trellix network security platform (ips)
May 20, 2025 · View on GitHub
Expression
product = trellix network security platform (ips)
Fields
There are no fields for this extension.
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| alert-trigger | sub_category | ||||
| detection_method | |||||
| src_host | Legacy | ✓ | ✓ | ||
| interface | |||||
| product_name | |||||
| result | |||||
| src_ip | Legacy | ✓ | ✓ | ||
| src_port | Legacy | ✓ | |||
| additional_info | |||||
| attack_conf | |||||
| dest_ip | Legacy | ✓ | ✓ | ||
| domain | |||||
| action | Legacy | ✓ | |||
| app_protocol | |||||
| dest_host | Legacy | ✓ | |||
| sensor | |||||
| virus_name | |||||
| category | |||||
| dest_port | Legacy | ✓ | |||
| direction |