Skip to main content
Skip table of contents

Feed Query : Process Hit

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification
Feed Query : Process HitBase RuleWatchlist HitActivity

Mapping with LogRhythm Schema

Device Key in Log MessageLogRhythm SchemaData Type
cmdline<command>Text/String
feed_name<sender>Text/String
group<group>Text/String
hostname<dname>Text/String
interface_ip<sip>IP Address
digsig_result<result>Text/String
parent_name<parentprocessname>Text/String
parent_pid<parentprocessid>Number
path<process>Text/String
process_md5<objectname>Text/String
process_md5<hash>Text/String
process_name<object>Text/String




JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.