Cybereason

Download 17
Last updated Aug 6, 2026

Cybereason Suspicions

Process suspicions collected from the investigation API (POST /rest/visualsearch/query/simple)

TypeFieldNameDescription
Date_timeTime
Dateend_timeEnd time
Stringprocess_nameProcess namee.g. sample.exe
Stringprocess_infoProcess infoe.g. c:\users\user01\downloads\sample.exe
StringsuspicionsSuspicionse.g. blackListedFileHashSuspicion
StringguidProcess GUIDe.g. -1234567890123456789
Booleanis_maliciousMalicious
Booleanis_suspectSuspect
Booleanis_malicious_verdictMalicious verdict