Parsers and Generated Fields
Tag Fields Created by Parser cef-latest
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser cef-latest
| Vendor Field | CPS Field | Description |
|---|---|---|
| Vendor.ext.CtdDestinationIp | destination.ip | |
| Vendor.ext.CtdFilePath | file.path | |
| Vendor.ext.CtdMessage; | message | |
| Vendor.ext.CtdSourceIp | source.ip | |
| Vendor.ext.CtdCveId | vulnerability.id | |
| Vendor.ext.CtdCveScore | vulnerability.score.base |
Tag Fields Created by Parser claroty-ctd
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser claroty-ctd
| Vendor Field | CPS Field | Description |
|---|---|---|
| Vendor.ext.CtdDestinationIp | destination.ip | |
| Vendor.ext.CtdFilePath | file.path | |
| Vendor.ext.CtdMessage | message | |
| Vendor.ext.CtdSourceIp | source.ip | |
| Vendor.ext.CtdCveId | vulnerability.id | |
| Vendor.ext.CtdCveScore | vulnerability.score.base |