtectDeviceGroupName=All\/Lost &amp; found ESETProtectDeviceOsName=Microsoft Windows 11 Pro ESETProtectDeviceGroupDescription=Lost &amp; found static group cat=ESET Filtered Website Event rt=Sep 21 2022 07:31:55 msg=An attempt to connect to URL dst=172.17.9.224 cs2=HTTP filter cs2Label=Scanner ID act=Blocked cn1=1 cn1Label=Handled requestUrl=https:\/\/kenmmal.com cs3=8EECCDD290BE2E99183290FDBE4172EBE3DC7EC5 cs3Label=Hash suser=Peter deviceProcessName=Firefox cs1=Blocked by PUA blacklist cs1Label=Rule ID<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
