unix sendmail
March 22, 2023 · View on GitHub
Expression
product = "unix sendmail"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ | ||
| protocol | ✓ | ||
| return_path | ✓ | ||
| bytes | ✓ | ||
| alert_id | ✓ | ||
| dest_ip | ✓ | ||
| dest_host | ✓ | ||
| bytes_unit | ✓ | ||
| num_recipients | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| email-receive | |||||
| email-send |