riskware-object (IPv4) (Network Security)
- Published on Aug 25, 2026
CEF:0|Trellix|MPS|9.0.2.925495|RO|riskware-object|1|rt=Oct 22 2020 09:16:39
UTC start=Oct 22 2020 08:55:04 UTC end=Oct 22 2020 09:16:39 UTC
src=xx.xx.xx.xx dst=xx.xx.xx.xx request=xx.xx.xx.xx/YaraAdware
fname=YaraAdware fileType=exe cs1Label=sname cs1=FE_Adware_00fc8020ad243161
act=notified dvc=xx.x.x.xxx dvchost=abc.mrl.trellix.com
fileHash=a5a4de61293d9dba3a46ec7e67f07c30 smac=10:60:4b:a9:b4:04
dmac=10:60:4b:a9:86:18 fsize=764296 spt=55059 dpt=80 cn1Label=vlan cn1=0
requestMethod=GET externalId=151 devicePayloadId=bdab4b33-6856-40ec-93be-
1b4d7cd5968d msg=risk ware detected:66 cs4Label=link
cs4=https://abc.mrl.trellix.com/detection/objects?uuid\=bdab4b33-6856-40ec-
93be-1b4d7cd5968d flexString1Label=sha256sum
flexString1=25b8e3cc4774975876c36de3a6e5a34bb7a48857e4f02c36416aed7631d03094
.
Was this article helpful?
Related articles
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type