genian-edr-threat-history
Reads the handling history of a threat (state changes, verdicts, assignees), newest first.
genian-edr-threat-history [profile=VALUE] threat-id=VALUE
- profile=VALUE
- Optional. Genian EDR connect profile name. Every Genian EDR profile is queried when omitted.
- threat-id=VALUE
- Required. Threat to read, the threat_id of genian-edr-threats
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| msg | String | Message | e.g. [admin01] 위협 관리상태가 "처리중"(으)로 변경되었습니다. What was done. |
| user | String | User | e.g. admin01. Console account that did it. |
| user_name | String | User name | e.g. 홍길동. Display name of the account. |
| log_id | String | Log ID | e.g. 750. Audit log code. |
| log_type_str | String | Log type | e.g. 알림. Audit log type label. |
| log_ip | IP | Client IP | e.g. 10.10.20.5. Address the change came from. |
| _time | Date | Time | e.g. 2026-11-07 00:14:20. Representative time of the row. |