EVID 30030 : McAfee ePO Drive Encryption Messages

http://b2b-download.mcafee.com/products/naibeta-download/epo_510/epo_510_onprembeta1_installationguide.pdf

EVID 30030 : McAfee ePO Drive Encryption Messages

Base Rule

General Information Log Message

Information

N/A

N/A

N/A

N/A 

MachineName

<dname>

Text/Number

N/A 

AgentGUID

N/A

N/A

Unique identifier of the agent that forwarded the event.

IPAddress

<dip>

Number

N/A 

OSName

N/A

N/A

N/A 

UserName

<domainimpacted>, <account>

Text/String

N/A 

TimeZoneBias

N/A

N/A

N/A 

RawMACAddress

<dmac>

Number/String

N/A 

ProductName

<vendorinfo>

Text/String

Name of the detecting managed product.

ProductVersion

<version>

Text/String/Number

Version number of the detecting product.

EventID

<vmid>

Number

Unique identifier of the event class.

Severity

<severity>

Text/String/Number

N/A 

GMTTime

N/A

N/A

N/A 

Data

N/A

N/A

N/A 

DataType

<objecttype>

Text/String

N/A 

CorrelationID

N/A

N/A

N/A