Skip to main content
Skip table of contents

EVID 20835 : McAfee ePO App Control Messages

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

EVID 20835 : McAfee ePO App Control Messages

Base Rule

General Information Log Message

Information

Mapping with LogRhythm Schema


Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Machinename<dname>Text/StringName of the system hosting the detecting product.
AgentGUIDN/AN/AUnique identifier of the agent that forwarded the event.
IPAddress<dip>IP AddressIP address of the system hosting the detecting product (if given in the event).
OSNameN/AN/AN/A
UserName<account>
<domainimpacted>
Text/StringN/A
TimeZoneBiasN/AN/AN/A
RawMACAddress<dmac>Text/String/NumberMAC address of the system hosting the detecting product.
ProductName<vendorinfo>Text/StringName of the detecting managed product.
ProductVersion<version>Text/String/NumberVersion number of the detecting product.
ProductFamilyN/AN/AN/A
EventID<vmid>NumberUnique identifier of the event class.
Severity<severity>Text/String/NumberN/A
GMTTimeN/AN/AN/A
SCORevent_name<action>Text/StringN/A
SCORevt_idN/AN/AN/A
SCORevt_typeN/AN/AN/A
ECORevt_sinkN/AN/AN/A
SCORseq_noN/AN/AN/A
SCORtime_stampN/AN/AN/A
SCORserver_stateN/AN/AN/A
SCORprocess_name<process>Text/StringN/A
SXCORprocess_id<processid>Text/String/NumberN/A
SCORuser_name<domainorigin>
<login>
Text/StringN/A
SCORworkflowN/AN/AN/A
SCORfile_name<object>Text/StringN/A
SCORparent_process_name<parentprocesspath>
<parentprocessname>
Text/StringN/A
SCORcmd_line<command>Text/StringN/A
SCORcommentN/AN/AN/A
SCORfile_sha1<hash>Text/String/NumberN/A
SCORfile_md5N/AN/AN/A
SCORfile_sha256N/AN/AN/A
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.