Commonly used taxonomy

Prev Next

This section covers categories of events commonly used in the Helix Enterprise taxonomy. It provides a brief description of each category, metaclasses that reference the events (if any), fields in the event data, and how Helix Enterprise uses the event data.

Note

Many of the fields included in this section are commonly used in detection, but it should not be considered a full list of such fields.