Cybereason

Download 0
Last updated Aug 3, 2026

Cybereason Suspicions

Process suspicions collected from the investigation API (POST /rest/visualsearch/query/simple)

TypeFieldNameDescription
Date_timeTime
Dateend_timeEnd time
Stringprocess_nameProcess namee.g. sample.exe
Stringprocess_infoProcess infoe.g. c:\users\user01\downloads\sample.exe
StringsuspicionsSuspicionse.g. blackListedFileHashSuspicion
StringguidProcess GUIDe.g. -1234567890123456789
Booleanis_maliciousMalicious
Booleanis_suspectSuspect
Booleanis_malicious_verdictMalicious verdict