forescout counteract
March 22, 2023 · View on GitHub
Expression
product = "forescout counteract"
Fields
There are no fields for this extension.
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| configuration-modify | src_ip | ||||
| additional_info | |||||
| dest_ip | |||||
| session_id | |||||
| user | |||||
| operation | |||||
| object | |||||
| endpoint-policy-verify | host_ip | Default | ✓ | ||
| dest_mac | Default | ✓ | |||
| dest_ip | Default | ✓ | |||
| event_name | Default | ✓ | |||
| user | Default | ✓ | |||
| network-session |