Skip to main content
Skip table of contents

EVID 34865 - Protect Mcafee Process

Vendor Documentation

Classification

Rule Name

Rule Type

Classification

Common Event

EVID 34865 - Protect Mcafee Process

Base Rule

Information

General Process Information

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

N/A

N/A

N/A

MachineName

N/A

N/A

Name of the system hosting the detecting product.

AgentGUID

N/A

N/A

Unique identifier of the agent that forwarded the event.

IPAddress

<dip>

IP Address

IP address of the system hosting the detecting product (if given in the event).

OSName

N/A

N/A

N/A

UserName

<account>
<domainimpacted>

Text/String

N/A

TimeZoneBias

N/A

N/A

N/A

RawMACAddress

<dmac>

Text/String/Number

MAC address of the system hosting the detecting product.

ProductName

<vendorinfo>

Text/String

Name of the detecting managed product.

ProductVersion

<version>

Text/String/Number

Version number of the detecting product.

ProductFamily

N/A

N/A

N/A

EventID

<vmid>

Number

Unique identifier of the event class.

Severity

N/A

N/A

N/A

GMTTime

N/A

N/A

N/A

Analyzer

N/A

N/A

N/A

AnalyzerName

N/A

N/A

Name of the detecting managed product.

AnalyzerVersion

N/A

N/A

Version number of the detecting product.

TargetHostName

<dname>

Text/String

Name of the system that created the event.

ThreatCategory

<subject>

Text/String

Category of the event. Possible categories depend on the product.

ThreatActionTaken

<action>

Text/String

The action taken by the product in response to the threat.

ThreatType

 

 

Class of the threat.

ThreatName

<threatname>

Text/String

Name of the threat.

SourceProcessName

<process>

Text/String

The process name from which the threat originated.

ThreatSeverity

<severity>

Number

The severity of the detected threat as defined by each managed product.

target

N/A

N/A

N/A

Vendor

N/A

N/A

N/A

Subject

N/A

N/A

N/A

Hash

<hash>

Text/String/Number

N/A

Cert

N/A

N/A

N/A

target

N/A

N/A

N/A

NaturalLangDescription

N/A

N/A

N/A

AttackVectorType

N/A

N/A

N/A

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.