Containment Requested (Endpoint Security)

Prev Next
CEF:0|trellix|hx|9.9.0|Trellix Containment Requested|Trellix Containment
Requested|4|rt=Feb 05 2019 17:07:28 UTC dvchost=trellix-01cb28
categoryDeviceGroup=/IDS/Application/Service categoryDeviceType=Forensic
Investigation categoryObject=/Host cs1Label=Host Agent Cert Hash
cs1=HawW2jJc9O6bDMZDqxo30s dst=10.61.155.119 dmac=00-50-56-01-cb-23
dhost=WIN2feff6846b7d dntdom=WORKGROUP deviceCustomDate1Label=Agent Last
Audit deviceCustomDate1=Feb 05 2019 17:02:45 UTC cs2Label=Trellix Agent
Version cs2=29.7.0 cs5Label=Target GMT Offset cs5=PT0H cs6Label=Target OS
cs6=Windows 7 Enterprise 7601 Service Pack 1 suser=admin
categoryOutcome=/Success categorySignificance=/Informational
categoryBehavior=/Create act=Containment Requested msg=Host WIN2feff6846b7d
containment requested by admin categoryTupleDescription=Containment was
requested for a host. request=https://trellix-
01cb28:3000/hx/hosts/HawW2jJc9O6bDMZDqxo30s