Press CTRL+K to open search

SmartVision (Network Security)

  • Published on Aug 25, 2026
  • 2 minute(s) read
Prev Next 
CEF:0|Trellix|MPS|9.0.0.916432|WA|smartvision-event|5|rt=Jun 26 2020 12:42:06
UTC externalId=1 act=notified cn2Lablel=signatureId cn2=91500000
cfp1Label=signatureRevision cfp1=5 devicePayloadId=20281250-7c27-4cce-a410-
2f04e1002c6e cnt=5 cs1=Suspicious Remote Scheduled Task Activity
cs1Label=name cat=T1053 / Remote Execution msg=Suspicious Remote Scheduled
Task Activity src=xxx.xxx.x.x dst=xxx.xxx.x.x spt=43520 dpt=445
cs4=https://abc.mrl.trellix.com/notification_url?uuid\=20281250-7c27-4ccea410-
2f04e1002c6e cs4Lablel=link
CEF:0|Trellix|MPS|9.0.0.916432|SE|smartvision-base-event|0 rt=Jun 26 2020
12:42:07 UTC externalId=1 cs1Label=name cs1=SMB Create Request: Delete file
in Windows temp direcory proto=tcp src=xxx.xxx.x.x dst=xxx.xxx.x.x spt=43520
dpt=445 dvchost=abc.mrl.trellix.com dvc=xx.x.x.xxx sev=1 msg=SMB Create
Request: Delete file in Windows temp direcory with id:1 detected
CEF:0|Trellix|MPS|9.0.0.916432|SE|smartvision-base-event|0 rt=Jun 26 2020
12:42:06 UTC externalId=2 cs1Label=name cs1=SMB Create Request: File in
Windows temp direcory proto=tcp src=xxx.xxx.x.x dst=xxx.xxx.x.x spt=43520
dpt=445 dvchost=abc.mrl.trellix.com dvc=xx.x.x.xxx sev=1 msg=SMB Create
Request: File in Windows temp direcory with id:2 detected
CEF:0|Trellix|MPS|9.0.0.916432|SE|smartvision-base-event|0 rt=Jun 26 2020
12:42:07 UTC externalId=3 cs1Label=name cs1=ATSVC Start Job proto=tcp
src=xxx.xxx.x.x dst=xxx.xxx.x.x spt=43520 dpt=445 dvchost=abc.mrl.trellix.com
dvc=xx.x.x.xxx sev=1 msg=ATSVC Start Job with id:3 detected
CEF:0|Trellix|MPS|9.0.0.916432|SE|smartvision-base-event|0 rt=Jun 26 2020
12:42:07 UTC externalId=4 cs1Label=name cs1=ATSVC Delete Job proto=tcp
src=xxx.xxx.x.x dst=xxx.xxx.x.x spt=43520 dpt=445 dvchost=abc.mrl.trellix.com
dvc=xx.x.x.xxx sev=1 msg=ATSVC Delete Job with id:4 detected
CEF:0|Trellix|MPS|9.0.0.916432|SE|smartvision-base-event|0 rt=Jun 26 2020
12:42:06 UTC externalId=5 cs1Label=name cs1=ATSVC Add Job: cmd.exe /C with
redirect proto=tcp src=xxx.xxx.x.x dst=xxx.xxx.x.x spt=43520 dpt=445
dvchost=abc.mrl.trellix.com dvc=xx.x.x.xxx sev=1 msg=ATSVC Add Job: cmd.exe
/C with redirect with id:5 detected

:
Related articles
  • riskware-callback (Network Security on Central Management)
    Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
  • Acquisition Queued (Endpoint Security)
    Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
  • Malware Hit Found (Endpoint Security)
    Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
  • SmartVision capabilities
    Network Security (NX) > Network Security SmartVision Feature Guide > Getting started > Introducing SmartVision
Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy.
Products
Company
Top Features
Solutions
Existing Users
Connect With Us
Sales and Support
Copyright © Abc Inc. All Rights Reserved