ips-event (Network Security on Central Management)

CEF:0|Trellix|CMS|9.0.0.916210|IE|ips-event|7|externalId=15 rt=Jun 29 2020 08:36:01 UTC proto=tcp src=xxx.xx.x.x
spt=80 smac=00:1b:78:75:79:68 dst=xxx.x.x.xx dpt=33501 dmac=00:0c:29:5e:e3:6c cnt=1 cs1Label=sname cs1=Potential
Heap Spray Memory Allocation act=notified dvchost=xx.x.x.xxx dvc=axhwmps cn2=85311119 cn2Label=sid cfp1=8
cfp1Label=signature revision cs4=https://axhcms.trellix.com/notification_url/ips_events?ev_id\=15 cs4Label=link
flexString2=client flexString2Label=attack mode msg=MVX Correlation Status:N/A cn1=0 cn1Label=vlan