Skip to content

Latest commit

 

History

History
35 lines (28 loc) · 2.42 KB

c91067a3-e972-4a73-ac14-75df12d49cc8.md

File metadata and controls

35 lines (28 loc) · 2.42 KB

Products: McAfee - Endpoint Security

Rules

Rule ID Rule Name
MATCH-S00516 Antivirus Ransomware Detection
MATCH-S00519 Malware Cleaned
MATCH-S00518 Malware Not Cleaned
THRESHOLD-S00517 Malware Outbreak
THRESHOLD-S00520 Persistent Malware Infection

Log Mappers

Log Mapper ID Log Mapper Name
5cc56c64-7375-4a99-9b72-70cf1f9cc3a2 McAfee Endpoint EE Event Logs
93aac64b-4998-419f-8164-947f0100ac3a McAfee Endpoint EPO Event Logs
19758328-89cd-11ea-bc55-0242ac130003 McAfee Endpoint EPOevent
91e2a894-8983-11ea-bc55-0242ac130003 McAfee Endpoint GenericEvent
faba0a95-9af4-45b1-a4dc-610fd5e72a25 McAfee Endpoint Logs
7951eb42-89cd-11ea-bc55-0242ac130003 McAfee Endpoint MSMERoot
5a914e06-8972-11ea-bc55-0242ac130003 McAfee Endpoint PortBlockEvent
a4967bae-89ca-11ea-bc55-0242ac130003 McAfee Endpoint SCORData
9de3071e-b827-4fa4-a361-8dd34e9e26ed McAfee Endpoint Security
9d5a9da6-718a-4f65-8f7a-04f3d5b5b369 McAfee Endpoint Security Custom Parser
c3eaf746-896b-11ea-bc55-0242ac130003 McAfee Endpoint TaskStatusEvent
b33374ad-6ddd-4505-8012-ed17b09690d6 McAfee Endpoint Update Event Logs
91e2acae-8983-11ea-bc55-0242ac130003 McAfee Endpoint VSAS120PerformanceEvent
91e2ae34-8983-11ea-bc55-0242ac130003 McAfee Endpoint VSAS130PerformanceEvent
b2de8aea-eaf5-44af-a730-d1e24cd017a9 McAfee MVISION Endpoint
e5a1ef69-b11f-4ccd-81a7-fdf322543e64 McAfee Security Platform