V 2.0 : Tanium Discover Events
Vendor Documentation
Classification
| Rule Name | Rule Type | Common Event | Classification |
|---|---|---|---|
| V 2.0 : Tanium Discover Events | Base Rule | General Information | Information |
Mapping with LogRhythm Schema
| Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
|---|---|---|---|
| N/A | N/A | N/A | Vendor or Manufacturer Name |
| N/A | N/A | N/A | Product Name |
| N/A | N/A | N/A | Product Version |
| N/A | <vmid> | Text/String | EventID |
| id | N/A | N/A | N/A |
| MacAddress | N/A | N/A | N/A |
| MacOrganization | <smac> | Text/String | N/A |
| LocallyAdministeredMacAddress | N/A | N/A | N/A |
| IpAddress | <sip> | IP Address | N/A |
| NatIpAddress | <snatip> | IP Address | N/A |
| HostName | <sname> | Text/String | N/A |
| Labels | N/A | N/A | N/A |
| Locations | N/A | N/A | N/A |
| TaniumComputerId | N/A | N/A | N/A |
| Ports | N/A | N/A | N/A |
| Os | <object> | Text/String | N/A |
| OsGeneration | N/A | N/A | N/A |
| Managed | N/A | N/A | N/A |
| Unmanageable | N/A | N/A | N/A |
| Arp | N/A | N/A | N/A |
| Nmap | N/A | N/A | N/A |
| Ping | N/A | N/A | N/A |
| Connected | N/A | N/A | N/A |
| AwsApi | N/A | N/A | N/A |
| CentralizedNmap | N/A | N/A | N/A |
| SatelliteNmap | N/A | N/A | N/A |
| NDP | N/A | N/A | N/A |
| CreatedAt | N/A | N/A | N/A |
| UpdatedAt | N/A | N/A | N/A |
| FirstManagedAt | N/A | N/A | N/A |
| LastManagedAt | N/A | N/A | N/A |
| LastDiscoveredAt | N/A | N/A | N/A |
| Profile | N/A | N/A | N/A |
| InstanceId | N/A | N/A | N/A |
| ImageId | N/A | N/A | N/A |
| InstanceType | N/A | N/A | N/A |
| InstanceState | N/A | N/A | N/A |
| LaunchTime | N/A | N/A | N/A |
| Zone | N/A | N/A | N/A |
| Provider | N/A | N/A | N/A |
| VirtualNetworkId | N/A | N/A | N/A |
| OwnerId | N/A | N/A | N/A |
| SatelliteDecId | N/A | N/A | N/A |
| SatelliteName | N/A | N/A | N/A |