parserContent_s-cisco-amp-alert-2.md

Parser Content

{
Name = s-cisco-amp-alert-2
  Conditions = [ """"event_type"""", """"Quarantine Failure"""", """"trajectory":""", """"timestamp_nanoseconds":""" ]
}