eset endpoint security

Expression

product = "eset endpoint security"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-login	process_dir	Default			✓
	url	Default			✓
	hash_sha256	Default			✓
	src_port	Default			✓
	src_ip	Default		✓
	protocol	Default			✓
	additional_info	Default			✓
	process_name	Default			✓
	dest_ip	Default		✓
	event_name	Default			✓
	action	Default			✓
	process_path	Default			✓
	category	Default			✓
	dest_port	Default			✓
	direction	Default			✓
endpoint-authentication	src_ip	Default		✓
	additional_info	Default			✓
	service_name	Default			✓
	alert_severity	Default			✓
	event_name	Default			✓
	category	Default			✓
	operation	Default			✓
	object	Default			✓
http-session	hash_sha256	Default			✓
	additional_info	Default			✓
	process_name	Default			✓
	domain	Default			✓
	event_name	Default			✓
	process_dir	Default			✓
	process_path	Default			✓
	direction	Default			✓