SentinelOne

/web/api/v2.1/agents API 응답 형식

/web/api/v2.1/cloud-detection/alerts API 응답 형식

BEHAVIORALINDICATORS 이벤트 유형

TCPV4 이벤트 유형

event.category = cross_process

event.category = dns

/web/api/v2.1/application-management/inventory/applications API 응답 형식

FILECREATION, FILEDELETION, FILEMODIFICATION 이벤트 유형

event.category = file

event.category = group

event.category = indicators

event.category = logins

OPENPROCESS, PROCESSCREATION 이벤트 유형

event.category = process

REGVALUECREATE 이벤트 유형

event.category = registry

event.category = scheduled_task

SCRIPTS 이벤트 유형

event.category = ip

class_uid = 2002 (Vulnerability Finding)

event.category = url