Source (XDM)

Cortex XSIAM Platform APIs

Display name Field name Data type
Source Agent Content Version xdm.source.agent.content_version TEXT
Source Agent Identifier xdm.source.agent.identifier TEXT
Source Agent Installation Id xdm.source.agent.installation_id TEXT
Source Agent Version xdm.source.agent.version TEXT
Source Host Fqdn xdm.source.host.fqdn TEXT
Source Host Hostname xdm.source.host.hostname TEXT
Source Host Ipv4 Addresses xdm.source.host.ipv4_addresses TEXT
Source Host Ipv6 Addresses xdm.source.host.ipv6_addresses TEXT
Source Host Os Family xdm.source.host.os_family ENUM
Source Identity Identifier xdm.source.identity.identifier TEXT
Source Identity Identity Type xdm.source.identity.identity_type ENUM
Source Identity User Type xdm.source.identity.user_type ENUM
Source Identity Username xdm.source.identity.username TEXT
Source Ipv4 xdm.source.ipv4 TEXT
Source Location Country xdm.source.location.country TEXT
Source Process Causality Id xdm.source.process.causality_id TEXT
Source Process Command Line xdm.source.process.command_line TEXT
Source Process Executable Filename xdm.source.process.executable.filename TEXT
Source Process Executable Path xdm.source.process.executable.path TEXT
Source Process Executable Sha256 xdm.source.process.executable.sha256 TEXT
Source Process Executable Signature Status xdm.source.process.executable.signature_status ENUM
Source Process Executable Signer xdm.source.process.executable.signer TEXT
Source Process Name xdm.source.process.name TEXT
Source User Username xdm.source.user.username TEXT