Containment Approved (Endpoint Security)

Prev Next
CEF:0|trellix|hx|9.9.0|Trellix Containment Approved|Trellix Containment Approved|4|rt=Feb 05 2019 17:07:38 UTC
dvchost=trellix-01cb28 categoryDeviceGroup=/IDS/Application/Service categoryDeviceType=Forensic Investigation
categoryObject=/Host cs1Label=Host Agent Cert Hash cs1=HawW2jJc9O6bDMZDqxo30s dst=10.61.155.119
dmac=00-50-56-01-cb-23 dhost=WIN2feff6846b7d dntdom=WORKGROUP deviceCustomDate1Label=Agent Last Audit
deviceCustomDate1=Feb 05 2019 17:02:45 UTC cs2Label=Trellix Agent Version cs2=29.7.0 cs5Label=Target GMT Offset
cs5=PT0H cs6Label=Target OS cs6=Windows 7 Enterprise 7601 Service Pack 1 suser=admin categoryOutcome=/Success
categorySignificance=/Informational categoryBehavior=/Create act=Containment Approved msg=Host WIN2feff6846b7d
containment approved by admin categoryTupleDescription=Containment was approved for a host. request=https://
<host>/hx/hosts/HawW2jJc9O6bDMZDqxo30s