malware-callback (Network Security)
- Published on Aug 25, 2026
CEF:0|Trellix|MPS|9.0.2.924861|MC|malware-callback|7|rt=Oct 16 2020 14:36:29 UTC src=xx.xxx.xxx.xxx
cn3Label=cncPort cn3=443 cn2Label=sid cn2=86112670 proto=tcp spt=49193 dst=xx.xxx.xxx.xxx cs5Label=cncHost
cs5=xx.xxx.xxx.xxx dvchost=abc.mrl.trellix.com dvc=10.5.6.126 smac=00:0c:29:75:37:4a cn1Label=vlan cn1=0 dpt=443
externalId=88 cs4Label=link cs4=https://abc.mrl.trellix.com/event_stream/events_for_bot?ev_id\=88 act=notified
cs6Label=channel cs6= dmac=00:50:56:fe:a1:97 cs1Label=sname cs1=Trojan.Gootkit
devicePayloadId=37031d85-101b-460f-9e30-6e0117c089f6 start=Oct 16 2020 14:36:29 UTC .
Was this article helpful?
Related articles
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > Overview > Alerts