Netskope : Security Assessment
Vendor Documentation
Classification
Rule Name | Rule Type | Classification | Common Event |
|---|---|---|---|
| Base Rule | Other Security | General Security |
Mapping with LogRhythm Schema
| Device Key in Log Message | LogRhythm Schema | Data Type |
|---|---|---|
| Device vendor | N/A | N/A |
| device product | N/A | N/A |
| Device version | N/A | N/A |
| Device event class id | <vmid> | Text/String |
| Event name | N/A | N/A |
| Severity of the event | <severity> | Text/String |
| access_method | N/A | N/A |
| activity | N/A | N/A |
| action | <action> | Text/String |
| application category | <subject> | Text/String |
| browser | N/A | N/A |
| cci | N/A | N/A |
| ccl | N/A | N/A |
| instance_id | N/A | N/A |
| object | N/A | N/A |
| os | N/A | N/A |
| policy | <policy> | Text/String |
| app | N/A | N/A |
| account_id | N/A | N/A |
| asset_object_id | N/A | N/A |
| iaas_asset_tags | N/A | N/A |
| sa_profile_name | N/A | N/A |
| sa_rule_name | <vendorinfo> | Text/String |
| sa_rule_remediation | N/A | N/A |
| site | N/A | N/A |
| user | <login> | Text/String |
| timestamp | N/A | N/A |
| sourceservicename | <process> | Text/String |