Catch All : Level 2 (Syslog - Imperva Data Risk Analytics CEF)
Vendor Documentation
https://docs.imperva.com/bundle/v4.2-dra-user-guide/page/Service_Account_Abuse.htm https://docs-cybersec.thalesgroup.com/bundle/v4.3-dra-user-guide/page/69851.htm |
Classification
Rule Name | Rule Type | Common Event | Classification |
|---|---|---|---|
Catch All : Level 2 | Base Rule | General Information | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
N/A | N/A | N/A | CEF: Version |
N/A | N/A | N/A | Device Vendor |
N/A | N/A | N/A | Device Product |
N/A | <version> | Text/String | Device Version |
N/A | N/A | N/A | N/A |
N/A | <vmid> | Number | Device Event Class ID |
N/A | <objecttype> | Text/String | Name |
N/A | <severity> | Number | Severity |