The following abbreviations are used for event types:
Abbreviation | Event Type |
|---|---|
AA | ace alert |
AQ | Acquisition Queued |
AS | Acquisition Started |
AT | malicious email (AT alert) |
CA | Containment Approved |
CC | Containment Completed |
CQ | Containment Queued |
CR | Containment Requested |
CS | Containment Started |
DM | domain-match |
EF | ExD Hit Found |
FP | False Positive Updated |
IE | ips-event |
IF | IOC Hit Found |
IM | infection-match |
MC | malware-callback |
MH | Malware Hit Found |
MO | malware-object |
MS | Malware Scan |
PC | Policy Changed |
QC | Quarantine Completed |
QF | Quarantine file user action |
RC | riskware-callback |
RI | riskware-infection |
SC | Stop Containment |
SU | Security Content Updated |
RO | riskware-object |
WI | web-infection |
The following product abbreviations are used in CEF, LEEF, and CSV alert notifications:
Abbreviation | Product (Old Name) | Product (New Name) |
|---|---|---|
CMS | CM Series | Central Management System |
eMPS | EX Series | Email Security — Server |
fMPS | FX Series | File Protect |
MAS | AX Series | Malware Analysis |
MPS | NX Series | Network Security |
hx | HX Series | Endpoint Security (HX) |
ETP | ETP | Email Security - Cloud |
The following product abbreviations are used in XML and JSON alert notifications:
Abbreviation | Product (Old Name) | Product (New Name) |
|---|---|---|
CMS | CM Series | Central Management System |
Email MPS | EX Series | Email Security — Server |
File MPS | FX Series | File Protect |
MAS | AX Series | Malware Analysis |
Web MPS | NX Series | Network Security |
HX | HX Series | Endpoint Security (HX) |