01_Introduction
02_Unified Cyber Defense Platform
03_The Stack
04_Features and capabilities
05_Operations
06_Architecture
- Architecture - Version 3
- Architecture - Version 4
07_Integration
- Cisco pxGrid Integration
- Threat Intel Sources
08_Use cases
- SIGMA Rules
  SIGMA Detection Attributes
  Understanding SIGMA Rule
  Creating SIGMA Rule
09_CaseHub
10_Active-Defense-Services
- Services (ADS - LIADS)
  Network Services
  Database Services
  Web-Apps
- Tokens (ADS - Tokens)
11_Data-Pipeline-Manager (DPM)
- Basic Concepts
- Getting Started
12_Deployment / Log Forwarding
13_MITRE ATT&CK
- MITRE ATT&CK Coverage by Tactic
- MITRE ATT&CK Coverage by Technique
14_BluArmour Endpoint Protection
- BluArmour For ICS / AirGapped Networks
15_BluGenie
16_Best Practices
17_Threat Hunt
18_Taxonomy
19_Product Videos
Appendix A

On this page

Alert Data

Version 3.5

Field Name

Data Type

ads.token.id

string

ads.token.id.keyword

string

ads.token.reminder_text

string

ads.token.type

string

ads.token.useragent

string

agent.type

text

alert.level

string

alert.level.keyword

string

alert.timestamp

date

clientID

string

clientID.keyword

string

cloud.account.id

text

cloud.instance.name

text

cloud.provider

text

cloud.region