Skip to content

Data Source ExamplesΒΆ

Data Model / Source Example Data Sources (Not Exhaustive)
Authentication Windows, *Nix, Okta, Cisco ISE, Juniper (VPN)
Change Windows, *Nix, Okta, Netscreen (Firewall), Syslog, CarbonBlack
Compute_Inventory *Nix, Windows, Cisco UCS
Endpoint Ports *Nix
Endpoint Processes *Nix
Endpoint Services *Nix
Intrusion_Detection Netscreen (Firewall), Juniper (IDP), McAfee (IDS), Okta (IM), Carbonblack, Wireless IDS (Air Defender)
Malware McAffee EPO
Network_Sessions Juniper (VPN), Stream/Bro DHCP
Network_Traffic Netscreen (Firewall), Cisco ISE, Juniper (Firewall), Carbonblack
Updates Windows, *Nix
Vulnerabilities Nessus, Windows
Web Websense, Bro (HTTP)