Cybereason
Cybereason Malware
Malware detection and prevention log (syslog CEF, event_id = Malware)
Cybereason
Cybereason Suspicions
Process suspicions collected from the investigation API (POST /rest/visualsearch/query/simple)
Cybereason
Cybereason MalOp (API)
MalOp records collected from the MalOp management API (POST /rest/mmng/v2/malops)