IOC Hit Found (Endpoint Security)

CEF:0|trellix|hx|9.9.0|IOC Hit Found|IOC Hit Found|10|rt=Feb 05 2019 17:02:46 UTC dvchost=trellix-01cb28
categoryDeviceGroup=/IDS categoryDeviceType=Forensic Investigation categoryObject=/Host cs1Label=Host Agent Cert
Hash cs1=uP1q4KNadwaber6XLK6BZU dst=10.61.154.186 dmac=00-50-56-01-cb-25 dhost=WIN11b1f2d1fea1 dntdom=WORKGROUP
deviceCustomDate1Label=Agent Last Audit deviceCustomDate1=Feb 05 2019 17:02:42 UTC cs2Label=Trellix Agent
Version cs2=29.7.0 cs5Label=Target GMT Offset cs5=PT0H cs6Label=Target OS cs6=Windows 10 Enterprise 17763
externalId=8 start=Feb 05 2019 17:01:59 UTC categoryOutcome=/Success categorySignificance=/Compromise
categoryBehavior=/Found cs7Label=Resolution cs7=ALERT cs8Label=Alert Types cs8=prs act=Detection IOC Hit
msg=Host WIN11b1f2d1fea1 IOC compromise alert categoryTupleDescription=A Detection IOC found a compromise
indication. cs4Label=IOC Name cs4=TRELLIX END2END TEST categoryTechnique=Alert