V 2.0 Wildfire-Virus Threat Messages

Vendor Documentation

https://www.paloaltonetworks.com/documentation

Classification

Rule Name	Rule Type	Common Event	Classification
V 2.0 Wildfire-Virus Threat Messages	Base Rule	General Threat Message	Activity
V 2.0 Potentially Malicious File Allowed	Sub Rule	Detected Malware Activity	Malware
V 2.0 Potentially Malicious File Allowed	Sub Rule	Detected Malware Activity	Malware
V 2.0 Malicious File Blocked By Wildfire	Sub Rule	Failed Malware Activity	Failed Malware

Mapping with LogRhythm Schema

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<vmid>	Text/String
N/A	<severity>	Text/String
N/A	<sip>	Text/String/Number
N/A	<dip>	Text/String/Number
N/A	<sport>	Number
N/A	<dport>	Number
N/A	<snatip>	Text/String/Number
N/A	<dnatip>	Text/String/Number
N/A	<snatport>	Number
N/A	<dnatport>	Number
N/A	<sinterface>	Text/String/Number
N/A	<dinterface>	Text/String/Number
N/A	<protname>	Text/String
N/A	<login>	Text/String
N/A	<domainorigin>	Text/String
N/A	<subject>	Text/String
N/A	<object>	Text/String
N/A	<session>	Text/String/Number
N/A	<threatname>	Text/String
N/A	<threatid>	Number
N/A	<policy>	Text/String
N/A	<action>	Text/String
N/A	<sender>	Text/String
N/A	<recipient>	Text/String
N/A	<quantity>	Number
N/A	<tag1>	Text/String
N/A	<tag2>	Text/String

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.