Concise, extended, and normal format outputs

Alert notifications in all formats (XML, JSON, CEF, LEEF, and so on) are configurable in “concise,” “extended,” or “normal” outputs. These output options offer different levels of detailed information about a particular alert.

Notifications formatted with the “normal” output are the same as “concise” but also include OS Changes, callback details, and malware details if available. Extended outputs are the same as “normal” but also include data theft and static analysis information, if available.