mcafee dlp

Expression

product = "mcafee dlp"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
alert-trigger	num_pages
	rule
	device_type
	domain_user_name
	src_ip	Legacy	✓	✓
	external_address
	protocol	Legacy		✓
	alert_id	Legacy			✓
	email_attachment
	device_id
	file_name	Legacy	✓
	process_dir
	src_host	Legacy	✓	✓
	email_attachments
	target
	additional_info
	sender	Legacy	✓
	bytes	Legacy		✓
	recipients
	dest_ip	Legacy	✓	✓
	domain
	dest_host	Legacy		✓
	printer_name
	process_path	Legacy		✓
	email_subject
	user	Legacy		✓