Cybereason Malware

Malware detection and prevention log (syslog CEF, event_id = Malware)

#	Field	Type	Display name	Description
1	_time	DATE	시각
2	event_name	STRING	이벤트이름	e.g. Malware Created
3	risk	STRING	위험도	LOW, MEDIUM, HIGH
4	hostname	STRING	호스트명	e.g. PC-0001
5	signature	STRING	공격명	e.g. AI.StaticAnalysis
6	action	STRING	대응	DETECT, BLOCK
7	file_path	STRING	파일경로	e.g. c:\users\user01\desktop\sample.exe
8	xref	URL	참조URL	e.g. https://edr.example.com/#/s/search?queryString=0<-File[...]&rootType=File
9	sid	STRING	시그니처ID	e.g. 123456789