prod/accountsettingsmobile-pa-
values_changed
root['revision']
new_value20250224
old_value20250219
iterable_item_added
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enum'][349]SECURITY_FIND_PHONE
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enum'][362]SECURITY_SIGN_IN_WITH_GOOGLE_APPS
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enum'][363]SECURITY_THIRD_PARTY_APPS
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enum'][364]SECURITY_THIRD_PARTY_MANAGEMENT_LIST
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enum'][365]SECURITY_THIRD_PARTY_MANAGEMENT_OVERVIEW
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enum'][366]SECURITY_TITANIUM_HELP
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enumDescriptions'][349]ResourceId.SECURITY_FIND_PHONE_SCREEN
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enumDescriptions'][362]ResourceId.SECURITY_SIGN_IN_WITH_GOOGLE_APPS_SCREEN
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enumDescriptions'][363]ResourceId.SECURITY_THIRD_PARTY_APPS_SCREEN
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enumDescriptions'][364]ResourceId.SECURITY_THIRD_PARTY_MANAGEMENT_LIST_SCREEN
root['schemas']['GoogleAccountVisualElementMetadata']['properties']['accountSettingsArea']['enumDescriptions'][366]ResourceId.SECURITY_TITANIUM_HELP_SCREEN
prod/actions-
values_changed
root['revision']
new_value20250224
old_value20250221
prod/actions-v2
values_changed
root['revision']
new_value20250224
old_value20250221
prod/actions-v2alpha
values_changed
root['revision']
new_value20250224
old_value20250221
prod/actions-v3
values_changed
root['revision']
new_value20250224
old_value20250221
prod/adsmarketingfrontend-pa-
dictionary_item_added
  • root['schemas']['ChannelTarget']
  • root['schemas']['GetSpendDataRequest']['properties']['channelTargets']
  • root['schemas']['GetSpendDataRequest']['properties']['channels']['deprecated']
values_changed
root['revision']
new_value20250223
old_value20250219
prod/adsmarketingfrontend-pa-v1
dictionary_item_added
  • root['schemas']['ChannelTarget']
  • root['schemas']['GetSpendDataRequest']['properties']['channelTargets']
  • root['schemas']['GetSpendDataRequest']['properties']['channels']['deprecated']
values_changed
root['revision']
new_value20250223
old_value20250219
prod/aerialview-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/aerialview-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/aerialview-v1beta
values_changed
root['revision']
new_value20250223
old_value20250219
prod/agreement-
values_changed
root['revision']
new_value20250219
old_value20250218
prod/agreement-v1alpha1
values_changed
root['revision']
new_value20250219
old_value20250218
prod/agreement-v1beta1
values_changed
root['revision']
new_value20250219
old_value20250218
prod/aida-
dictionary_item_added
  • root['schemas']['TensorflowServingQueryCost']
  • root['schemas']['GoogleXPitchforkAidaV1GenerateCodeRequestGenerationChunk']['deprecated']
  • root['schemas']['GoogleXPitchforkAidaV1ResponseMetadata']['properties']['queryCosts']
dictionary_item_removed
  • root['schemas']['GoogleXPitchforkAidaV1GenerateCodeRequestGenerationChunk']['description']
values_changed
root['revision']
new_value20250224
old_value20250212
root['schemas']['GoogleXPitchforkAidaV1GenerateCodeRequest']['properties']['historicalContexts']['description']
new_valueReplaces generation_history - b/360881751. The generate history, in sequential order from the oldest to the latest, excluding the last user input. This history should include both user requests and server responses. The user chunk should only contain the user query and should not contain the code context. During final prompt creation, if adding history leads to exceeding the context limit, then only newest history up to the context limit, including context_files, will be added.
old_valueWill replace generation_history when available - b/360881751. The generate history, in sequential order from the oldest to the latest, excluding the last user input. This history should include both user requests and server responses. The user chunk should only contain the user query and should not contain the code context. During final prompt creation, if adding history leads to exceeding the context limit, then only newest history up to the context limit, including context_files, will be added.
iterable_item_added
root['schemas']['GoogleXPitchforkAidaV1DoConversationRequest']['properties']['clientFeature']['enum'][7]CHROME_PERFORMANCE_INSIGHTS_AGENT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][592]REV17_CODE_CRITIQUE_LMSYS_IF
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][593]REV17_ESSENSE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][594]REV17_IIW_TASK_WEB_IMAGE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][595]REV17_DOCLAYNET
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][596]REV17_ACTION_MOMENTS
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][597]REV17_POLICY_DATA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][598]REV17_AV_SFT_DATA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][599]REV17_FINANCIAL_QA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][600]REV17_PODIOSET
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][601]REV17_CLOUD_DOC_MM_SFT_OR_RFC
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][602]REV17_PDF_QUESTION_ANSWER_PAIR
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][603]REV17_PIXMP_SFT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][604]REV17_MM_GEN_GHD_COLLECTION120924
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][605]REV17_MM_GEN_GHD_COLLECTION110624
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][606]REV17_IIW_TASK_LICENSED_IMAGE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][607]REV17_IIW_TASK_PUBLIC_OPEN_IMAGE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][608]REV17_LOCKS_TABLE_SFT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][609]REV17_BIAOJIAXING_BOOK_MT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][610]REV17_LOFT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][611]REV17_LOCKS_TIMELINE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][612]REV17_WEBQUEST_TRACE_QA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][613]REV17_MM_GEN_GHD_COLLECTION010925
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][614]REV17_MM_GEN_GHD_COLLECTION010825
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][615]REV17_GOWOL
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][616]REV17_DESKTOP_REFEXP
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enumDescriptions'][592]Rev 17 datasets.
prod/aida-v1
dictionary_item_added
  • root['schemas']['TensorflowServingQueryCost']
  • root['schemas']['GoogleXPitchforkAidaV1GenerateCodeRequestGenerationChunk']['deprecated']
  • root['schemas']['GoogleXPitchforkAidaV1ResponseMetadata']['properties']['queryCosts']
dictionary_item_removed
  • root['schemas']['GoogleXPitchforkAidaV1GenerateCodeRequestGenerationChunk']['description']
values_changed
root['revision']
new_value20250224
old_value20250212
root['schemas']['GoogleXPitchforkAidaV1GenerateCodeRequest']['properties']['historicalContexts']['description']
new_valueReplaces generation_history - b/360881751. The generate history, in sequential order from the oldest to the latest, excluding the last user input. This history should include both user requests and server responses. The user chunk should only contain the user query and should not contain the code context. During final prompt creation, if adding history leads to exceeding the context limit, then only newest history up to the context limit, including context_files, will be added.
old_valueWill replace generation_history when available - b/360881751. The generate history, in sequential order from the oldest to the latest, excluding the last user input. This history should include both user requests and server responses. The user chunk should only contain the user query and should not contain the code context. During final prompt creation, if adding history leads to exceeding the context limit, then only newest history up to the context limit, including context_files, will be added.
iterable_item_added
root['schemas']['GoogleXPitchforkAidaV1DoConversationRequest']['properties']['clientFeature']['enum'][7]CHROME_PERFORMANCE_INSIGHTS_AGENT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][592]REV17_CODE_CRITIQUE_LMSYS_IF
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][593]REV17_ESSENSE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][594]REV17_IIW_TASK_WEB_IMAGE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][595]REV17_DOCLAYNET
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][596]REV17_ACTION_MOMENTS
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][597]REV17_POLICY_DATA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][598]REV17_AV_SFT_DATA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][599]REV17_FINANCIAL_QA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][600]REV17_PODIOSET
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][601]REV17_CLOUD_DOC_MM_SFT_OR_RFC
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][602]REV17_PDF_QUESTION_ANSWER_PAIR
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][603]REV17_PIXMP_SFT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][604]REV17_MM_GEN_GHD_COLLECTION120924
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][605]REV17_MM_GEN_GHD_COLLECTION110624
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][606]REV17_IIW_TASK_LICENSED_IMAGE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][607]REV17_IIW_TASK_PUBLIC_OPEN_IMAGE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][608]REV17_LOCKS_TABLE_SFT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][609]REV17_BIAOJIAXING_BOOK_MT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][610]REV17_LOFT
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][611]REV17_LOCKS_TIMELINE
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][612]REV17_WEBQUEST_TRACE_QA
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][613]REV17_MM_GEN_GHD_COLLECTION010925
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][614]REV17_MM_GEN_GHD_COLLECTION010825
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][615]REV17_GOWOL
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enum'][616]REV17_DESKTOP_REFEXP
root['schemas']['GoogleXPitchforkAidaV1GenerationSampleMetadataAttributionMetadataCitation']['properties']['dataset']['enumDescriptions'][592]Rev 17 datasets.
prod/aiui-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/aiui-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/alkalidatastore-pa-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/alkalidatastore-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/alkalilearn-pa-
values_changed
root['revision']
new_value20250222
old_value20250218
prod/alkalilearn-pa-v1
values_changed
root['revision']
new_value20250222
old_value20250218
prod/alkalilearn-pa-v2
values_changed
root['revision']
new_value20250222
old_value20250218
prod/alkalilogexporter-pa-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/alkalilogexporter-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/alkaliproducer-pa-
values_changed
root['revision']
new_value20250221
old_value20250219
iterable_item_added
root['schemas']['ApiError']['properties']['apiErrorReason']['enum'][142]RENEW_INELIGIBLE_MAJOR_VERSION_UPDATE
root['schemas']['ApiError']['properties']['apiErrorReason']['enumDescriptions'][142]When RenewLegalDocumentAcceptance is invoked, we decide that the user must manually accept the legal document due to a major version update and the client shouldn't call this API to renew the acceptance automatically.
prod/alkaliproducer-pa-v1
values_changed
root['revision']
new_value20250221
old_value20250219
iterable_item_added
root['schemas']['ApiError']['properties']['apiErrorReason']['enum'][142]RENEW_INELIGIBLE_MAJOR_VERSION_UPDATE
root['schemas']['ApiError']['properties']['apiErrorReason']['enumDescriptions'][142]When RenewLegalDocumentAcceptance is invoked, we decide that the user must manually accept the legal document due to a major version update and the client shouldn't call this API to renew the acceptance automatically.
prod/alkalisrfassessment-pa-
dictionary_item_removed
  • root['schemas']['TransitionPath']['properties']['lineType']
values_changed
root['revision']
new_value20250224
old_value20250203
prod/alkalisrfassessment-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250203
prod/alkalisrfassessment-pa-v2
dictionary_item_removed
  • root['schemas']['TransitionPath']['properties']['lineType']
values_changed
root['revision']
new_value20250224
old_value20250203
prod/analyticssuitefrontend-pa-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/analyticssuitefrontend-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/ap-rbmopenmaap-
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/ap-rbmopenmaap-v1
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/appsbackup-pa-
values_changed
root['revision']
new_value20250224
old_value20250219
prod/appsbackup-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250219
prod/appsgenaiserver-pa-
dictionary_item_added
  • root['schemas']['AppsIntelligenceGenAiHelpMeOrganizeUseCaseParams']
  • root['schemas']['AppsProtoMediaTemplateMedia']
  • root['schemas']['AppsIntelligenceGenAiEditorSignals']['properties']['hasActionsIntent']
  • root['schemas']['AppsIntelligenceGenAiUseCaseParams']['properties']['helpMeOrganizeUseCaseParams']
  • root['schemas']['AppsProtoMediaImageContent']['properties']['templateMedia']
  • root['schemas']['AppsProtoMediaImageContent']['properties']['blobRef']['deprecated']
  • root['schemas']['AppsProtoMediaVideoContent']['properties']['templateMedia']
  • root['schemas']['AppsProtoMediaVideoContent']['properties']['blobRef']['deprecated']
  • root['schemas']['AppsUpsellSharedRecommendationTemplatesBanner']['properties']['bannerSize']
values_changed
root['schemas']['AppsIntelligenceGenAiEditorSignals']['description']
new_valueSignals for Editors. Next ID: 13.
old_valueSignals for Editors. Next ID: 12.
root['schemas']['AppsIntelligenceGenAiTextAnnotation']['description']
new_valueNext ID: 3
old_valueNext ID: 2
root['schemas']['AppsIntelligenceGenAiUseCaseParams']['description']
new_valueGenerate Use Case specific parameters Next ID: 12.
old_valueGenerate Use Case specific parameters Next ID: 11.
root['schemas']['AppsProtoMediaImageContent']['description']
new_valueInformation for identifying and displaying an image. Next ID: 16
old_valueInformation for identifying and displaying an image. Next ID: 15
root['schemas']['AppsProtoMediaVideoContent']['description']
new_valueInformation for identifying and playing back a video. Next ID: 18
old_valueInformation for identifying and playing back a video. Next ID: 17
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enumDescriptions'][390]
new_valuego/monetization-sources Important commerce order types. For description of each order type, see //depot/google3/ccc/hosted/commerce/proto/schema.proto?q=symbol:CartProto.LineItem.OrderType
old_valuego/monetization-sources Upgrade from Commerce
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enumDescriptions'][390]
new_valuego/monetization-sources Important commerce order types. For description of each order type, see //depot/google3/ccc/hosted/commerce/proto/schema.proto?q=symbol:CartProto.LineItem.OrderType
old_valuego/monetization-sources Upgrade from Commerce
iterable_item_added
root['schemas']['AppsIntelligenceGenAiGenerateStatusResponse']['properties']['status']['enum'][26]STATUS_ALS_STATE_GENERATING_IMAGES
root['schemas']['AppsIntelligenceGenAiGenerateStatusResponse']['properties']['status']['enumDescriptions'][26]Status when an image generation starts.
root['schemas']['AppsIntelligenceGenAiTextAnnotation']['properties']['annotationType']['enum'][2]SPELLING_GRAMMAR_CORRECTION
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][173]SECURITY_INSIGHTS_PHISHING_MALWARE_CARD_FRIENDLY_BUYFLOW
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][397]CORE_VALUE_BUSINESS_STANDARD_GNP_UPSELL_LAST_MINUTE_CHECK
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][398]CORE_VALUE_BUSINESS_STARTER_GNP_UPSELL_LAST_MINUTE_CHECK
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][399]CORE_VALUE_ADOPTION_MONTHLY_V1_GNP_LAST_MINUTE_CHECK
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enumDescriptions'][397]Core value promos
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][390]COMMERCE_BUYFLOW_BUY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][391]COMMERCE_BUYFLOW_DOWNGRADE
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][393]COMMERCE_BUYFLOW_CONTRACT_OFFER_SWITCH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][394]COMMERCE_BUYFLOW_INCREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][395]COMMERCE_BUYFLOW_CURRENCY_SWITCH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][396]COMMERCE_BUYFLOW_DECREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][397]COMMERCE_BUYFLOW_CONVERT_TO_FREE
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][398]COMMERCE_BUYFLOW_SWITCH_TO_INTERNAL_GOOGLER_OFFER
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][399]COMMERCE_BUYFLOW_CHANGE_PRICE
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][400]COMMERCE_BUYFLOW_SCHEDULE_SWITCH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][401]COMMERCE_BUYFLOW_UNCATEGORIZED
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][390]COMMERCE_BUYFLOW_BUY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][391]COMMERCE_BUYFLOW_DOWNGRADE
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][393]COMMERCE_BUYFLOW_CONTRACT_OFFER_SWITCH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][394]COMMERCE_BUYFLOW_INCREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][395]COMMERCE_BUYFLOW_CURRENCY_SWITCH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][396]COMMERCE_BUYFLOW_DECREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][397]COMMERCE_BUYFLOW_CONVERT_TO_FREE
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][398]COMMERCE_BUYFLOW_SWITCH_TO_INTERNAL_GOOGLER_OFFER
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][399]COMMERCE_BUYFLOW_CHANGE_PRICE
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][400]COMMERCE_BUYFLOW_SCHEDULE_SWITCH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][401]COMMERCE_BUYFLOW_UNCATEGORIZED
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
prod/appsgenaiserver-pa-v1
dictionary_item_added
  • root['schemas']['AppsIntelligenceGenAiHelpMeOrganizeUseCaseParams']
  • root['schemas']['AppsProtoMediaTemplateMedia']
  • root['schemas']['AppsIntelligenceGenAiEditorSignals']['properties']['hasActionsIntent']
  • root['schemas']['AppsIntelligenceGenAiUseCaseParams']['properties']['helpMeOrganizeUseCaseParams']
  • root['schemas']['AppsProtoMediaImageContent']['properties']['templateMedia']
  • root['schemas']['AppsProtoMediaImageContent']['properties']['blobRef']['deprecated']
  • root['schemas']['AppsProtoMediaVideoContent']['properties']['templateMedia']
  • root['schemas']['AppsProtoMediaVideoContent']['properties']['blobRef']['deprecated']
  • root['schemas']['AppsUpsellSharedRecommendationTemplatesBanner']['properties']['bannerSize']
values_changed
root['schemas']['AppsIntelligenceGenAiEditorSignals']['description']
new_valueSignals for Editors. Next ID: 13.
old_valueSignals for Editors. Next ID: 12.
root['schemas']['AppsIntelligenceGenAiTextAnnotation']['description']
new_valueNext ID: 3
old_valueNext ID: 2
root['schemas']['AppsIntelligenceGenAiUseCaseParams']['description']
new_valueGenerate Use Case specific parameters Next ID: 12.
old_valueGenerate Use Case specific parameters Next ID: 11.
root['schemas']['AppsProtoMediaImageContent']['description']
new_valueInformation for identifying and displaying an image. Next ID: 16
old_valueInformation for identifying and displaying an image. Next ID: 15
root['schemas']['AppsProtoMediaVideoContent']['description']
new_valueInformation for identifying and playing back a video. Next ID: 18
old_valueInformation for identifying and playing back a video. Next ID: 17
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enumDescriptions'][390]
new_valuego/monetization-sources Important commerce order types. For description of each order type, see //depot/google3/ccc/hosted/commerce/proto/schema.proto?q=symbol:CartProto.LineItem.OrderType
old_valuego/monetization-sources Upgrade from Commerce
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enumDescriptions'][390]
new_valuego/monetization-sources Important commerce order types. For description of each order type, see //depot/google3/ccc/hosted/commerce/proto/schema.proto?q=symbol:CartProto.LineItem.OrderType
old_valuego/monetization-sources Upgrade from Commerce
iterable_item_added
root['schemas']['AppsIntelligenceGenAiGenerateStatusResponse']['properties']['status']['enum'][26]STATUS_ALS_STATE_GENERATING_IMAGES
root['schemas']['AppsIntelligenceGenAiGenerateStatusResponse']['properties']['status']['enumDescriptions'][26]Status when an image generation starts.
root['schemas']['AppsIntelligenceGenAiTextAnnotation']['properties']['annotationType']['enum'][2]SPELLING_GRAMMAR_CORRECTION
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['AppsUpsellSharedRecommendationRecommendationSurface']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][173]SECURITY_INSIGHTS_PHISHING_MALWARE_CARD_FRIENDLY_BUYFLOW
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][397]CORE_VALUE_BUSINESS_STANDARD_GNP_UPSELL_LAST_MINUTE_CHECK
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][398]CORE_VALUE_BUSINESS_STARTER_GNP_UPSELL_LAST_MINUTE_CHECK
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enum'][399]CORE_VALUE_ADOPTION_MONTHLY_V1_GNP_LAST_MINUTE_CHECK
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoTemplateId']['enumDescriptions'][397]Core value promos
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][390]COMMERCE_BUYFLOW_BUY
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][391]COMMERCE_BUYFLOW_DOWNGRADE
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][393]COMMERCE_BUYFLOW_CONTRACT_OFFER_SWITCH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][394]COMMERCE_BUYFLOW_INCREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][395]COMMERCE_BUYFLOW_CURRENCY_SWITCH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][396]COMMERCE_BUYFLOW_DECREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][397]COMMERCE_BUYFLOW_CONVERT_TO_FREE
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][398]COMMERCE_BUYFLOW_SWITCH_TO_INTERNAL_GOOGLER_OFFER
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][399]COMMERCE_BUYFLOW_CHANGE_PRICE
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][400]COMMERCE_BUYFLOW_SCHEDULE_SWITCH
root['schemas']['CccHostedUpsellProtoEventsDerivedRecommendationInteractionDetails']['properties']['promoType']['enum'][401]COMMERCE_BUYFLOW_UNCATEGORIZED
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][390]COMMERCE_BUYFLOW_BUY
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][391]COMMERCE_BUYFLOW_DOWNGRADE
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][393]COMMERCE_BUYFLOW_CONTRACT_OFFER_SWITCH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][394]COMMERCE_BUYFLOW_INCREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][395]COMMERCE_BUYFLOW_CURRENCY_SWITCH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][396]COMMERCE_BUYFLOW_DECREASE_COMMITMENT
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][397]COMMERCE_BUYFLOW_CONVERT_TO_FREE
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][398]COMMERCE_BUYFLOW_SWITCH_TO_INTERNAL_GOOGLER_OFFER
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][399]COMMERCE_BUYFLOW_CHANGE_PRICE
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][400]COMMERCE_BUYFLOW_SCHEDULE_SWITCH
root['schemas']['CccHostedUpsellProtoSourceAttributionSource']['properties']['promoType']['enum'][401]COMMERCE_BUYFLOW_UNCATEGORIZED
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][6]ADMIN_CONSOLE_ONBOARDING_ACCORDION
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][38]COMMERCE_BUYFLOW_FOR_ADDONS
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][39]COMMERCE_BUYFLOW_IN_APP
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][40]COMMERCE_BUYFLOW_V2
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][56]DG_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][57]DG_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][58]DG_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][59]DG_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][60]DG_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][61]DG_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][62]DG_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][63]DG_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][64]DG_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][68]DG_GWS_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][69]DG_GWS_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][70]DG_GWS_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][71]DG_GWS_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][72]DG_GWS_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][73]DG_GWS_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][74]DG_GWS_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][75]DG_GWS_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][76]DG_GWS_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][156]GDN_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][157]GDN_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][158]GDN_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][159]GDN_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][160]GDN_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][161]GDN_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][162]GDN_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][163]GDN_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][164]GDN_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][168]GDN_GWS_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][169]GDN_GWS_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][170]GDN_GWS_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][171]GDN_GWS_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][172]GDN_GWS_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][173]GDN_GWS_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][174]GDN_GWS_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][175]GDN_GWS_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][176]GDN_GWS_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][418]PMAX_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][419]PMAX_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][420]PMAX_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][421]PMAX_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][422]PMAX_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][423]PMAX_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][424]PMAX_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][425]PMAX_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][426]PMAX_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][428]PMAX_GWS_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][429]PMAX_GWS_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][430]PMAX_GWS_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][431]PMAX_GWS_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][432]PMAX_GWS_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][433]PMAX_GWS_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][434]PMAX_GWS_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][435]PMAX_GWS_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][436]PMAX_GWS_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][482]SEM_GEMINI_G1_SL_GEOAR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][483]SEM_GEMINI_G1_SL_GEOCO
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][484]SEM_GEMINI_G1_SL_GEOID
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][485]SEM_GEMINI_G1_SL_GEOMY
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][486]SEM_GEMINI_G1_SL_GEOPH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][487]SEM_GEMINI_G1_SL_GEOSG
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][488]SEM_GEMINI_G1_SL_GEOTH
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][489]SEM_GEMINI_G1_SL_GEOTR
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enum'][490]SEM_GEMINI_G1_SL_GEOVN
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][6]Admin console onboarding accordion - go/ac-accordion
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][38]Workspace Commerce Addon Buyflow (aka Seamless Buyflow).
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][39]Workspace Commerce Buyflow In-app buyflow
root['schemas']['GoogleInternalSubscriptionsFirstpartyV1CallToActionInAppPurchase']['properties']['onramp']['enumDescriptions'][40]Workspace Commerce Buyflow V2 (aka Friendly Buyflow).
prod/arcore-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/arcore-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/arcore-v1beta2
values_changed
root['revision']
new_value20250224
old_value20250220
prod/arcorecloudanchor-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/arcorecloudanchor-v1beta2
values_changed
root['revision']
new_value20250224
old_value20250220
prod/asia-east1-containerfilesystem-v1
values_changed
root['revision']
new_value20250221
old_value20250214
prod/asia-south1-chronicle-
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/asia-south1-chronicle-v1alpha
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feedPacks']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feeds']['methods']['scheduleTransfer']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacyBatchGetCollections']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['threatArtifactId']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['export']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['import']
  • root['schemas']['AzureAuthV2']
  • root['schemas']['AzureBlobStoreV2Settings']
  • root['schemas']['DynamicParsingConfig']
  • root['schemas']['EnrichmentInfo']
  • root['schemas']['EntityChangedCountTimelineBucket']
  • root['schemas']['EntityChangedInfo']
  • root['schemas']['ExportNativeDashboardsRequest']
  • root['schemas']['ExportNativeDashboardsResponse']
  • root['schemas']['FederationGroupSelection']
  • root['schemas']['FederationMetadata']
  • root['schemas']['FeedPack']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnMetadata']
  • root['schemas']['ImportExportStatus']
  • root['schemas']['ImportNativeDashboardsInlineSource']
  • root['schemas']['ImportNativeDashboardsRequest']
  • root['schemas']['ImportNativeDashboardsResponse']
  • root['schemas']['InlineDestination']
  • root['schemas']['InstanceSelection']
  • root['schemas']['LegacyBatchGetCollectionsResponse']
  • root['schemas']['ListFeedPacksResponse']
  • root['schemas']['LogField']
  • root['schemas']['MetricTrendConfig']
  • root['schemas']['MssoAuthentication']
  • root['schemas']['NativeDashboardWithChartsAndQueries']
  • root['schemas']['PackLogType']
  • root['schemas']['ScheduleFeedTransferErrorDetails']
  • root['schemas']['ScheduleFeedTransferRequest']
  • root['schemas']['ScheduleFeedTransferResponse']
  • root['schemas']['SearchDataTableColumnInfo']
  • root['schemas']['SearchDataTableInfo']
  • root['schemas']['SearchDataTableRow']
  • root['schemas']['SearchDataTableRowInfo']
  • root['schemas']['TrellixHxAlertsSettings']
  • root['schemas']['TrellixHxHostsSettings']
  • root['schemas']['TrellixIAMAuthentication']
  • root['schemas']['TrellixStarXAuthentication']
  • root['schemas']['DataTable']['properties']['updateSource']
  • root['schemas']['Dhcp']['properties']['clientIdentifierString']
  • root['schemas']['EventCountTimelineBucket']['properties']['baselineTimedEntityCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['entityChangedCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['filteredTimedEntityCount']
  • root['schemas']['FeedDetails']['properties']['azureBlobStoreV2Settings']
  • root['schemas']['FeedDetails']['properties']['trellixHxAlertsSettings']
  • root['schemas']['FeedDetails']['properties']['trellixHxHostsSettings']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['compressArrayFields']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['useArrayBracketNotation']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnData']['properties']['columnMetadata']
  • root['schemas']['IDM']['properties']['assetEnrichmentInfo']
  • root['schemas']['IDM']['properties']['geoipEnrichmentInfo']
  • root['schemas']['IDM']['properties']['processEnrichmentInfo']
  • root['schemas']['IDM']['properties']['userEnrichmentInfo']
  • root['schemas']['IDM']['properties']['vtFilemetadataEnrichmentInfo']
  • root['schemas']['IocAssociation']['properties']['associatedActors']['deprecated']
  • root['schemas']['IocAssociation']['properties']['countryCode']['deprecated']
  • root['schemas']['LegacyFetchUdmSearchViewRequest']['properties']['federationMetadata']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageToken']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageToken']
  • root['schemas']['LogType']['properties']['customLogTypeLabel']
  • root['schemas']['LogType']['properties']['isCustom']
  • root['schemas']['LogType']['properties']['productSource']
  • root['schemas']['ParserExtension']['properties']['dynamicParsing']
  • root['schemas']['SecurityResult']['properties']['detectionDepth']
  • root['schemas']['Series']['properties']['metricTrendConfig']
  • root['schemas']['UdmEventInfo']['properties']['connectedComponentLabel']
  • root['schemas']['UdmEventInfo']['properties']['datatableRowInfo']
  • root['schemas']['UdmEventInfo']['properties']['tenantId']
  • root['schemas']['UdmEventList']['properties']['datatableInfo']
dictionary_item_removed
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardCharts']['methods']['list']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardQueries']['methods']['list']
  • root['schemas']['ListDashboardChartsResponse']
  • root['schemas']['ListDashboardQueriesResponse']
  • root['schemas']['StringToInt64MapEntry']['description']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['parameters']['filter']['description']
new_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.product_object_id - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
old_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['fetchPrioritizedIocsOnly']['description']
new_valueOptional. Indicates if only prioritized iocs should be fetched. If threat artifact id is set, this must be not be set.
old_valueOptional. Indicates if only prioritized iocs should be fetched.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchRulesAlerts']['parameters']['maxNumAlertsToReturn']['description']
new_valueOptional. The maximum number of alerts to return. The default and maximum value is 10,000; values above that will be coerced to 10,000. When the number of available alerts is greater than this value, the response will contain a too_many_alerts field set to true.
old_valueOptional. Maximum number of alerts to return.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['patch']['parameters']['updateMask']['description']
new_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned
old_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_native_dashboard)
root['revision']
new_value20250224
old_value20250102
root['schemas']['Collection']['description']
new_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20
old_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20 LINT.IfChange
root['schemas']['Dhcp']['properties']['clientIdentifier']['description']
new_valueClient identifier. See RFC2132, section 9.14. Note: Make sure to update the client_identifier_string field as well if you update this field.
old_valueClient identifier. See RFC2132, section 9.14.
root['schemas']['EditChartRequest']['properties']['editMask']['description']
new_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input
old_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_chart)
root['schemas']['EntityRisk']['description']
new_valueStores information related to the risk score of an entity. Next ID: 14
old_valueStores information related to the risk score of an entity.
root['schemas']['ExifInfo']['description']
new_valueExif information.
old_value@hide_from_doc
root['schemas']['FileMetadata']['description']
new_valueMetadata about a file. Place metadata about different file types here, for example data from the Microsoft Windows VersionInfo block or digital signer details. Use a different sub-message per file type.
old_value@hide_from_doc
root['schemas']['FileMetadataImports']['description']
new_valueFile metadata imports.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['description']
new_valueFile metadata for PE resource.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['properties']['filetypeMagic']['description']
new_valueType of resource content, as identified by the magic Python module.
old_valueType of resource content, as identified by the magic Python module. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/magic.py END GOOGLE-INTERNAL
root['schemas']['FileMetadataPeResourceInfo']['properties']['languageCode']['description']
new_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
old_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/toolpefile.py?l=419&rcl=df1fcff7c5e82a39875359608b47669d5aff82c7 END GOOGLE-INTERNAL Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
root['schemas']['FileMetadataSection']['description']
new_valueFile metadata section.
old_value@hide_from_doc
root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStats']['description']
new_valueLINT.IfChange(stats_data) Stats results when the query is for statistics NEXT TAG = 6;
old_valueLINT.IfChange (stats_data) Stats results when the query is for statistics NEXT TAG = 6;
root['schemas']['IocAssociation']['properties']['countryCode']['description']
new_valueOutput only. Deprecated. Use region_code instead. Country from which the threat actor originated.
old_valueOutput only. Country from which the threat actor/ malware is originated.
root['schemas']['IocAssociation']['properties']['regionCode']['description']
new_valueOutput only. Name of the country the threat is originating from.
old_valueOutput only. Name of the country, the threat is originating from.
root['schemas']['Label']['properties']['source']['description']
new_valueWhere the label is derived from.
old_value@hide_from_doc
root['schemas']['LegacySearchRulesAlertsResponse']['properties']['tooManyAlerts']['description']
new_valueIndicates that more data was available but not sent due to more hits than max_num_alerts_to_return.
old_valueIndicates that more data was available but not sent due to more hits than max_matches_to_return.
root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['continuationTime']['description']
new_valueOptional. DEPRECATED: Prefer using `page_token` or `page_start_time` instead. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. All detection alerts discovered after `continuation_time` will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
old_valueOptional. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. When initiating the very first connection, clients should leave this unspecified. If unspecified, this defaults to the time of the connection. All detection alerts discovered after continuation_time will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['continuationTime']['description']
new_valueDEPRECATED: Prefer using `page_token` instead by specifying either `page_start_time` or `page_token` in the request. A continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
old_valueA continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
root['schemas']['LogType']['properties']['displayName']['description']
new_valueRequired. The display name of this log type. This is the tag used in YARA-l rules and search queries.
old_valueRequired. The display name of this log type.
root['schemas']['Metadata']['description']
new_valueGeneral information associated with a UDM event.
old_valueNEXT TAG: 21 General information associated with a UDM event.
root['schemas']['StatusProto']['properties']['canonicalCode']['description']
new_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;
old_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be.
root['schemas']['StatusProto']['properties']['code']['description']
new_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;
old_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto
root['schemas']['StatusProto']['properties']['space']['description']
new_valueThe following are usually only present when code != 0 Space to which this status belongs copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string space = 2;
old_valueThe following are usually only present when code != 0 Space to which this status belongs
root['schemas']['Visualization']['description']
new_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 16
old_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 15
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][17]
new_valueSpam email, message, etc.
old_value@exclude Spam email, message, etc.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
iterable_item_added
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][8]RULES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][8]RULES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['EdrEvent']['properties']['dataSource']['enum'][23]TRELLIX
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['FeedDetails']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedDetails']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][91]FRONT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][94]VUHL_SO_IDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][222]TEHTRIS_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][244]CYNERIO_NDR_H
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][283]WIREGUARD_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][604]FORTINET_ADC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][630]CISCO_NETFLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][642]BELDEN_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][667]HP_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][808]RAVEN_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][817]TERADATA_ACCESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][818]TERADATA_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][950]SOLIDSERVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1023]PINGONE_AIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1024]PINGONE_PROTECT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1135]CHROMEOS_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1136]VECTRA_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1137]METABASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1402]CLICKHOUSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1425]JOBLOGIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1464]ZOHO_ASSIST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1825]IBM_SENSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1844]ACN_SIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1845]ARCON_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1849]ARCDA_COREWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1851]IBM_SVA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1857]FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1864]BLUE_VOYANT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1901]FA_SOLUTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1902]FILES_DOT_COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1910]GHANGOR_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1938]HOXHUNT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1939]ISL_LIGHT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1951]INTEL_EMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1957]INDUSFACE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1999]PINGCAP_TIDB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2004]PRIVACY_I
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2010]MY_RESOLVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2011]REVIVESEC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2016]BBVA_CONSORES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2021]SAP_LEASING
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2022]BBVA_SIRE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2026]BBVA_TEXSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2028]BBVA_SIIBE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2029]BBVA_MBOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2030]BBVA_SINBA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2031]BBVA_MSDP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2032]BBVA_PLUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2033]BBVA_CAIRO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2034]BBVA_SICOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2035]BBVA_FUMER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2036]BBVA_MCOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2037]BBVA_MCWN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2038]BBVA_ZEIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2039]BBVA_CYGE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2040]BBVA_SISP_NET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2042]BBVA_SAIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2043]BBVA_SPWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2045]BBVA_GUIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2046]BBVA_HECO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2047]GL_TRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2048]ORACLE_AVDF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2049]REBLAZE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2051]TT002_EXASOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2056]AWS_EKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2058]F5_DCS_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2062]MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2063]AWS_DASHA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2064]ONETRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2066]SANGFOR_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2072]SNF_SDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2074]SECURDEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2078]SOFTETHER_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2092]UNICO_IDTRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2111]WING_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2114]ZERO_NETWORKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2142]FORTRA_VM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2144]RAPID_IDENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2146]ARCDA_VISTA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2147]PRMTH_WSO2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2153]SPACELIFT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2154]PAVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2162]H_ISAC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2164]ML009_MENLO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2457]BBVA_CREDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2522]INFORMATICA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2790]PRMTH_PWSS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2891]SHOPIFY_APV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2940]VCTR727_AURUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2973]WMT_GENAI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2995]WSGC_ECOM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][3007]WMT_VDI
root['schemas']['RawLog']['properties']['type']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['RawLog']['properties']['type']['enum'][91]FRONT
root['schemas']['RawLog']['properties']['type']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][94]VUHL_SO_IDH
root['schemas']['RawLog']['properties']['type']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['RawLog']['properties']['type']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['RawLog']['properties']['type']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['RawLog']['properties']['type']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['RawLog']['properties']['type']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['RawLog']['properties']['type']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['RawLog']['properties']['type']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['RawLog']['properties']['type']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['RawLog']['properties']['type']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['RawLog']['properties']['type']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['RawLog']['properties']['type']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['RawLog']['properties']['type']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][222]TEHTRIS_EDR
root['schemas']['RawLog']['properties']['type']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['RawLog']['properties']['type']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['RawLog']['properties']['type']['enum'][244]CYNERIO_NDR_H
root['schemas']['RawLog']['properties']['type']['enum'][283]WIREGUARD_VPN
root['schemas']['RawLog']['properties']['type']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][604]FORTINET_ADC
root['schemas']['RawLog']['properties']['type']['enum'][623]HUAWEI_WIRELESS
root['schemas']['RawLog']['properties']['type']['enum'][628]AZURE_VNET_FLOW
root['schemas']['RawLog']['properties']['type']['enum'][630]CISCO_NETFLOW
root['schemas']['RawLog']['properties']['type']['enum'][642]BELDEN_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][667]HP_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['RawLog']['properties']['type']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['RawLog']['properties']['type']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['RawLog']['properties']['type']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['RawLog']['properties']['type']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][808]RAVEN_DB
root['schemas']['RawLog']['properties']['type']['enum'][817]TERADATA_ACCESS
root['schemas']['RawLog']['properties']['type']['enum'][818]TERADATA_DB
root['schemas']['RawLog']['properties']['type']['enum'][830]AZURE_RISKY_USERS
root['schemas']['RawLog']['properties']['type']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['RawLog']['properties']['type']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['RawLog']['properties']['type']['enum'][950]SOLIDSERVER
root['schemas']['RawLog']['properties']['type']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1023]PINGONE_AIC
root['schemas']['RawLog']['properties']['type']['enum'][1024]PINGONE_PROTECT
root['schemas']['RawLog']['properties']['type']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['RawLog']['properties']['type']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][1135]CHROMEOS_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1136]VECTRA_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1137]METABASE
root['schemas']['RawLog']['properties']['type']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['RawLog']['properties']['type']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['RawLog']['properties']['type']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['RawLog']['properties']['type']['enum'][1402]CLICKHOUSE
root['schemas']['RawLog']['properties']['type']['enum'][1425]JOBLOGIC
root['schemas']['RawLog']['properties']['type']['enum'][1464]ZOHO_ASSIST
root['schemas']['RawLog']['properties']['type']['enum'][1486]OPENTEXT_CORDY
root['schemas']['RawLog']['properties']['type']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['RawLog']['properties']['type']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['RawLog']['properties']['type']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['RawLog']['properties']['type']['enum'][1825]IBM_SENSE
root['schemas']['RawLog']['properties']['type']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1844]ACN_SIA
root['schemas']['RawLog']['properties']['type']['enum'][1845]ARCON_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1848]APPSMITH_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1849]ARCDA_COREWEB
root['schemas']['RawLog']['properties']['type']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][1851]IBM_SVA
root['schemas']['RawLog']['properties']['type']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['RawLog']['properties']['type']['enum'][1857]FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1864]BLUE_VOYANT
root['schemas']['RawLog']['properties']['type']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['RawLog']['properties']['type']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['RawLog']['properties']['type']['enum'][1882]CSG_CITRIX_RX
root['schemas']['RawLog']['properties']['type']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['RawLog']['properties']['type']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['RawLog']['properties']['type']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['RawLog']['properties']['type']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1901]FA_SOLUTIONS
root['schemas']['RawLog']['properties']['type']['enum'][1902]FILES_DOT_COM
root['schemas']['RawLog']['properties']['type']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['RawLog']['properties']['type']['enum'][1910]GHANGOR_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['RawLog']['properties']['type']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['RawLog']['properties']['type']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['RawLog']['properties']['type']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['RawLog']['properties']['type']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['RawLog']['properties']['type']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['RawLog']['properties']['type']['enum'][1937]HILLSTONE_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1938]HOXHUNT
root['schemas']['RawLog']['properties']['type']['enum'][1939]ISL_LIGHT
root['schemas']['RawLog']['properties']['type']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1948]RQIDJIE5_CAS
root['schemas']['RawLog']['properties']['type']['enum'][1951]INTEL_EMA
root['schemas']['RawLog']['properties']['type']['enum'][1957]INDUSFACE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['RawLog']['properties']['type']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['RawLog']['properties']['type']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['RawLog']['properties']['type']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['RawLog']['properties']['type']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['RawLog']['properties']['type']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['RawLog']['properties']['type']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['RawLog']['properties']['type']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['RawLog']['properties']['type']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['RawLog']['properties']['type']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['RawLog']['properties']['type']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['RawLog']['properties']['type']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1999]PINGCAP_TIDB
root['schemas']['RawLog']['properties']['type']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['RawLog']['properties']['type']['enum'][2004]PRIVACY_I
root['schemas']['RawLog']['properties']['type']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['RawLog']['properties']['type']['enum'][2010]MY_RESOLVER
root['schemas']['RawLog']['properties']['type']['enum'][2011]REVIVESEC
root['schemas']['RawLog']['properties']['type']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['RawLog']['properties']['type']['enum'][2015]BBVA_BANKTRADE
root['schemas']['RawLog']['properties']['type']['enum'][2016]BBVA_CONSORES
root['schemas']['RawLog']['properties']['type']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['RawLog']['properties']['type']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['RawLog']['properties']['type']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['RawLog']['properties']['type']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['RawLog']['properties']['type']['enum'][2021]SAP_LEASING
root['schemas']['RawLog']['properties']['type']['enum'][2022]BBVA_SIRE
root['schemas']['RawLog']['properties']['type']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['RawLog']['properties']['type']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['RawLog']['properties']['type']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['RawLog']['properties']['type']['enum'][2026]BBVA_TEXSA
root['schemas']['RawLog']['properties']['type']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['RawLog']['properties']['type']['enum'][2028]BBVA_SIIBE
root['schemas']['RawLog']['properties']['type']['enum'][2029]BBVA_MBOT
root['schemas']['RawLog']['properties']['type']['enum'][2030]BBVA_SINBA
root['schemas']['RawLog']['properties']['type']['enum'][2031]BBVA_MSDP
root['schemas']['RawLog']['properties']['type']['enum'][2032]BBVA_PLUS
root['schemas']['RawLog']['properties']['type']['enum'][2033]BBVA_CAIRO
root['schemas']['RawLog']['properties']['type']['enum'][2034]BBVA_SICOR
root['schemas']['RawLog']['properties']['type']['enum'][2035]BBVA_FUMER
root['schemas']['RawLog']['properties']['type']['enum'][2036]BBVA_MCOR
root['schemas']['RawLog']['properties']['type']['enum'][2037]BBVA_MCWN
root['schemas']['RawLog']['properties']['type']['enum'][2038]BBVA_ZEIT
root['schemas']['RawLog']['properties']['type']['enum'][2039]BBVA_CYGE
root['schemas']['RawLog']['properties']['type']['enum'][2040]BBVA_SISP_NET
root['schemas']['RawLog']['properties']['type']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['RawLog']['properties']['type']['enum'][2042]BBVA_SAIT
root['schemas']['RawLog']['properties']['type']['enum'][2043]BBVA_SPWEB
root['schemas']['RawLog']['properties']['type']['enum'][2044]BBVA_VALIDADOR
root['schemas']['RawLog']['properties']['type']['enum'][2045]BBVA_GUIA
root['schemas']['RawLog']['properties']['type']['enum'][2046]BBVA_HECO
root['schemas']['RawLog']['properties']['type']['enum'][2047]GL_TRADE
root['schemas']['RawLog']['properties']['type']['enum'][2048]ORACLE_AVDF
root['schemas']['RawLog']['properties']['type']['enum'][2049]REBLAZE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['RawLog']['properties']['type']['enum'][2051]TT002_EXASOL
root['schemas']['RawLog']['properties']['type']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['RawLog']['properties']['type']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['RawLog']['properties']['type']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['RawLog']['properties']['type']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['RawLog']['properties']['type']['enum'][2056]AWS_EKS
root['schemas']['RawLog']['properties']['type']['enum'][2057]THALES_PS10K_HSM
root['schemas']['RawLog']['properties']['type']['enum'][2058]F5_DCS_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['RawLog']['properties']['type']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['RawLog']['properties']['type']['enum'][2061]FORTINET_FORTISASE
root['schemas']['RawLog']['properties']['type']['enum'][2062]MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][2063]AWS_DASHA
root['schemas']['RawLog']['properties']['type']['enum'][2064]ONETRUST
root['schemas']['RawLog']['properties']['type']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['RawLog']['properties']['type']['enum'][2066]SANGFOR_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][2072]SNF_SDH
root['schemas']['RawLog']['properties']['type']['enum'][2074]SECURDEN
root['schemas']['RawLog']['properties']['type']['enum'][2078]SOFTETHER_VPN
root['schemas']['RawLog']['properties']['type']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2091]UNICO_IDCLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2092]UNICO_IDTRUST
root['schemas']['RawLog']['properties']['type']['enum'][2111]WING_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2114]ZERO_NETWORKS
root['schemas']['RawLog']['properties']['type']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['RawLog']['properties']['type']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['RawLog']['properties']['type']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['RawLog']['properties']['type']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['RawLog']['properties']['type']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['RawLog']['properties']['type']['enum'][2142]FORTRA_VM
root['schemas']['RawLog']['properties']['type']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['RawLog']['properties']['type']['enum'][2144]RAPID_IDENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['RawLog']['properties']['type']['enum'][2146]ARCDA_VISTA
root['schemas']['RawLog']['properties']['type']['enum'][2147]PRMTH_WSO2
root['schemas']['RawLog']['properties']['type']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['RawLog']['properties']['type']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['RawLog']['properties']['type']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['RawLog']['properties']['type']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['RawLog']['properties']['type']['enum'][2153]SPACELIFT
root['schemas']['RawLog']['properties']['type']['enum'][2154]PAVE
root['schemas']['RawLog']['properties']['type']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['RawLog']['properties']['type']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['RawLog']['properties']['type']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['RawLog']['properties']['type']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['RawLog']['properties']['type']['enum'][2162]H_ISAC
root['schemas']['RawLog']['properties']['type']['enum'][2163]IIJ_LANSCOPE
root['schemas']['RawLog']['properties']['type']['enum'][2164]ML009_MENLO
root['schemas']['RawLog']['properties']['type']['enum'][2455]BBVA_CUSTODIA
root['schemas']['RawLog']['properties']['type']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['RawLog']['properties']['type']['enum'][2457]BBVA_CREDIT
root['schemas']['RawLog']['properties']['type']['enum'][2520]BBVA_WALLSTREET
root['schemas']['RawLog']['properties']['type']['enum'][2522]INFORMATICA
root['schemas']['RawLog']['properties']['type']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['RawLog']['properties']['type']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['RawLog']['properties']['type']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['RawLog']['properties']['type']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['RawLog']['properties']['type']['enum'][2790]PRMTH_PWSS
root['schemas']['RawLog']['properties']['type']['enum'][2794]RENAULT_IRN_74011
root['schemas']['RawLog']['properties']['type']['enum'][2810]RENAULT_IRN_74898
root['schemas']['RawLog']['properties']['type']['enum'][2811]RENAULT_IRN_73882
root['schemas']['RawLog']['properties']['type']['enum'][2812]RENAULT_IRN_72284
root['schemas']['RawLog']['properties']['type']['enum'][2813]RENAULT_IRN_74143
root['schemas']['RawLog']['properties']['type']['enum'][2814]RENAULT_IRN_70132
root['schemas']['RawLog']['properties']['type']['enum'][2815]RENAULT_IRN_50567
root['schemas']['RawLog']['properties']['type']['enum'][2816]RENAULT_IRN_8185
root['schemas']['RawLog']['properties']['type']['enum'][2817]RENAULT_IRN_77153
root['schemas']['RawLog']['properties']['type']['enum'][2818]RENAULT_IRN_67551
root['schemas']['RawLog']['properties']['type']['enum'][2819]RENAULT_IRN_73940
root['schemas']['RawLog']['properties']['type']['enum'][2820]RENAULT_IRN_75039
root['schemas']['RawLog']['properties']['type']['enum'][2821]RENAULT_IRN_69293
root['schemas']['RawLog']['properties']['type']['enum'][2822]RENAULT_IRN_74601
root['schemas']['RawLog']['properties']['type']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['RawLog']['properties']['type']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['RawLog']['properties']['type']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['RawLog']['properties']['type']['enum'][2891]SHOPIFY_APV
root['schemas']['RawLog']['properties']['type']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['RawLog']['properties']['type']['enum'][2940]VCTR727_AURUS
root['schemas']['RawLog']['properties']['type']['enum'][2973]WMT_GENAI
root['schemas']['RawLog']['properties']['type']['enum'][2995]WSGC_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][3007]WMT_VDI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][91]FRONT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][94]VUHL_SO_IDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][222]TEHTRIS_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][244]CYNERIO_NDR_H
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][283]WIREGUARD_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][604]FORTINET_ADC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][630]CISCO_NETFLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][642]BELDEN_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][667]HP_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][808]RAVEN_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][817]TERADATA_ACCESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][818]TERADATA_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][950]SOLIDSERVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1023]PINGONE_AIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1024]PINGONE_PROTECT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1135]CHROMEOS_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1136]VECTRA_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1137]METABASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1402]CLICKHOUSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1425]JOBLOGIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1464]ZOHO_ASSIST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1825]IBM_SENSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1844]ACN_SIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1845]ARCON_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1849]ARCDA_COREWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1851]IBM_SVA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1857]FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1864]BLUE_VOYANT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1901]FA_SOLUTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1902]FILES_DOT_COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1910]GHANGOR_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1938]HOXHUNT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1939]ISL_LIGHT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1951]INTEL_EMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1957]INDUSFACE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1999]PINGCAP_TIDB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2004]PRIVACY_I
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2010]MY_RESOLVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2011]REVIVESEC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2016]BBVA_CONSORES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2021]SAP_LEASING
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2022]BBVA_SIRE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2026]BBVA_TEXSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2028]BBVA_SIIBE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2029]BBVA_MBOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2030]BBVA_SINBA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2031]BBVA_MSDP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2032]BBVA_PLUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2033]BBVA_CAIRO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2034]BBVA_SICOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2035]BBVA_FUMER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2036]BBVA_MCOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2037]BBVA_MCWN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2038]BBVA_ZEIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2039]BBVA_CYGE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2040]BBVA_SISP_NET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2042]BBVA_SAIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2043]BBVA_SPWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2045]BBVA_GUIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2046]BBVA_HECO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2047]GL_TRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2048]ORACLE_AVDF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2049]REBLAZE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2051]TT002_EXASOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2056]AWS_EKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2058]F5_DCS_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2062]MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2063]AWS_DASHA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2064]ONETRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2066]SANGFOR_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2072]SNF_SDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2074]SECURDEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2078]SOFTETHER_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2092]UNICO_IDTRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2111]WING_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2114]ZERO_NETWORKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2142]FORTRA_VM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2144]RAPID_IDENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2146]ARCDA_VISTA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2147]PRMTH_WSO2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2153]SPACELIFT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2154]PAVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2162]H_ISAC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2164]ML009_MENLO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2457]BBVA_CREDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2522]INFORMATICA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2790]PRMTH_PWSS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2891]SHOPIFY_APV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2940]VCTR727_AURUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2973]WMT_GENAI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2995]WSGC_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][3007]WMT_VDI
root['schemas']['SearchHistory']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['SearchQuery']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][6]Entity Query.
iterable_item_removed
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2739]WSGC_WSI_ECOM
prod/asia-south1-chronicle-v1beta
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/asia-southeast1-chronicle-
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/asia-southeast1-chronicle-v1alpha
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feedPacks']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feeds']['methods']['scheduleTransfer']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacyBatchGetCollections']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['threatArtifactId']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['export']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['import']
  • root['schemas']['AzureAuthV2']
  • root['schemas']['AzureBlobStoreV2Settings']
  • root['schemas']['DynamicParsingConfig']
  • root['schemas']['EnrichmentInfo']
  • root['schemas']['EntityChangedCountTimelineBucket']
  • root['schemas']['EntityChangedInfo']
  • root['schemas']['ExportNativeDashboardsRequest']
  • root['schemas']['ExportNativeDashboardsResponse']
  • root['schemas']['FederationGroupSelection']
  • root['schemas']['FederationMetadata']
  • root['schemas']['FeedPack']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnMetadata']
  • root['schemas']['ImportExportStatus']
  • root['schemas']['ImportNativeDashboardsInlineSource']
  • root['schemas']['ImportNativeDashboardsRequest']
  • root['schemas']['ImportNativeDashboardsResponse']
  • root['schemas']['InlineDestination']
  • root['schemas']['InstanceSelection']
  • root['schemas']['LegacyBatchGetCollectionsResponse']
  • root['schemas']['ListFeedPacksResponse']
  • root['schemas']['LogField']
  • root['schemas']['MetricTrendConfig']
  • root['schemas']['MssoAuthentication']
  • root['schemas']['NativeDashboardWithChartsAndQueries']
  • root['schemas']['PackLogType']
  • root['schemas']['ScheduleFeedTransferErrorDetails']
  • root['schemas']['ScheduleFeedTransferRequest']
  • root['schemas']['ScheduleFeedTransferResponse']
  • root['schemas']['SearchDataTableColumnInfo']
  • root['schemas']['SearchDataTableInfo']
  • root['schemas']['SearchDataTableRow']
  • root['schemas']['SearchDataTableRowInfo']
  • root['schemas']['TrellixHxAlertsSettings']
  • root['schemas']['TrellixHxHostsSettings']
  • root['schemas']['TrellixIAMAuthentication']
  • root['schemas']['TrellixStarXAuthentication']
  • root['schemas']['DataTable']['properties']['updateSource']
  • root['schemas']['Dhcp']['properties']['clientIdentifierString']
  • root['schemas']['EventCountTimelineBucket']['properties']['baselineTimedEntityCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['entityChangedCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['filteredTimedEntityCount']
  • root['schemas']['FeedDetails']['properties']['azureBlobStoreV2Settings']
  • root['schemas']['FeedDetails']['properties']['trellixHxAlertsSettings']
  • root['schemas']['FeedDetails']['properties']['trellixHxHostsSettings']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['compressArrayFields']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['useArrayBracketNotation']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnData']['properties']['columnMetadata']
  • root['schemas']['IDM']['properties']['assetEnrichmentInfo']
  • root['schemas']['IDM']['properties']['geoipEnrichmentInfo']
  • root['schemas']['IDM']['properties']['processEnrichmentInfo']
  • root['schemas']['IDM']['properties']['userEnrichmentInfo']
  • root['schemas']['IDM']['properties']['vtFilemetadataEnrichmentInfo']
  • root['schemas']['IocAssociation']['properties']['associatedActors']['deprecated']
  • root['schemas']['IocAssociation']['properties']['countryCode']['deprecated']
  • root['schemas']['LegacyFetchUdmSearchViewRequest']['properties']['federationMetadata']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageToken']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageToken']
  • root['schemas']['LogType']['properties']['customLogTypeLabel']
  • root['schemas']['LogType']['properties']['isCustom']
  • root['schemas']['LogType']['properties']['productSource']
  • root['schemas']['ParserExtension']['properties']['dynamicParsing']
  • root['schemas']['SecurityResult']['properties']['detectionDepth']
  • root['schemas']['Series']['properties']['metricTrendConfig']
  • root['schemas']['UdmEventInfo']['properties']['connectedComponentLabel']
  • root['schemas']['UdmEventInfo']['properties']['datatableRowInfo']
  • root['schemas']['UdmEventInfo']['properties']['tenantId']
  • root['schemas']['UdmEventList']['properties']['datatableInfo']
dictionary_item_removed
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardCharts']['methods']['list']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardQueries']['methods']['list']
  • root['schemas']['ListDashboardChartsResponse']
  • root['schemas']['ListDashboardQueriesResponse']
  • root['schemas']['StringToInt64MapEntry']['description']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['parameters']['filter']['description']
new_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.product_object_id - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
old_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['fetchPrioritizedIocsOnly']['description']
new_valueOptional. Indicates if only prioritized iocs should be fetched. If threat artifact id is set, this must be not be set.
old_valueOptional. Indicates if only prioritized iocs should be fetched.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchRulesAlerts']['parameters']['maxNumAlertsToReturn']['description']
new_valueOptional. The maximum number of alerts to return. The default and maximum value is 10,000; values above that will be coerced to 10,000. When the number of available alerts is greater than this value, the response will contain a too_many_alerts field set to true.
old_valueOptional. Maximum number of alerts to return.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['patch']['parameters']['updateMask']['description']
new_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned
old_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_native_dashboard)
root['revision']
new_value20250224
old_value20250102
root['schemas']['Collection']['description']
new_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20
old_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20 LINT.IfChange
root['schemas']['Dhcp']['properties']['clientIdentifier']['description']
new_valueClient identifier. See RFC2132, section 9.14. Note: Make sure to update the client_identifier_string field as well if you update this field.
old_valueClient identifier. See RFC2132, section 9.14.
root['schemas']['EditChartRequest']['properties']['editMask']['description']
new_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input
old_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_chart)
root['schemas']['EntityRisk']['description']
new_valueStores information related to the risk score of an entity. Next ID: 14
old_valueStores information related to the risk score of an entity.
root['schemas']['ExifInfo']['description']
new_valueExif information.
old_value@hide_from_doc
root['schemas']['FileMetadata']['description']
new_valueMetadata about a file. Place metadata about different file types here, for example data from the Microsoft Windows VersionInfo block or digital signer details. Use a different sub-message per file type.
old_value@hide_from_doc
root['schemas']['FileMetadataImports']['description']
new_valueFile metadata imports.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['description']
new_valueFile metadata for PE resource.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['properties']['filetypeMagic']['description']
new_valueType of resource content, as identified by the magic Python module.
old_valueType of resource content, as identified by the magic Python module. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/magic.py END GOOGLE-INTERNAL
root['schemas']['FileMetadataPeResourceInfo']['properties']['languageCode']['description']
new_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
old_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/toolpefile.py?l=419&rcl=df1fcff7c5e82a39875359608b47669d5aff82c7 END GOOGLE-INTERNAL Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
root['schemas']['FileMetadataSection']['description']
new_valueFile metadata section.
old_value@hide_from_doc
root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStats']['description']
new_valueLINT.IfChange(stats_data) Stats results when the query is for statistics NEXT TAG = 6;
old_valueLINT.IfChange (stats_data) Stats results when the query is for statistics NEXT TAG = 6;
root['schemas']['IocAssociation']['properties']['countryCode']['description']
new_valueOutput only. Deprecated. Use region_code instead. Country from which the threat actor originated.
old_valueOutput only. Country from which the threat actor/ malware is originated.
root['schemas']['IocAssociation']['properties']['regionCode']['description']
new_valueOutput only. Name of the country the threat is originating from.
old_valueOutput only. Name of the country, the threat is originating from.
root['schemas']['Label']['properties']['source']['description']
new_valueWhere the label is derived from.
old_value@hide_from_doc
root['schemas']['LegacySearchRulesAlertsResponse']['properties']['tooManyAlerts']['description']
new_valueIndicates that more data was available but not sent due to more hits than max_num_alerts_to_return.
old_valueIndicates that more data was available but not sent due to more hits than max_matches_to_return.
root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['continuationTime']['description']
new_valueOptional. DEPRECATED: Prefer using `page_token` or `page_start_time` instead. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. All detection alerts discovered after `continuation_time` will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
old_valueOptional. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. When initiating the very first connection, clients should leave this unspecified. If unspecified, this defaults to the time of the connection. All detection alerts discovered after continuation_time will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['continuationTime']['description']
new_valueDEPRECATED: Prefer using `page_token` instead by specifying either `page_start_time` or `page_token` in the request. A continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
old_valueA continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
root['schemas']['LogType']['properties']['displayName']['description']
new_valueRequired. The display name of this log type. This is the tag used in YARA-l rules and search queries.
old_valueRequired. The display name of this log type.
root['schemas']['Metadata']['description']
new_valueGeneral information associated with a UDM event.
old_valueNEXT TAG: 21 General information associated with a UDM event.
root['schemas']['StatusProto']['properties']['canonicalCode']['description']
new_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;
old_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be.
root['schemas']['StatusProto']['properties']['code']['description']
new_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;
old_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto
root['schemas']['StatusProto']['properties']['space']['description']
new_valueThe following are usually only present when code != 0 Space to which this status belongs copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string space = 2;
old_valueThe following are usually only present when code != 0 Space to which this status belongs
root['schemas']['Visualization']['description']
new_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 16
old_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 15
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][17]
new_valueSpam email, message, etc.
old_value@exclude Spam email, message, etc.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
iterable_item_added
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][8]RULES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][8]RULES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['EdrEvent']['properties']['dataSource']['enum'][23]TRELLIX
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['FeedDetails']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedDetails']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][91]FRONT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][94]VUHL_SO_IDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][222]TEHTRIS_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][244]CYNERIO_NDR_H
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][283]WIREGUARD_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][604]FORTINET_ADC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][630]CISCO_NETFLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][642]BELDEN_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][667]HP_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][808]RAVEN_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][817]TERADATA_ACCESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][818]TERADATA_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][950]SOLIDSERVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1023]PINGONE_AIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1024]PINGONE_PROTECT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1135]CHROMEOS_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1136]VECTRA_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1137]METABASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1402]CLICKHOUSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1425]JOBLOGIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1464]ZOHO_ASSIST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1825]IBM_SENSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1844]ACN_SIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1845]ARCON_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1849]ARCDA_COREWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1851]IBM_SVA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1857]FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1864]BLUE_VOYANT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1901]FA_SOLUTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1902]FILES_DOT_COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1910]GHANGOR_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1938]HOXHUNT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1939]ISL_LIGHT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1951]INTEL_EMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1957]INDUSFACE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1999]PINGCAP_TIDB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2004]PRIVACY_I
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2010]MY_RESOLVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2011]REVIVESEC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2016]BBVA_CONSORES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2021]SAP_LEASING
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2022]BBVA_SIRE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2026]BBVA_TEXSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2028]BBVA_SIIBE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2029]BBVA_MBOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2030]BBVA_SINBA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2031]BBVA_MSDP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2032]BBVA_PLUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2033]BBVA_CAIRO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2034]BBVA_SICOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2035]BBVA_FUMER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2036]BBVA_MCOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2037]BBVA_MCWN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2038]BBVA_ZEIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2039]BBVA_CYGE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2040]BBVA_SISP_NET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2042]BBVA_SAIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2043]BBVA_SPWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2045]BBVA_GUIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2046]BBVA_HECO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2047]GL_TRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2048]ORACLE_AVDF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2049]REBLAZE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2051]TT002_EXASOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2056]AWS_EKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2058]F5_DCS_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2062]MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2063]AWS_DASHA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2064]ONETRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2066]SANGFOR_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2072]SNF_SDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2074]SECURDEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2078]SOFTETHER_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2092]UNICO_IDTRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2111]WING_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2114]ZERO_NETWORKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2142]FORTRA_VM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2144]RAPID_IDENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2146]ARCDA_VISTA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2147]PRMTH_WSO2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2153]SPACELIFT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2154]PAVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2162]H_ISAC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2164]ML009_MENLO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2457]BBVA_CREDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2522]INFORMATICA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2790]PRMTH_PWSS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2891]SHOPIFY_APV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2940]VCTR727_AURUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2973]WMT_GENAI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2995]WSGC_ECOM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][3007]WMT_VDI
root['schemas']['RawLog']['properties']['type']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['RawLog']['properties']['type']['enum'][91]FRONT
root['schemas']['RawLog']['properties']['type']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][94]VUHL_SO_IDH
root['schemas']['RawLog']['properties']['type']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['RawLog']['properties']['type']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['RawLog']['properties']['type']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['RawLog']['properties']['type']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['RawLog']['properties']['type']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['RawLog']['properties']['type']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['RawLog']['properties']['type']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['RawLog']['properties']['type']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['RawLog']['properties']['type']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['RawLog']['properties']['type']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['RawLog']['properties']['type']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['RawLog']['properties']['type']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][222]TEHTRIS_EDR
root['schemas']['RawLog']['properties']['type']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['RawLog']['properties']['type']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['RawLog']['properties']['type']['enum'][244]CYNERIO_NDR_H
root['schemas']['RawLog']['properties']['type']['enum'][283]WIREGUARD_VPN
root['schemas']['RawLog']['properties']['type']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][604]FORTINET_ADC
root['schemas']['RawLog']['properties']['type']['enum'][623]HUAWEI_WIRELESS
root['schemas']['RawLog']['properties']['type']['enum'][628]AZURE_VNET_FLOW
root['schemas']['RawLog']['properties']['type']['enum'][630]CISCO_NETFLOW
root['schemas']['RawLog']['properties']['type']['enum'][642]BELDEN_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][667]HP_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['RawLog']['properties']['type']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['RawLog']['properties']['type']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['RawLog']['properties']['type']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['RawLog']['properties']['type']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][808]RAVEN_DB
root['schemas']['RawLog']['properties']['type']['enum'][817]TERADATA_ACCESS
root['schemas']['RawLog']['properties']['type']['enum'][818]TERADATA_DB
root['schemas']['RawLog']['properties']['type']['enum'][830]AZURE_RISKY_USERS
root['schemas']['RawLog']['properties']['type']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['RawLog']['properties']['type']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['RawLog']['properties']['type']['enum'][950]SOLIDSERVER
root['schemas']['RawLog']['properties']['type']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1023]PINGONE_AIC
root['schemas']['RawLog']['properties']['type']['enum'][1024]PINGONE_PROTECT
root['schemas']['RawLog']['properties']['type']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['RawLog']['properties']['type']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][1135]CHROMEOS_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1136]VECTRA_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1137]METABASE
root['schemas']['RawLog']['properties']['type']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['RawLog']['properties']['type']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['RawLog']['properties']['type']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['RawLog']['properties']['type']['enum'][1402]CLICKHOUSE
root['schemas']['RawLog']['properties']['type']['enum'][1425]JOBLOGIC
root['schemas']['RawLog']['properties']['type']['enum'][1464]ZOHO_ASSIST
root['schemas']['RawLog']['properties']['type']['enum'][1486]OPENTEXT_CORDY
root['schemas']['RawLog']['properties']['type']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['RawLog']['properties']['type']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['RawLog']['properties']['type']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['RawLog']['properties']['type']['enum'][1825]IBM_SENSE
root['schemas']['RawLog']['properties']['type']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1844]ACN_SIA
root['schemas']['RawLog']['properties']['type']['enum'][1845]ARCON_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1848]APPSMITH_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1849]ARCDA_COREWEB
root['schemas']['RawLog']['properties']['type']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][1851]IBM_SVA
root['schemas']['RawLog']['properties']['type']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['RawLog']['properties']['type']['enum'][1857]FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1864]BLUE_VOYANT
root['schemas']['RawLog']['properties']['type']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['RawLog']['properties']['type']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['RawLog']['properties']['type']['enum'][1882]CSG_CITRIX_RX
root['schemas']['RawLog']['properties']['type']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['RawLog']['properties']['type']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['RawLog']['properties']['type']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['RawLog']['properties']['type']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1901]FA_SOLUTIONS
root['schemas']['RawLog']['properties']['type']['enum'][1902]FILES_DOT_COM
root['schemas']['RawLog']['properties']['type']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['RawLog']['properties']['type']['enum'][1910]GHANGOR_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['RawLog']['properties']['type']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['RawLog']['properties']['type']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['RawLog']['properties']['type']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['RawLog']['properties']['type']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['RawLog']['properties']['type']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['RawLog']['properties']['type']['enum'][1937]HILLSTONE_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1938]HOXHUNT
root['schemas']['RawLog']['properties']['type']['enum'][1939]ISL_LIGHT
root['schemas']['RawLog']['properties']['type']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1948]RQIDJIE5_CAS
root['schemas']['RawLog']['properties']['type']['enum'][1951]INTEL_EMA
root['schemas']['RawLog']['properties']['type']['enum'][1957]INDUSFACE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['RawLog']['properties']['type']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['RawLog']['properties']['type']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['RawLog']['properties']['type']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['RawLog']['properties']['type']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['RawLog']['properties']['type']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['RawLog']['properties']['type']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['RawLog']['properties']['type']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['RawLog']['properties']['type']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['RawLog']['properties']['type']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['RawLog']['properties']['type']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['RawLog']['properties']['type']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1999]PINGCAP_TIDB
root['schemas']['RawLog']['properties']['type']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['RawLog']['properties']['type']['enum'][2004]PRIVACY_I
root['schemas']['RawLog']['properties']['type']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['RawLog']['properties']['type']['enum'][2010]MY_RESOLVER
root['schemas']['RawLog']['properties']['type']['enum'][2011]REVIVESEC
root['schemas']['RawLog']['properties']['type']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['RawLog']['properties']['type']['enum'][2015]BBVA_BANKTRADE
root['schemas']['RawLog']['properties']['type']['enum'][2016]BBVA_CONSORES
root['schemas']['RawLog']['properties']['type']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['RawLog']['properties']['type']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['RawLog']['properties']['type']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['RawLog']['properties']['type']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['RawLog']['properties']['type']['enum'][2021]SAP_LEASING
root['schemas']['RawLog']['properties']['type']['enum'][2022]BBVA_SIRE
root['schemas']['RawLog']['properties']['type']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['RawLog']['properties']['type']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['RawLog']['properties']['type']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['RawLog']['properties']['type']['enum'][2026]BBVA_TEXSA
root['schemas']['RawLog']['properties']['type']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['RawLog']['properties']['type']['enum'][2028]BBVA_SIIBE
root['schemas']['RawLog']['properties']['type']['enum'][2029]BBVA_MBOT
root['schemas']['RawLog']['properties']['type']['enum'][2030]BBVA_SINBA
root['schemas']['RawLog']['properties']['type']['enum'][2031]BBVA_MSDP
root['schemas']['RawLog']['properties']['type']['enum'][2032]BBVA_PLUS
root['schemas']['RawLog']['properties']['type']['enum'][2033]BBVA_CAIRO
root['schemas']['RawLog']['properties']['type']['enum'][2034]BBVA_SICOR
root['schemas']['RawLog']['properties']['type']['enum'][2035]BBVA_FUMER
root['schemas']['RawLog']['properties']['type']['enum'][2036]BBVA_MCOR
root['schemas']['RawLog']['properties']['type']['enum'][2037]BBVA_MCWN
root['schemas']['RawLog']['properties']['type']['enum'][2038]BBVA_ZEIT
root['schemas']['RawLog']['properties']['type']['enum'][2039]BBVA_CYGE
root['schemas']['RawLog']['properties']['type']['enum'][2040]BBVA_SISP_NET
root['schemas']['RawLog']['properties']['type']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['RawLog']['properties']['type']['enum'][2042]BBVA_SAIT
root['schemas']['RawLog']['properties']['type']['enum'][2043]BBVA_SPWEB
root['schemas']['RawLog']['properties']['type']['enum'][2044]BBVA_VALIDADOR
root['schemas']['RawLog']['properties']['type']['enum'][2045]BBVA_GUIA
root['schemas']['RawLog']['properties']['type']['enum'][2046]BBVA_HECO
root['schemas']['RawLog']['properties']['type']['enum'][2047]GL_TRADE
root['schemas']['RawLog']['properties']['type']['enum'][2048]ORACLE_AVDF
root['schemas']['RawLog']['properties']['type']['enum'][2049]REBLAZE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['RawLog']['properties']['type']['enum'][2051]TT002_EXASOL
root['schemas']['RawLog']['properties']['type']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['RawLog']['properties']['type']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['RawLog']['properties']['type']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['RawLog']['properties']['type']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['RawLog']['properties']['type']['enum'][2056]AWS_EKS
root['schemas']['RawLog']['properties']['type']['enum'][2057]THALES_PS10K_HSM
root['schemas']['RawLog']['properties']['type']['enum'][2058]F5_DCS_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['RawLog']['properties']['type']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['RawLog']['properties']['type']['enum'][2061]FORTINET_FORTISASE
root['schemas']['RawLog']['properties']['type']['enum'][2062]MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][2063]AWS_DASHA
root['schemas']['RawLog']['properties']['type']['enum'][2064]ONETRUST
root['schemas']['RawLog']['properties']['type']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['RawLog']['properties']['type']['enum'][2066]SANGFOR_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][2072]SNF_SDH
root['schemas']['RawLog']['properties']['type']['enum'][2074]SECURDEN
root['schemas']['RawLog']['properties']['type']['enum'][2078]SOFTETHER_VPN
root['schemas']['RawLog']['properties']['type']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2091]UNICO_IDCLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2092]UNICO_IDTRUST
root['schemas']['RawLog']['properties']['type']['enum'][2111]WING_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2114]ZERO_NETWORKS
root['schemas']['RawLog']['properties']['type']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['RawLog']['properties']['type']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['RawLog']['properties']['type']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['RawLog']['properties']['type']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['RawLog']['properties']['type']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['RawLog']['properties']['type']['enum'][2142]FORTRA_VM
root['schemas']['RawLog']['properties']['type']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['RawLog']['properties']['type']['enum'][2144]RAPID_IDENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['RawLog']['properties']['type']['enum'][2146]ARCDA_VISTA
root['schemas']['RawLog']['properties']['type']['enum'][2147]PRMTH_WSO2
root['schemas']['RawLog']['properties']['type']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['RawLog']['properties']['type']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['RawLog']['properties']['type']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['RawLog']['properties']['type']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['RawLog']['properties']['type']['enum'][2153]SPACELIFT
root['schemas']['RawLog']['properties']['type']['enum'][2154]PAVE
root['schemas']['RawLog']['properties']['type']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['RawLog']['properties']['type']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['RawLog']['properties']['type']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['RawLog']['properties']['type']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['RawLog']['properties']['type']['enum'][2162]H_ISAC
root['schemas']['RawLog']['properties']['type']['enum'][2163]IIJ_LANSCOPE
root['schemas']['RawLog']['properties']['type']['enum'][2164]ML009_MENLO
root['schemas']['RawLog']['properties']['type']['enum'][2455]BBVA_CUSTODIA
root['schemas']['RawLog']['properties']['type']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['RawLog']['properties']['type']['enum'][2457]BBVA_CREDIT
root['schemas']['RawLog']['properties']['type']['enum'][2520]BBVA_WALLSTREET
root['schemas']['RawLog']['properties']['type']['enum'][2522]INFORMATICA
root['schemas']['RawLog']['properties']['type']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['RawLog']['properties']['type']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['RawLog']['properties']['type']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['RawLog']['properties']['type']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['RawLog']['properties']['type']['enum'][2790]PRMTH_PWSS
root['schemas']['RawLog']['properties']['type']['enum'][2794]RENAULT_IRN_74011
root['schemas']['RawLog']['properties']['type']['enum'][2810]RENAULT_IRN_74898
root['schemas']['RawLog']['properties']['type']['enum'][2811]RENAULT_IRN_73882
root['schemas']['RawLog']['properties']['type']['enum'][2812]RENAULT_IRN_72284
root['schemas']['RawLog']['properties']['type']['enum'][2813]RENAULT_IRN_74143
root['schemas']['RawLog']['properties']['type']['enum'][2814]RENAULT_IRN_70132
root['schemas']['RawLog']['properties']['type']['enum'][2815]RENAULT_IRN_50567
root['schemas']['RawLog']['properties']['type']['enum'][2816]RENAULT_IRN_8185
root['schemas']['RawLog']['properties']['type']['enum'][2817]RENAULT_IRN_77153
root['schemas']['RawLog']['properties']['type']['enum'][2818]RENAULT_IRN_67551
root['schemas']['RawLog']['properties']['type']['enum'][2819]RENAULT_IRN_73940
root['schemas']['RawLog']['properties']['type']['enum'][2820]RENAULT_IRN_75039
root['schemas']['RawLog']['properties']['type']['enum'][2821]RENAULT_IRN_69293
root['schemas']['RawLog']['properties']['type']['enum'][2822]RENAULT_IRN_74601
root['schemas']['RawLog']['properties']['type']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['RawLog']['properties']['type']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['RawLog']['properties']['type']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['RawLog']['properties']['type']['enum'][2891]SHOPIFY_APV
root['schemas']['RawLog']['properties']['type']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['RawLog']['properties']['type']['enum'][2940]VCTR727_AURUS
root['schemas']['RawLog']['properties']['type']['enum'][2973]WMT_GENAI
root['schemas']['RawLog']['properties']['type']['enum'][2995]WSGC_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][3007]WMT_VDI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][91]FRONT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][94]VUHL_SO_IDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][222]TEHTRIS_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][244]CYNERIO_NDR_H
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][283]WIREGUARD_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][604]FORTINET_ADC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][630]CISCO_NETFLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][642]BELDEN_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][667]HP_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][808]RAVEN_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][817]TERADATA_ACCESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][818]TERADATA_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][950]SOLIDSERVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1023]PINGONE_AIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1024]PINGONE_PROTECT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1135]CHROMEOS_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1136]VECTRA_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1137]METABASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1402]CLICKHOUSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1425]JOBLOGIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1464]ZOHO_ASSIST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1825]IBM_SENSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1844]ACN_SIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1845]ARCON_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1849]ARCDA_COREWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1851]IBM_SVA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1857]FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1864]BLUE_VOYANT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1901]FA_SOLUTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1902]FILES_DOT_COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1910]GHANGOR_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1938]HOXHUNT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1939]ISL_LIGHT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1951]INTEL_EMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1957]INDUSFACE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1999]PINGCAP_TIDB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2004]PRIVACY_I
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2010]MY_RESOLVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2011]REVIVESEC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2016]BBVA_CONSORES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2021]SAP_LEASING
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2022]BBVA_SIRE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2026]BBVA_TEXSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2028]BBVA_SIIBE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2029]BBVA_MBOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2030]BBVA_SINBA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2031]BBVA_MSDP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2032]BBVA_PLUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2033]BBVA_CAIRO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2034]BBVA_SICOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2035]BBVA_FUMER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2036]BBVA_MCOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2037]BBVA_MCWN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2038]BBVA_ZEIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2039]BBVA_CYGE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2040]BBVA_SISP_NET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2042]BBVA_SAIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2043]BBVA_SPWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2045]BBVA_GUIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2046]BBVA_HECO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2047]GL_TRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2048]ORACLE_AVDF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2049]REBLAZE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2051]TT002_EXASOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2056]AWS_EKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2058]F5_DCS_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2062]MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2063]AWS_DASHA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2064]ONETRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2066]SANGFOR_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2072]SNF_SDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2074]SECURDEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2078]SOFTETHER_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2092]UNICO_IDTRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2111]WING_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2114]ZERO_NETWORKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2142]FORTRA_VM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2144]RAPID_IDENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2146]ARCDA_VISTA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2147]PRMTH_WSO2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2153]SPACELIFT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2154]PAVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2162]H_ISAC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2164]ML009_MENLO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2457]BBVA_CREDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2522]INFORMATICA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2790]PRMTH_PWSS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2891]SHOPIFY_APV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2940]VCTR727_AURUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2973]WMT_GENAI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2995]WSGC_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][3007]WMT_VDI
root['schemas']['SearchHistory']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['SearchQuery']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][6]Entity Query.
iterable_item_removed
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2739]WSGC_WSI_ECOM
prod/asia-southeast1-chronicle-v1beta
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/assuredoss-
values_changed
root['revision']
new_value20250220
old_value20250206
prod/assuredoss-v1alpha
values_changed
root['revision']
new_value20250220
old_value20250206
prod/autofill-
dictionary_item_added
  • root['schemas']['FormSuggestion']['properties']['runAutofillAiModel']
values_changed
root['revision']
new_value20250224
old_value20250219
root['schemas']['FormSuggestion']['description']
new_valueAutofill suggestions for fields in a single form. Next ID: 3
old_valueAutofill suggestions for fields in a single form. Next ID: 2
prod/autofill-v1
dictionary_item_added
  • root['schemas']['FormSuggestion']['properties']['runAutofillAiModel']
values_changed
root['revision']
new_value20250224
old_value20250219
root['schemas']['FormSuggestion']['description']
new_valueAutofill suggestions for fields in a single form. Next ID: 3
old_valueAutofill suggestions for fields in a single form. Next ID: 2
prod/autopush-notifications-pa.sandbox-
dictionary_item_added
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['GoogleLogsTapandpayAndroid_PermissionState_NotificationPermissionMetadata']['properties']['isFirstTimeRequest']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
values_changed
root['revision']
new_value20250225
old_value20250223
root['schemas']['GoogleLogsTapandpayAndroid__FetchTransitPassesForFirstPartyEvent']['description']
new_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 5
old_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 4
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotificationsClientCommon__InboxChimeData']['properties']['category']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__SemanticProperties']['properties']['notificationCategory']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/autopush-notifications-pa.sandbox-v1
dictionary_item_added
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['GoogleLogsTapandpayAndroid_PermissionState_NotificationPermissionMetadata']['properties']['isFirstTimeRequest']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
values_changed
root['revision']
new_value20250225
old_value20250223
root['schemas']['GoogleLogsTapandpayAndroid__FetchTransitPassesForFirstPartyEvent']['description']
new_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 5
old_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 4
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotificationsClientCommon__InboxChimeData']['properties']['category']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__SemanticProperties']['properties']['notificationCategory']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/autopush-proddata-notifications-pa.sandbox-
dictionary_item_added
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['GoogleLogsTapandpayAndroid_PermissionState_NotificationPermissionMetadata']['properties']['isFirstTimeRequest']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
values_changed
root['revision']
new_value20250225
old_value20250223
root['schemas']['GoogleLogsTapandpayAndroid__FetchTransitPassesForFirstPartyEvent']['description']
new_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 5
old_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 4
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotificationsClientCommon__InboxChimeData']['properties']['category']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__SemanticProperties']['properties']['notificationCategory']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/autopush-proddata-notifications-pa.sandbox-v1
dictionary_item_added
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['GoogleLogsTapandpayAndroid_PermissionState_NotificationPermissionMetadata']['properties']['isFirstTimeRequest']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
values_changed
root['revision']
new_value20250225
old_value20250223
root['schemas']['GoogleLogsTapandpayAndroid__FetchTransitPassesForFirstPartyEvent']['description']
new_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 5
old_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 4
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotificationsClientCommon__InboxChimeData']['properties']['category']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__SemanticProperties']['properties']['notificationCategory']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/autopush-qual-playground-notifications-pa.sandbox-
dictionary_item_added
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['GoogleLogsTapandpayAndroid_PermissionState_NotificationPermissionMetadata']['properties']['isFirstTimeRequest']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
values_changed
root['revision']
new_value20250225
old_value20250223
root['schemas']['GoogleLogsTapandpayAndroid__FetchTransitPassesForFirstPartyEvent']['description']
new_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 5
old_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 4
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotificationsClientCommon__InboxChimeData']['properties']['category']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__SemanticProperties']['properties']['notificationCategory']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/autopush-qual-playground-notifications-pa.sandbox-v1
dictionary_item_added
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['GoogleLogsTapandpayAndroid_PermissionState_NotificationPermissionMetadata']['properties']['isFirstTimeRequest']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
values_changed
root['revision']
new_value20250225
old_value20250223
root['schemas']['GoogleLogsTapandpayAndroid__FetchTransitPassesForFirstPartyEvent']['description']
new_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 5
old_valueThe events related to fetching transit passes for first party. Design doc: go/wallet-design-ondc-india-ticket-access Next id: 4
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotificationsClientCommon__InboxChimeData']['properties']['category']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__SemanticProperties']['properties']['notificationCategory']['enum'][277]WHISPERSTREAM_UPDATE
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/bigquery-sq-
values_changed
root['revision']
new_value20250218
old_value20250213
prod/buildeventservice-
values_changed
root['revision']
new_value20250221
old_value20250218
prod/buildeventservice-v1
values_changed
root['revision']
new_value20250221
old_value20250218
prod/carddav-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/carddav-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/carestudio-
values_changed
root['revision']
new_value20250221
old_value20250214
prod/carestudio-v1
values_changed
root['revision']
new_value20250221
old_value20250214
prod/chromedevicetoken-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/chromedevicetoken-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/cloudchannel-pa-
values_changed
root['revision']
new_value20250222
old_value20250220
prod/cloudchannel-pa-v1
values_changed
root['revision']
new_value20250222
old_value20250220
prod/cloudchannel-pa-v1alpha1
values_changed
root['revision']
new_value20250222
old_value20250220
root['schemas']['GoogleCloudChannelV1alpha1QualificationInfo']['properties']['quantity']['description']
new_valueOptional. Number of seats or licenses. Default: 1. Can't be edited after the Opportunity is Accepted.
old_valueOptional. Number of seats or licenses. Default: 1.
root['schemas']['GoogleCloudChannelV1alpha1SalesCycle']['properties']['closeDate']['description']
new_valueOutput only. For open opportunities, this is the expected close date. For closed opportunities, this is the contract signed date
old_valueOutput only. Date when the Opportunity is closed.
prod/cloudchannel-pa-v2
values_changed
root['revision']
new_value20250222
old_value20250220
prod/cloudcommerceproducer-
values_changed
root['revision']
new_value20250224
old_value20250209
prod/cloudcommerceproducer-v1alpha1
values_changed
root['revision']
new_value20250224
old_value20250209
prod/cloudmarketplace-
dictionary_item_added
  • root['schemas']['LoggableSimpleSecretLabelProto']
  • root['schemas']['LoggableServiceControlTokenProto']['properties']['issuer']
  • root['schemas']['LoggableSimpleSecretProto']['properties']['label']
values_changed
root['revision']
new_value20250222
old_value20250208
iterable_item_added
root['schemas']['UiContext']['properties']['contextId']['enum'][97]CONTACTS_SYNC_ANDROID_BACKUP_SYNC_OPT_IN_V2
root['schemas']['UiContext']['properties']['contextId']['enum'][105]CROWDSOURCE_ANDROID_CULTURAL_REGIONS_CONSENT_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enum'][134]CROWDSOURCE_WEB_CULTURAL_REGIONS_CONSENT_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enum'][139]CROWDSOURCE_WEB_LOOKBOOK_GENERAL_VIDEO_DONATION_CONSENT_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enum'][237]FITBIT_ANDROID_HEALTH_CONNECT_DATA_SYNC_CONNECTING
root['schemas']['UiContext']['properties']['contextId']['enum'][238]FITBIT_ANDROID_HEALTH_CONNECT_DATA_SYNC_DISCONNECTING
root['schemas']['UiContext']['properties']['contextId']['enum'][262]FITBIT_IOS_HEALTHKIT_DATA_SYNC_ONBOARDING
root['schemas']['UiContext']['properties']['contextId']['enum'][263]FITBIT_IOS_HEALTHKIT_DATA_SYNC_OFFBOARDING
root['schemas']['UiContext']['properties']['contextId']['enum'][698]PAISA_MERCHANT_FLUTTER_OOBE_AADHAAR_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][97]The "backup and sync" opt-in UI in contacts sync settings V2.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][105]Crowdsource Android app cultural regions consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][134]Crowdsource web Cultural Regions task consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][138]Crowdsource web Lookbook General Donation task consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][139]Crowdsource web Lookbook General Video Donation task consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][237]User connects Fitbit to Health Connect.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][238]User disconnects Fitbit from Health Connect.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][262]HealthKit data sync consent moment on iOS
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][698]User going through the Paisa Merchant OOBE Aadhaar screen in flutter app.
prod/cloudmarketplace-v1test
dictionary_item_added
  • root['schemas']['LoggableSimpleSecretLabelProto']
  • root['schemas']['LoggableServiceControlTokenProto']['properties']['issuer']
  • root['schemas']['LoggableSimpleSecretProto']['properties']['label']
values_changed
root['revision']
new_value20250222
old_value20250208
iterable_item_added
root['schemas']['UiContext']['properties']['contextId']['enum'][97]CONTACTS_SYNC_ANDROID_BACKUP_SYNC_OPT_IN_V2
root['schemas']['UiContext']['properties']['contextId']['enum'][105]CROWDSOURCE_ANDROID_CULTURAL_REGIONS_CONSENT_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enum'][134]CROWDSOURCE_WEB_CULTURAL_REGIONS_CONSENT_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enum'][139]CROWDSOURCE_WEB_LOOKBOOK_GENERAL_VIDEO_DONATION_CONSENT_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enum'][237]FITBIT_ANDROID_HEALTH_CONNECT_DATA_SYNC_CONNECTING
root['schemas']['UiContext']['properties']['contextId']['enum'][238]FITBIT_ANDROID_HEALTH_CONNECT_DATA_SYNC_DISCONNECTING
root['schemas']['UiContext']['properties']['contextId']['enum'][262]FITBIT_IOS_HEALTHKIT_DATA_SYNC_ONBOARDING
root['schemas']['UiContext']['properties']['contextId']['enum'][263]FITBIT_IOS_HEALTHKIT_DATA_SYNC_OFFBOARDING
root['schemas']['UiContext']['properties']['contextId']['enum'][698]PAISA_MERCHANT_FLUTTER_OOBE_AADHAAR_SCREEN
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][97]The "backup and sync" opt-in UI in contacts sync settings V2.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][105]Crowdsource Android app cultural regions consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][134]Crowdsource web Cultural Regions task consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][138]Crowdsource web Lookbook General Donation task consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][139]Crowdsource web Lookbook General Video Donation task consent screen.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][237]User connects Fitbit to Health Connect.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][238]User disconnects Fitbit from Health Connect.
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][262]HealthKit data sync consent moment on iOS
root['schemas']['UiContext']['properties']['contextId']['enumDescriptions'][698]User going through the Paisa Merchant OOBE Aadhaar screen in flutter app.
prod/cloudmarketplaceadmin-
values_changed
root['revision']
new_value20250222
old_value20250208
iterable_item_added
root['schemas']['Notification']['properties']['notificationType']['enum'][33]NOTIFICATION_TYPE_LEADGEN_PARTNER_LEAD_DETAIL_REGION
root['schemas']['Notification']['properties']['notificationType']['enumDescriptions'][33]Notifies partner when customer submitted an inquiry via GCP marketplace with region.
prod/cloudmarketplaceadmin-v1test
values_changed
root['revision']
new_value20250222
old_value20250208
iterable_item_added
root['schemas']['Notification']['properties']['notificationType']['enum'][33]NOTIFICATION_TYPE_LEADGEN_PARTNER_LEAD_DETAIL_REGION
root['schemas']['Notification']['properties']['notificationType']['enumDescriptions'][33]Notifies partner when customer submitted an inquiry via GCP marketplace with region.
prod/cloudmarketplacepartner-
values_changed
root['revision']
new_value20250222
old_value20250208
prod/cloudmarketplacepartner-v2test
values_changed
root['revision']
new_value20250222
old_value20250208
prod/cloudsupport-pa-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/cloudsupport-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/connectgateway-v1
values_changed
root['revision']
new_value20250221
old_value20250201
prod/content-actions-
values_changed
root['revision']
new_value20250224
old_value20250221
prod/content-actions-v2
values_changed
root['revision']
new_value20250224
old_value20250221
prod/content-actions-v2alpha
values_changed
root['revision']
new_value20250224
old_value20250221
prod/content-actions-v3
values_changed
root['revision']
new_value20250224
old_value20250221
prod/content-alkalilearn-pa-
values_changed
root['revision']
new_value20250222
old_value20250218
prod/content-alkalilearn-pa-v1
values_changed
root['revision']
new_value20250222
old_value20250218
prod/content-alkalilearn-pa-v2
values_changed
root['revision']
new_value20250222
old_value20250218
prod/content-autofill-
dictionary_item_added
  • root['schemas']['FormSuggestion']['properties']['runAutofillAiModel']
values_changed
root['revision']
new_value20250224
old_value20250219
root['schemas']['FormSuggestion']['description']
new_valueAutofill suggestions for fields in a single form. Next ID: 3
old_valueAutofill suggestions for fields in a single form. Next ID: 2
prod/content-autofill-v1
dictionary_item_added
  • root['schemas']['FormSuggestion']['properties']['runAutofillAiModel']
values_changed
root['revision']
new_value20250224
old_value20250219
root['schemas']['FormSuggestion']['description']
new_valueAutofill suggestions for fields in a single form. Next ID: 3
old_valueAutofill suggestions for fields in a single form. Next ID: 2
prod/content-cloudchannel-pa-
values_changed
root['revision']
new_value20250222
old_value20250220
prod/content-cloudchannel-pa-v1
values_changed
root['revision']
new_value20250222
old_value20250220
prod/content-cloudchannel-pa-v1alpha1
values_changed
root['revision']
new_value20250222
old_value20250220
root['schemas']['GoogleCloudChannelV1alpha1QualificationInfo']['properties']['quantity']['description']
new_valueOptional. Number of seats or licenses. Default: 1. Can't be edited after the Opportunity is Accepted.
old_valueOptional. Number of seats or licenses. Default: 1.
root['schemas']['GoogleCloudChannelV1alpha1SalesCycle']['properties']['closeDate']['description']
new_valueOutput only. For open opportunities, this is the expected close date. For closed opportunities, this is the contract signed date
old_valueOutput only. Date when the Opportunity is closed.
prod/content-cloudchannel-pa-v2
values_changed
root['revision']
new_value20250222
old_value20250220
prod/content-daily-cloudsearch-
values_changed
root['revision']
new_value20250225
old_value20250222
prod/content-daily-cloudsearch-v1
values_changed
root['revision']
new_value20250225
old_value20250222
prod/content-dynamicmail-pa-
values_changed
root['revision']
new_value20250218
old_value20250211
prod/content-dynamicmail-pa-v2
values_changed
root['revision']
new_value20250218
old_value20250211
prod/content-fit-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/content-fit-v2beta1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/content-quantum-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/content-quantum-v1alpha1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/content-resultstore-
values_changed
root['revision']
new_value20250220
old_value20250218
prod/content-resultstore-v2
values_changed
root['revision']
new_value20250220
old_value20250218
prod/content-sourcerepo-pa-
values_changed
root['revision']
new_value20250224
old_value20250210
prod/content-sourcerepo-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250210
prod/content-takeout-pa-
values_changed
root['revision']
new_value20250220
old_value20250212
prod/content-takeout-pa-v1
values_changed
root['revision']
new_value20250220
old_value20250212
prod/content-takeout-pa-v2
values_changed
root['revision']
new_value20250220
old_value20250212
prod/content-tasks-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250216
prod/contrails-
values_changed
root['revision']
new_value20250224
old_value20250219
prod/contrails-v1
values_changed
root['revision']
new_value20250224
old_value20250219
prod/corplearning-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/corplearning-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/daily-cloudsearch-
values_changed
root['revision']
new_value20250225
old_value20250222
prod/daily-cloudsearch-v1
values_changed
root['revision']
new_value20250225
old_value20250222
prod/daily-dynamicmail-pa.sandbox-
values_changed
root['revision']
new_value20250225
old_value20250223
prod/daily-dynamicmail-pa.sandbox-v2
values_changed
root['revision']
new_value20250225
old_value20250223
prod/dataconnectors-v1alpha2
values_changed
root['revision']
new_value20250116
old_value20250109
prod/datamanager-
values_changed
root['revision']
new_value20250223
old_value20250219
root['schemas']['AudienceMember']['properties']['consent']['description']
new_valueOptional. The consent setting for the user.
old_valueRequired. The consent setting for the user.
root['schemas']['RemoveAudienceMembersRequest']['properties']['encoding']['description']
new_valueOptional. The encoding type of the user identifiers. For encrypted user identifiers, this only applies to the outer encoding. This field must be set for UserData. For non UserData, this field is ignored.
old_valueOptional. The encoding type of the user identifiers. For encrypted user identifiers, this only applies to the outer encoding. This field must be set for UserData uploads. For non UserData ingestion, this field is ignored.
root['schemas']['RemoveAudienceMembersRequest']['properties']['encryptionInfo']['description']
new_valueOptional. Encryption information for UserData. For non UserData, this field is ignored. For UserData, if this field is not set, it is assumed that pii is hashed but not encrypted.
old_valueOptional. Encryption information for UserData uploads. For non UserData uploads, this field is ignored. For UserData uploads, if this field is not set, it is assumed that uploaded pii is hashed but not encrypted.
root['schemas']['RemoveAudienceMembersResponse']['properties']['requestId']['description']
new_valueThe generated request id of the removal Request.
old_valueThe generated request id of the Ingestion Request.
prod/datamanager-v1
values_changed
root['revision']
new_value20250223
old_value20250219
root['schemas']['AudienceMember']['properties']['consent']['description']
new_valueOptional. The consent setting for the user.
old_valueRequired. The consent setting for the user.
root['schemas']['RemoveAudienceMembersRequest']['properties']['encoding']['description']
new_valueOptional. The encoding type of the user identifiers. For encrypted user identifiers, this only applies to the outer encoding. This field must be set for UserData. For non UserData, this field is ignored.
old_valueOptional. The encoding type of the user identifiers. For encrypted user identifiers, this only applies to the outer encoding. This field must be set for UserData uploads. For non UserData ingestion, this field is ignored.
root['schemas']['RemoveAudienceMembersRequest']['properties']['encryptionInfo']['description']
new_valueOptional. Encryption information for UserData. For non UserData, this field is ignored. For UserData, if this field is not set, it is assumed that pii is hashed but not encrypted.
old_valueOptional. Encryption information for UserData uploads. For non UserData uploads, this field is ignored. For UserData uploads, if this field is not set, it is assumed that uploaded pii is hashed but not encrypted.
root['schemas']['RemoveAudienceMembersResponse']['properties']['requestId']['description']
new_valueThe generated request id of the removal Request.
old_valueThe generated request id of the Ingestion Request.
prod/dataprocrm-
values_changed
root['revision']
new_value20250221
old_value20250220
prod/dataprocrm-v1
values_changed
root['revision']
new_value20250221
old_value20250220
prod/developerscontentsearch-pa-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/developerscontentsearch-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/directions-pa-
values_changed
root['revision']
new_value20250220
old_value20250219
prod/directions-pa-v1
values_changed
root['revision']
new_value20250220
old_value20250219
prod/directions-pa-v1alpha
values_changed
root['revision']
new_value20250220
old_value20250219
prod/drivefrontend-pa-
values_changed
root['revision']
new_value20250220
old_value20250218
prod/drivefrontend-pa-v1
values_changed
root['revision']
new_value20250220
old_value20250218
prod/dynamicmail-pa-
values_changed
root['revision']
new_value20250218
old_value20250211
prod/dynamicmail-pa-v2
values_changed
root['revision']
new_value20250218
old_value20250211
prod/edgenetwork-
values_changed
root['revision']
new_value20250220
old_value20250212
prod/edgenetwork-v1
values_changed
root['revision']
new_value20250220
old_value20250212
prod/edgenetwork-v1alpha1
values_changed
root['revision']
new_value20250220
old_value20250212
prod/embeddedassistant-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/embeddedassistant-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/embeddedassistant-v1alpha2
values_changed
root['revision']
new_value20250224
old_value20250220
prod/embeddedassistant-v1beta1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/eu-chronicle-
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['referenceLists']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['rules']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['CompilationDiagnostic']
  • root['schemas']['CompilationPosition']
  • root['schemas']['ListOperationsResponse']
  • root['schemas']['ListReferenceListsResponse']
  • root['schemas']['ListRetrohuntsResponse']
  • root['schemas']['ListRuleDeploymentsResponse']
  • root['schemas']['ListRuleRevisionsResponse']
  • root['schemas']['ListRulesResponse']
  • root['schemas']['Operation']
  • root['schemas']['ReferenceList']
  • root['schemas']['ReferenceListEntry']
  • root['schemas']['ReferenceListScope']
  • root['schemas']['Retrohunt']
  • root['schemas']['Rule']
  • root['schemas']['RuleDeployment']
  • root['schemas']['ScopeInfo']
  • root['schemas']['Severity']
  • root['schemas']['Status']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250213
old_value20241212
root['schemas']['DataAccessScope']['properties']['allowedDataAccessLabels']['description']
new_valueOptional. The allowed labels for the scope. Either allow_all or allowed_data_access_labels needs to be provided. When provided, there has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
old_valueRequired. The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allow_all or allowed_data_access_labels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
root['schemas']['Instance']['properties']
new_value
customerCode
descriptionAn acronym related to the company name.
typestring
displayName
descriptionThe display name of the instance.
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
secopsUrls
descriptionURL of the SecOps instance for the instance. https://.backstory.chronicle.security
items
typestring
typearray
old_value
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
wipeoutStatus
descriptionOutput only. The wipeout status of the instance.
enum
  • WIPEOUT_STATE_UNSPECIFIED
  • DELETE_REQUESTED
  • SOFT_DELETE_IN_PROGRESS
  • SOFT_DELETE_COMPLETED
  • UNDELETE_REQUESTED
  • DATA_DELETION_IN_PROGRESS
  • ERROR
  • WIPED_OUT
  • UNDELETE_COMPLETED
enumDescriptions
  • The default value.
  • The instance has requested deletion.
  • The instance is in the process of being soft-deleted.
  • The instance has been soft-deleted.
  • The instance has requested undeletion.
  • The instance is in the process of being data deleted.
  • The instance has an error during wipeout.
  • The instance has been wiped out.
  • The instance has been undeleted.
readOnlyTrue
typestring
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][15]INVALID_CONFIG_FOR_DASHBOARD_IMPORT
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][15]Invalid config for dashboard import. Example ErrorInfo: { "reason": "INVALID_CONFIG_FOR_DASHBOARD_IMPORT", "domain": "chronicle.googleapis.com", }
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/eu-chronicle-v1alpha
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feeds']['methods']['scheduleTransfer']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacyBatchGetCollections']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['threatCollectionId']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['export']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['import']
  • root['schemas']['AzureAuthV2']
  • root['schemas']['AzureBlobStoreV2Settings']
  • root['schemas']['CustomDrillDownSettings']
  • root['schemas']['DefaultDrillDownSettings']
  • root['schemas']['DrillDown']
  • root['schemas']['DrillDownConfig']
  • root['schemas']['DrillDownDashboardFilter']
  • root['schemas']['DrillDownExternalLink']
  • root['schemas']['DrillDownFilter']
  • root['schemas']['DrillDownQuery']
  • root['schemas']['DynamicParsingConfig']
  • root['schemas']['EnrichmentInfo']
  • root['schemas']['EntityChangedCountTimelineBucket']
  • root['schemas']['EntityChangedInfo']
  • root['schemas']['ExportNativeDashboardsRequest']
  • root['schemas']['ExportNativeDashboardsResponse']
  • root['schemas']['FailureCsvFieldValidation']
  • root['schemas']['FederationMetadata']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnMetadata']
  • root['schemas']['ImportExportStatus']
  • root['schemas']['ImportNativeDashboardsInlineSource']
  • root['schemas']['ImportNativeDashboardsRequest']
  • root['schemas']['ImportNativeDashboardsResponse']
  • root['schemas']['InlineDestination']
  • root['schemas']['InstanceSelection']
  • root['schemas']['LegacyBatchGetCollectionsResponse']
  • root['schemas']['LogField']
  • root['schemas']['MetricTrendConfig']
  • root['schemas']['MssoAuthentication']
  • root['schemas']['NativeDashboardWithChartsAndQueries']
  • root['schemas']['ScheduleFeedTransferErrorDetails']
  • root['schemas']['ScheduleFeedTransferRequest']
  • root['schemas']['ScheduleFeedTransferResponse']
  • root['schemas']['SearchDataTableColumnInfo']
  • root['schemas']['SearchDataTableInfo']
  • root['schemas']['SearchDataTableRow']
  • root['schemas']['SearchDataTableRowInfo']
  • root['schemas']['TrellixHxAlertsSettings']
  • root['schemas']['TrellixHxHostsSettings']
  • root['schemas']['TrellixIAMAuthentication']
  • root['schemas']['TrellixStarXAuthentication']
  • root['schemas']['AnalystVerdict']['description']
  • root['schemas']['AnalystVerdict']['properties']['confidenceScore']['description']
  • root['schemas']['AnalystVerdict']['properties']['verdictResponse']['description']
  • root['schemas']['AnalystVerdict']['properties']['verdictTime']['description']
  • root['schemas']['AnalyticsMetadata']['description']
  • root['schemas']['AnalyticsMetadata']['properties']['analytic']['description']
  • root['schemas']['Artifact']['description']
  • root['schemas']['Artifact']['properties']['anonymous']['description']
  • root['schemas']['Artifact']['properties']['artifactClient']['description']
  • root['schemas']['Artifact']['properties']['asOwner']['description']
  • root['schemas']['Artifact']['properties']['asn']['description']
  • root['schemas']['Artifact']['properties']['firstSeenTime']['description']
  • root['schemas']['Artifact']['properties']['ip']['description']
  • root['schemas']['Artifact']['properties']['jarm']['description']
  • root['schemas']['Artifact']['properties']['lastHttpsCertificate']['description']
  • root['schemas']['Artifact']['properties']['lastHttpsCertificateDate']['description']
  • root['schemas']['Artifact']['properties']['lastSeenTime']['description']
  • root['schemas']['Artifact']['properties']['location']['description']
  • root['schemas']['Artifact']['properties']['network']['description']
  • root['schemas']['Artifact']['properties']['prevalence']['description']
  • root['schemas']['Artifact']['properties']['regionalInternetRegistry']['description']
  • root['schemas']['Artifact']['properties']['risks']['description']
  • root['schemas']['Artifact']['properties']['tags']['description']
  • root['schemas']['Artifact']['properties']['tunnels']['description']
  • root['schemas']['Artifact']['properties']['whois']['description']
  • root['schemas']['Artifact']['properties']['whoisDate']['description']
  • root['schemas']['ArtifactClient']['description']
  • root['schemas']['ArtifactClient']['properties']['behaviors']['description']
  • root['schemas']['ArtifactClient']['properties']['proxies']['description']
  • root['schemas']['Asset']['description']
  • root['schemas']['Asset']['properties']['assetId']['description']
  • root['schemas']['Asset']['properties']['attribute']['description']
  • root['schemas']['Asset']['properties']['category']['description']
  • root['schemas']['Asset']['properties']['creationTime']['description']
  • root['schemas']['Asset']['properties']['deploymentStatus']['description']
  • root['schemas']['Asset']['properties']['firstDiscoverTime']['description']
  • root['schemas']['Asset']['properties']['firstSeenTime']['description']
  • root['schemas']['Asset']['properties']['hardware']['description']
  • root['schemas']['Asset']['properties']['hostname']['description']
  • root['schemas']['Asset']['properties']['ip']['description']
  • root['schemas']['Asset']['properties']['labels']['description']
  • root['schemas']['Asset']['properties']['lastBootTime']['description']
  • root['schemas']['Asset']['properties']['lastDiscoverTime']['description']
  • root['schemas']['Asset']['properties']['location']['description']
  • root['schemas']['Asset']['properties']['mac']['description']
  • root['schemas']['Asset']['properties']['natIp']['description']
  • root['schemas']['Asset']['properties']['networkDomain']['description']
  • root['schemas']['Asset']['properties']['platformSoftware']['description']
  • root['schemas']['Asset']['properties']['productObjectId']['description']
  • root['schemas']['Asset']['properties']['software']['description']
  • root['schemas']['Asset']['properties']['systemLastUpdateTime']['description']
  • root['schemas']['Asset']['properties']['type']['description']
  • root['schemas']['Asset']['properties']['vulnerabilities']['description']
  • root['schemas']['Association']['description']
  • root['schemas']['Association']['properties']['alias']['description']
  • root['schemas']['Association']['properties']['associatedActors']['description']
  • root['schemas']['Association']['properties']['countryCode']['description']
  • root['schemas']['Association']['properties']['description']['description']
  • root['schemas']['Association']['properties']['firstReferenceTime']['description']
  • root['schemas']['Association']['properties']['id']['description']
  • root['schemas']['Association']['properties']['industriesAffected']['description']
  • root['schemas']['Association']['properties']['lastReferenceTime']['description']
  • root['schemas']['Association']['properties']['name']['description']
  • root['schemas']['Association']['properties']['regionCode']['description']
  • root['schemas']['Association']['properties']['role']['description']
  • root['schemas']['Association']['properties']['sourceCountry']['description']
  • root['schemas']['Association']['properties']['sponsorRegion']['description']
  • root['schemas']['Association']['properties']['tags']['description']
  • root['schemas']['Association']['properties']['targetedRegions']['description']
  • root['schemas']['Association']['properties']['type']['description']
  • root['schemas']['AssociationAlias']['description']
  • root['schemas']['AssociationAlias']['properties']['company']['description']
  • root['schemas']['AssociationAlias']['properties']['name']['description']
  • root['schemas']['AttackDetails']['description']
  • root['schemas']['AttackDetails']['properties']['tactics']['description']
  • root['schemas']['AttackDetails']['properties']['techniques']['description']
  • root['schemas']['AttackDetails']['properties']['version']['description']
  • root['schemas']['Attribute']['description']
  • root['schemas']['Attribute']['properties']['cloud']['description']
  • root['schemas']['Attribute']['properties']['creationTime']['description']
  • root['schemas']['Attribute']['properties']['labels']['description']
  • root['schemas']['Attribute']['properties']['lastUpdateTime']['description']
  • root['schemas']['Attribute']['properties']['permissions']['description']
  • root['schemas']['Attribute']['properties']['roles']['description']
  • root['schemas']['Authentication']['description']
  • root['schemas']['Authentication']['properties']['authDetails']['description']
  • root['schemas']['Authentication']['properties']['mechanism']['description']
  • root['schemas']['Authentication']['properties']['type']['description']
  • root['schemas']['AuthorityKeyId']['description']
  • root['schemas']['AuthorityKeyId']['properties']['keyid']['description']
  • root['schemas']['AuthorityKeyId']['properties']['serialNumber']['description']
  • root['schemas']['BackstoryEntity']['description']
  • root['schemas']['BackstoryEntity']['properties']['additional']['description']
  • root['schemas']['BackstoryEntity']['properties']['entity']['description']
  • root['schemas']['BackstoryEntity']['properties']['metadata']['description']
  • root['schemas']['BackstoryEntity']['properties']['metric']['description']
  • root['schemas']['BackstoryEntity']['properties']['relations']['description']
  • root['schemas']['BackstoryEntity']['properties']['riskScore']['description']
  • root['schemas']['BackstoryFile']['description']
  • root['schemas']['BackstoryFile']['properties']['ahash']['description']
  • root['schemas']['BackstoryFile']['properties']['authentihash']['description']
  • root['schemas']['BackstoryFile']['properties']['capabilitiesTags']['description']
  • root['schemas']['BackstoryFile']['properties']['createTime']['description']
  • root['schemas']['BackstoryFile']['properties']['embeddedDomains']['description']
  • root['schemas']['BackstoryFile']['properties']['embeddedIps']['description']
  • root['schemas']['BackstoryFile']['properties']['embeddedUrls']['description']
  • root['schemas']['BackstoryFile']['properties']['exifInfo']['description']
  • root['schemas']['BackstoryFile']['properties']['fileMetadata']['description']
  • root['schemas']['BackstoryFile']['properties']['fileType']['description']
  • root['schemas']['BackstoryFile']['properties']['firstSeenTime']['description']
  • root['schemas']['BackstoryFile']['properties']['firstSubmissionTime']['description']
  • root['schemas']['BackstoryFile']['properties']['fullPath']['description']
  • root['schemas']['BackstoryFile']['properties']['lastAccessTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastAnalysisTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastModificationTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastSeenTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastSubmissionTime']['description']
  • root['schemas']['BackstoryFile']['properties']['mainIcon']['description']
  • root['schemas']['BackstoryFile']['properties']['md5']['description']
  • root['schemas']['BackstoryFile']['properties']['mimeType']['description']
  • root['schemas']['BackstoryFile']['properties']['names']['description']
  • root['schemas']['BackstoryFile']['properties']['ntfs']['description']
  • root['schemas']['BackstoryFile']['properties']['pdfInfo']['description']
  • root['schemas']['BackstoryFile']['properties']['peFile']['description']
  • root['schemas']['BackstoryFile']['properties']['prevalence']['description']
  • root['schemas']['BackstoryFile']['properties']['securityResult']['description']
  • root['schemas']['BackstoryFile']['properties']['sha1']['description']
  • root['schemas']['BackstoryFile']['properties']['sha256']['description']
  • root['schemas']['BackstoryFile']['properties']['signatureInfo']['description']
  • root['schemas']['BackstoryFile']['properties']['size']['description']
  • root['schemas']['BackstoryFile']['properties']['ssdeep']['description']
  • root['schemas']['BackstoryFile']['properties']['statDev']['description']
  • root['schemas']['BackstoryFile']['properties']['statFlags']['description']
  • root['schemas']['BackstoryFile']['properties']['statInode']['description']
  • root['schemas']['BackstoryFile']['properties']['statMode']['description']
  • root['schemas']['BackstoryFile']['properties']['statNlink']['description']
  • root['schemas']['BackstoryFile']['properties']['tags']['description']
  • root['schemas']['BackstoryFile']['properties']['vhash']['description']
  • root['schemas']['BoolSequence']['description']
  • root['schemas']['BoolSequence']['properties']['boolVals']['description']
  • root['schemas']['BytesSequence']['description']
  • root['schemas']['BytesSequence']['properties']['bytesVals']['description']
  • root['schemas']['CertSignature']['description']
  • root['schemas']['CertSignature']['properties']['signature']['description']
  • root['schemas']['CertSignature']['properties']['signatureAlgorithm']['description']
  • root['schemas']['Certificate']['description']
  • root['schemas']['Certificate']['properties']['issuer']['description']
  • root['schemas']['Certificate']['properties']['md5']['description']
  • root['schemas']['Certificate']['properties']['notAfter']['description']
  • root['schemas']['Certificate']['properties']['notBefore']['description']
  • root['schemas']['Certificate']['properties']['serial']['description']
  • root['schemas']['Certificate']['properties']['sha1']['description']
  • root['schemas']['Certificate']['properties']['sha256']['description']
  • root['schemas']['Certificate']['properties']['subject']['description']
  • root['schemas']['Certificate']['properties']['version']['description']
  • root['schemas']['Client']['description']
  • root['schemas']['Client']['properties']['certificate']['description']
  • root['schemas']['Client']['properties']['ja3']['description']
  • root['schemas']['Client']['properties']['serverName']['description']
  • root['schemas']['Client']['properties']['supportedCiphers']['description']
  • root['schemas']['Cloud']['description']
  • root['schemas']['Cloud']['properties']['availabilityZone']['description']
  • root['schemas']['Cloud']['properties']['environment']['description']
  • root['schemas']['Cloud']['properties']['project']['description']
  • root['schemas']['Cloud']['properties']['vpc']['description']
  • root['schemas']['Collection']['description']
  • root['schemas']['Collection']['properties']['caseName']['description']
  • root['schemas']['Collection']['properties']['collectionElements']['description']
  • root['schemas']['Collection']['properties']['createdTime']['description']
  • root['schemas']['Collection']['properties']['dataAccessScope']['description']
  • root['schemas']['Collection']['properties']['detection']['description']
  • root['schemas']['Collection']['properties']['detectionTime']['description']
  • root['schemas']['Collection']['properties']['feedbackHistory']['description']
  • root['schemas']['Collection']['properties']['feedbackSummary']['description']
  • root['schemas']['Collection']['properties']['id']['description']
  • root['schemas']['Collection']['properties']['idNamespace']['description']
  • root['schemas']['Collection']['properties']['investigation']['description']
  • root['schemas']['Collection']['properties']['lastUpdatedTime']['description']
  • root['schemas']['Collection']['properties']['responsePlatformInfo']['description']
  • root['schemas']['Collection']['properties']['soarAlert']['description']
  • root['schemas']['Collection']['properties']['soarAlertMetadata']['description']
  • root['schemas']['Collection']['properties']['tags']['description']
  • root['schemas']['Collection']['properties']['timeWindow']['description']
  • root['schemas']['Collection']['properties']['type']['description']
  • root['schemas']['DNSRecord']['description']
  • root['schemas']['DNSRecord']['properties']['expire']['description']
  • root['schemas']['DNSRecord']['properties']['minimum']['description']
  • root['schemas']['DNSRecord']['properties']['priority']['description']
  • root['schemas']['DNSRecord']['properties']['refresh']['description']
  • root['schemas']['DNSRecord']['properties']['retry']['description']
  • root['schemas']['DNSRecord']['properties']['rname']['description']
  • root['schemas']['DNSRecord']['properties']['serial']['description']
  • root['schemas']['DNSRecord']['properties']['ttl']['description']
  • root['schemas']['DNSRecord']['properties']['type']['description']
  • root['schemas']['DNSRecord']['properties']['value']['description']
  • root['schemas']['DashboardChart']['properties']['drillDownConfig']
  • root['schemas']['DataAccessIngestionLabel']['properties']['key']['description']
  • root['schemas']['DataAccessIngestionLabel']['properties']['value']['description']
  • root['schemas']['DataAccessLabels']['properties']['allowScopedAccess']['description']
  • root['schemas']['DataAccessLabels']['properties']['customLabels']['description']
  • root['schemas']['DataAccessLabels']['properties']['ingestionKvLabels']['description']
  • root['schemas']['DataAccessLabels']['properties']['ingestionLabels']['description']
  • root['schemas']['DataAccessLabels']['properties']['logTypes']['description']
  • root['schemas']['DataAccessLabels']['properties']['namespaces']['description']
  • root['schemas']['DataTable']['properties']['updateSource']
  • root['schemas']['DetectionWithSamples']['description']
  • root['schemas']['DetectionWithSamples']['properties']['detection']['description']
  • root['schemas']['DetectionWithSamples']['properties']['nestedDetections']['description']
  • root['schemas']['Dhcp']['description']
  • root['schemas']['Dhcp']['properties']['clientIdentifierString']
  • root['schemas']['Dhcp']['properties']['chaddr']['description']
  • root['schemas']['Dhcp']['properties']['ciaddr']['description']
  • root['schemas']['Dhcp']['properties']['clientHostname']['description']
  • root['schemas']['Dhcp']['properties']['clientIdentifier']['description']
  • root['schemas']['Dhcp']['properties']['file']['description']
  • root['schemas']['Dhcp']['properties']['flags']['description']
  • root['schemas']['Dhcp']['properties']['giaddr']['description']
  • root['schemas']['Dhcp']['properties']['hlen']['description']
  • root['schemas']['Dhcp']['properties']['hops']['description']
  • root['schemas']['Dhcp']['properties']['htype']['description']
  • root['schemas']['Dhcp']['properties']['leaseTimeSeconds']['description']
  • root['schemas']['Dhcp']['properties']['opcode']['description']
  • root['schemas']['Dhcp']['properties']['options']['description']
  • root['schemas']['Dhcp']['properties']['requestedAddress']['description']
  • root['schemas']['Dhcp']['properties']['seconds']['description']
  • root['schemas']['Dhcp']['properties']['siaddr']['description']
  • root['schemas']['Dhcp']['properties']['sname']['description']
  • root['schemas']['Dhcp']['properties']['transactionId']['description']
  • root['schemas']['Dhcp']['properties']['type']['description']
  • root['schemas']['Dhcp']['properties']['yiaddr']['description']
  • root['schemas']['Dns']['description']
  • root['schemas']['Dns']['properties']['additional']['description']
  • root['schemas']['Dns']['properties']['answers']['description']
  • root['schemas']['Dns']['properties']['authoritative']['description']
  • root['schemas']['Dns']['properties']['authority']['description']
  • root['schemas']['Dns']['properties']['id']['description']
  • root['schemas']['Dns']['properties']['opcode']['description']
  • root['schemas']['Dns']['properties']['questions']['description']
  • root['schemas']['Dns']['properties']['recursionAvailable']['description']
  • root['schemas']['Dns']['properties']['recursionDesired']['description']
  • root['schemas']['Dns']['properties']['response']['description']
  • root['schemas']['Dns']['properties']['responseCode']['description']
  • root['schemas']['Dns']['properties']['truncated']['description']
  • root['schemas']['Domain']['description']
  • root['schemas']['Domain']['properties']['admin']['description']
  • root['schemas']['Domain']['properties']['auditUpdateTime']['description']
  • root['schemas']['Domain']['properties']['billing']['description']
  • root['schemas']['Domain']['properties']['categories']['description']
  • root['schemas']['Domain']['properties']['contactEmail']['description']
  • root['schemas']['Domain']['properties']['creationTime']['description']
  • root['schemas']['Domain']['properties']['expirationTime']['description']
  • root['schemas']['Domain']['properties']['favicon']['description']
  • root['schemas']['Domain']['properties']['firstSeenTime']['description']
  • root['schemas']['Domain']['properties']['ianaRegistrarId']['description']
  • root['schemas']['Domain']['properties']['jarm']['description']
  • root['schemas']['Domain']['properties']['lastDnsRecords']['description']
  • root['schemas']['Domain']['properties']['lastDnsRecordsTime']['description']
  • root['schemas']['Domain']['properties']['lastHttpsCertificate']['description']
  • root['schemas']['Domain']['properties']['lastHttpsCertificateTime']['description']
  • root['schemas']['Domain']['properties']['lastSeenTime']['description']
  • root['schemas']['Domain']['properties']['name']['description']
  • root['schemas']['Domain']['properties']['nameServer']['description']
  • root['schemas']['Domain']['properties']['popularityRanks']['description']
  • root['schemas']['Domain']['properties']['prevalence']['description']
  • root['schemas']['Domain']['properties']['privateRegistration']['description']
  • root['schemas']['Domain']['properties']['registrant']['description']
  • root['schemas']['Domain']['properties']['registrar']['description']
  • root['schemas']['Domain']['properties']['registryDataRawText']['description']
  • root['schemas']['Domain']['properties']['status']['description']
  • root['schemas']['Domain']['properties']['tags']['description']
  • root['schemas']['Domain']['properties']['tech']['description']
  • root['schemas']['Domain']['properties']['updateTime']['description']
  • root['schemas']['Domain']['properties']['whoisRecordRawText']['description']
  • root['schemas']['Domain']['properties']['whoisServer']['description']
  • root['schemas']['Domain']['properties']['whoisTime']['description']
  • root['schemas']['Domain']['properties']['zone']['description']
  • root['schemas']['DoubleSequence']['description']
  • root['schemas']['DoubleSequence']['properties']['doubleVals']['description']
  • root['schemas']['EC']['description']
  • root['schemas']['EC']['properties']['oid']['description']
  • root['schemas']['EC']['properties']['pub']['description']
  • root['schemas']['Element']['description']
  • root['schemas']['Element']['properties']['association']['description']
  • root['schemas']['Element']['properties']['label']['description']
  • root['schemas']['Element']['properties']['references']['description']
  • root['schemas']['Element']['properties']['referencesSampled']['description']
  • root['schemas']['Email']['description']
  • root['schemas']['Email']['properties']['bcc']['description']
  • root['schemas']['Email']['properties']['bounceAddress']['description']
  • root['schemas']['Email']['properties']['cc']['description']
  • root['schemas']['Email']['properties']['from']['description']
  • root['schemas']['Email']['properties']['mailId']['description']
  • root['schemas']['Email']['properties']['replyTo']['description']
  • root['schemas']['Email']['properties']['subject']['description']
  • root['schemas']['Email']['properties']['to']['description']
  • root['schemas']['EntityIndicator']['properties']['projectObjectId']['deprecated']
  • root['schemas']['EntityMetadata']['description']
  • root['schemas']['EntityMetadata']['properties']['collectedTimestamp']['description']
  • root['schemas']['EntityMetadata']['properties']['creationTimestamp']['description']
  • root['schemas']['EntityMetadata']['properties']['description']['description']
  • root['schemas']['EntityMetadata']['properties']['entityType']['description']
  • root['schemas']['EntityMetadata']['properties']['eventMetadata']['description']
  • root['schemas']['EntityMetadata']['properties']['extracted']['description']
  • root['schemas']['EntityMetadata']['properties']['feed']['description']
  • root['schemas']['EntityMetadata']['properties']['interval']['description']
  • root['schemas']['EntityMetadata']['properties']['productEntityId']['description']
  • root['schemas']['EntityMetadata']['properties']['productName']['description']
  • root['schemas']['EntityMetadata']['properties']['productVersion']['description']
  • root['schemas']['EntityMetadata']['properties']['sourceLabels']['description']
  • root['schemas']['EntityMetadata']['properties']['sourceType']['description']
  • root['schemas']['EntityMetadata']['properties']['structuredFields']['description']
  • root['schemas']['EntityMetadata']['properties']['threat']['description']
  • root['schemas']['EntityMetadata']['properties']['vendorName']['description']
  • root['schemas']['EntityRisk']['description']
  • root['schemas']['EntityRisk']['properties']['DEPRECATEDRiskScore']['description']
  • root['schemas']['EntityRisk']['properties']['detailUri']['description']
  • root['schemas']['EntityRisk']['properties']['detectionsCount']['description']
  • root['schemas']['EntityRisk']['properties']['firstDetectionTime']['description']
  • root['schemas']['EntityRisk']['properties']['lastDetectionTime']['description']
  • root['schemas']['EntityRisk']['properties']['lastResetTime']['description']
  • root['schemas']['EntityRisk']['properties']['normalizedRiskScore']['description']
  • root['schemas']['EntityRisk']['properties']['rawRiskDelta']['description']
  • root['schemas']['EntityRisk']['properties']['riskDelta']['description']
  • root['schemas']['EntityRisk']['properties']['riskScore']['description']
  • root['schemas']['EntityRisk']['properties']['riskVersion']['description']
  • root['schemas']['EntityRisk']['properties']['riskWindow']['description']
  • root['schemas']['EntityRisk']['properties']['riskWindowSize']['description']
  • root['schemas']['EventCountTimelineBucket']['properties']['baselineTimedEntityCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['entityChangedCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['filteredTimedEntityCount']
  • root['schemas']['ExifInfo']['description']
  • root['schemas']['ExifInfo']['properties']['company']['description']
  • root['schemas']['ExifInfo']['properties']['compilationTime']['description']
  • root['schemas']['ExifInfo']['properties']['entryPoint']['description']
  • root['schemas']['ExifInfo']['properties']['fileDescription']['description']
  • root['schemas']['ExifInfo']['properties']['originalFile']['description']
  • root['schemas']['ExifInfo']['properties']['product']['description']
  • root['schemas']['Extension']['description']
  • root['schemas']['Extension']['properties']['authorityKeyId']['description']
  • root['schemas']['Extension']['properties']['ca']['description']
  • root['schemas']['Extension']['properties']['caInfoAccess']['description']
  • root['schemas']['Extension']['properties']['certTemplateNameDc']['description']
  • root['schemas']['Extension']['properties']['certificatePolicies']['description']
  • root['schemas']['Extension']['properties']['crlDistributionPoints']['description']
  • root['schemas']['Extension']['properties']['extendedKeyUsage']['description']
  • root['schemas']['Extension']['properties']['keyUsage']['description']
  • root['schemas']['Extension']['properties']['netscapeCertComment']['description']
  • root['schemas']['Extension']['properties']['netscapeCertificate']['description']
  • root['schemas']['Extension']['properties']['oldAuthorityKeyId']['description']
  • root['schemas']['Extension']['properties']['peLogotype']['description']
  • root['schemas']['Extension']['properties']['subjectAlternativeName']['description']
  • root['schemas']['Extension']['properties']['subjectKeyId']['description']
  • root['schemas']['Extensions']['description']
  • root['schemas']['Extensions']['properties']['auth']['description']
  • root['schemas']['Extensions']['properties']['vulns']['description']
  • root['schemas']['Favicon']['description']
  • root['schemas']['Favicon']['properties']['dhash']['description']
  • root['schemas']['Favicon']['properties']['rawMd5']['description']
  • root['schemas']['FeedDetails']['properties']['azureBlobStoreV2Settings']
  • root['schemas']['FeedDetails']['properties']['trellixHxAlertsSettings']
  • root['schemas']['FeedDetails']['properties']['trellixHxHostsSettings']
  • root['schemas']['FileMetadata']['description']
  • root['schemas']['FileMetadata']['properties']['pe']['description']
  • root['schemas']['FileMetadataCodesign']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['compilationTime']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['format']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['id']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['teamId']['description']
  • root['schemas']['FileMetadataImports']['description']
  • root['schemas']['FileMetadataImports']['properties']['functions']['description']
  • root['schemas']['FileMetadataImports']['properties']['library']['description']
  • root['schemas']['FileMetadataPE']['description']
  • root['schemas']['FileMetadataPE']['properties']['compilationExiftoolTime']['description']
  • root['schemas']['FileMetadataPE']['properties']['compilationTime']['description']
  • root['schemas']['FileMetadataPE']['properties']['entryPoint']['description']
  • root['schemas']['FileMetadataPE']['properties']['entryPointExiftool']['description']
  • root['schemas']['FileMetadataPE']['properties']['imphash']['description']
  • root['schemas']['FileMetadataPE']['properties']['imports']['description']
  • root['schemas']['FileMetadataPE']['properties']['resource']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesLanguageCount']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesLanguageCountStr']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesTypeCount']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesTypeCountStr']['description']
  • root['schemas']['FileMetadataPE']['properties']['section']['description']
  • root['schemas']['FileMetadataPE']['properties']['signatureInfo']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['entropy']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['fileType']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['filetypeMagic']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['languageCode']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['sha256Hex']['description']
  • root['schemas']['FileMetadataSection']['description']
  • root['schemas']['FileMetadataSection']['properties']['entropy']['description']
  • root['schemas']['FileMetadataSection']['properties']['md5Hex']['description']
  • root['schemas']['FileMetadataSection']['properties']['name']['description']
  • root['schemas']['FileMetadataSection']['properties']['rawSizeBytes']['description']
  • root['schemas']['FileMetadataSection']['properties']['virtualSizeBytes']['description']
  • root['schemas']['FileMetadataSignatureInfo']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['signer']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['signers']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['verificationMessage']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['verified']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['x509']['description']
  • root['schemas']['FindingVariable']['description']
  • root['schemas']['FindingVariable']['properties']['boolSeq']['description']
  • root['schemas']['FindingVariable']['properties']['boolVal']['description']
  • root['schemas']['FindingVariable']['properties']['bytesSeq']['description']
  • root['schemas']['FindingVariable']['properties']['bytesVal']['description']
  • root['schemas']['FindingVariable']['properties']['doubleSeq']['description']
  • root['schemas']['FindingVariable']['properties']['doubleVal']['description']
  • root['schemas']['FindingVariable']['properties']['int64Seq']['description']
  • root['schemas']['FindingVariable']['properties']['int64Val']['description']
  • root['schemas']['FindingVariable']['properties']['nullVal']['description']
  • root['schemas']['FindingVariable']['properties']['sourcePath']['description']
  • root['schemas']['FindingVariable']['properties']['stringSeq']['description']
  • root['schemas']['FindingVariable']['properties']['stringVal']['description']
  • root['schemas']['FindingVariable']['properties']['type']['description']
  • root['schemas']['FindingVariable']['properties']['uint64Seq']['description']
  • root['schemas']['FindingVariable']['properties']['uint64Val']['description']
  • root['schemas']['FindingVariable']['properties']['value']['description']
  • root['schemas']['Ftp']['description']
  • root['schemas']['Ftp']['properties']['command']['description']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnData']['properties']['columnMetadata']
  • root['schemas']['Group']['description']
  • root['schemas']['Group']['properties']['attribute']['description']
  • root['schemas']['Group']['properties']['creationTime']['description']
  • root['schemas']['Group']['properties']['emailAddresses']['description']
  • root['schemas']['Group']['properties']['groupDisplayName']['description']
  • root['schemas']['Group']['properties']['productObjectId']['description']
  • root['schemas']['Group']['properties']['windowsSid']['description']
  • root['schemas']['Hardware']['description']
  • root['schemas']['Hardware']['properties']['cpuClockSpeed']['description']
  • root['schemas']['Hardware']['properties']['cpuMaxClockSpeed']['description']
  • root['schemas']['Hardware']['properties']['cpuModel']['description']
  • root['schemas']['Hardware']['properties']['cpuNumberCores']['description']
  • root['schemas']['Hardware']['properties']['cpuPlatform']['description']
  • root['schemas']['Hardware']['properties']['manufacturer']['description']
  • root['schemas']['Hardware']['properties']['model']['description']
  • root['schemas']['Hardware']['properties']['ram']['description']
  • root['schemas']['Hardware']['properties']['serialNumber']['description']
  • root['schemas']['Http']['description']
  • root['schemas']['Http']['properties']['method']['description']
  • root['schemas']['Http']['properties']['parsedUserAgent']['description']
  • root['schemas']['Http']['properties']['referralUrl']['description']
  • root['schemas']['Http']['properties']['responseCode']['description']
  • root['schemas']['Http']['properties']['userAgent']['description']
  • root['schemas']['IDM']['properties']['assetEnrichmentInfo']
  • root['schemas']['IDM']['properties']['geoipEnrichmentInfo']
  • root['schemas']['IDM']['properties']['processEnrichmentInfo']
  • root['schemas']['IDM']['properties']['userEnrichmentInfo']
  • root['schemas']['IDM']['properties']['vtFilemetadataEnrichmentInfo']
  • root['schemas']['Id']['description']
  • root['schemas']['Id']['properties']['id']['description']
  • root['schemas']['Id']['properties']['namespace']['description']
  • root['schemas']['Id']['properties']['stringId']['description']
  • root['schemas']['Int64Sequence']['description']
  • root['schemas']['Int64Sequence']['properties']['int64Vals']['description']
  • root['schemas']['Investigation']['description']
  • root['schemas']['Investigation']['properties']['comments']['description']
  • root['schemas']['Investigation']['properties']['priority']['description']
  • root['schemas']['Investigation']['properties']['reason']['description']
  • root['schemas']['Investigation']['properties']['reputation']['description']
  • root['schemas']['Investigation']['properties']['riskScore']['description']
  • root['schemas']['Investigation']['properties']['rootCause']['description']
  • root['schemas']['Investigation']['properties']['severityScore']['description']
  • root['schemas']['Investigation']['properties']['status']['description']
  • root['schemas']['Investigation']['properties']['verdict']['description']
  • root['schemas']['IoCStats']['description']
  • root['schemas']['IoCStats']['properties']['benignCount']['description']
  • root['schemas']['IoCStats']['properties']['firstLevelSource']['description']
  • root['schemas']['IoCStats']['properties']['iocStatsType']['description']
  • root['schemas']['IoCStats']['properties']['maliciousCount']['description']
  • root['schemas']['IoCStats']['properties']['quality']['description']
  • root['schemas']['IoCStats']['properties']['responseCount']['description']
  • root['schemas']['IoCStats']['properties']['secondLevelSource']['description']
  • root['schemas']['IoCStats']['properties']['sourceCount']['description']
  • root['schemas']['IocAssociation']['properties']['associatedActors']['deprecated']
  • root['schemas']['IocAssociation']['properties']['countryCode']['deprecated']
  • root['schemas']['Label']['description']
  • root['schemas']['Label']['properties']['key']['description']
  • root['schemas']['Label']['properties']['rbacEnabled']['description']
  • root['schemas']['Label']['properties']['source']['description']
  • root['schemas']['Label']['properties']['value']['description']
  • root['schemas']['LegacyFetchUdmSearchCsvRequest']['properties']['skipSafeDownload']
  • root['schemas']['LegacyFetchUdmSearchCsvResponse']['properties']['failureCsvFieldValidations']
  • root['schemas']['LegacyFetchUdmSearchViewRequest']['properties']['federationMetadata']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageToken']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageToken']
  • root['schemas']['Location']['description']
  • root['schemas']['Location']['properties']['city']['description']
  • root['schemas']['Location']['properties']['countryOrRegion']['description']
  • root['schemas']['Location']['properties']['deskName']['description']
  • root['schemas']['Location']['properties']['floorName']['description']
  • root['schemas']['Location']['properties']['name']['description']
  • root['schemas']['Location']['properties']['regionCoordinates']['description']
  • root['schemas']['Location']['properties']['regionLatitude']['description']
  • root['schemas']['Location']['properties']['regionLongitude']['description']
  • root['schemas']['Location']['properties']['state']['description']
  • root['schemas']['LogType']['properties']['customLogTypeLabel']
  • root['schemas']['LogType']['properties']['isCustom']
  • root['schemas']['LogType']['properties']['productSource']
  • root['schemas']['Measure']['description']
  • root['schemas']['Measure']['properties']['aggregateFunction']['description']
  • root['schemas']['Measure']['properties']['value']['description']
  • root['schemas']['Metadata']['description']
  • root['schemas']['Metadata']['properties']['baseLabels']['description']
  • root['schemas']['Metadata']['properties']['collectedTimestamp']['description']
  • root['schemas']['Metadata']['properties']['description']['description']
  • root['schemas']['Metadata']['properties']['enrichmentLabels']['description']
  • root['schemas']['Metadata']['properties']['enrichmentState']['description']
  • root['schemas']['Metadata']['properties']['eventTimestamp']['description']
  • root['schemas']['Metadata']['properties']['eventType']['description']
  • root['schemas']['Metadata']['properties']['id']['description']
  • root['schemas']['Metadata']['properties']['ingestedTimestamp']['description']
  • root['schemas']['Metadata']['properties']['ingestionLabels']['description']
  • root['schemas']['Metadata']['properties']['logType']['description']
  • root['schemas']['Metadata']['properties']['productDeploymentId']['description']
  • root['schemas']['Metadata']['properties']['productEventType']['description']
  • root['schemas']['Metadata']['properties']['productLogId']['description']
  • root['schemas']['Metadata']['properties']['productName']['description']
  • root['schemas']['Metadata']['properties']['productVersion']['description']
  • root['schemas']['Metadata']['properties']['structuredFields']['description']
  • root['schemas']['Metadata']['properties']['tags']['description']
  • root['schemas']['Metadata']['properties']['urlBackToProduct']['description']
  • root['schemas']['Metadata']['properties']['vendorName']['description']
  • root['schemas']['Metric']['description']
  • root['schemas']['Metric']['properties']['dimensions']['description']
  • root['schemas']['Metric']['properties']['exportWindow']['description']
  • root['schemas']['Metric']['properties']['firstSeen']['description']
  • root['schemas']['Metric']['properties']['lastSeen']['description']
  • root['schemas']['Metric']['properties']['metricName']['description']
  • root['schemas']['Metric']['properties']['sumMeasure']['description']
  • root['schemas']['Metric']['properties']['totalEvents']['description']
  • root['schemas']['Network']['description']
  • root['schemas']['Network']['properties']['applicationProtocol']['description']
  • root['schemas']['Network']['properties']['applicationProtocolVersion']['description']
  • root['schemas']['Network']['properties']['asn']['description']
  • root['schemas']['Network']['properties']['carrierName']['description']
  • root['schemas']['Network']['properties']['communityId']['description']
  • root['schemas']['Network']['properties']['dhcp']['description']
  • root['schemas']['Network']['properties']['direction']['description']
  • root['schemas']['Network']['properties']['dns']['description']
  • root['schemas']['Network']['properties']['dnsDomain']['description']
  • root['schemas']['Network']['properties']['email']['description']
  • root['schemas']['Network']['properties']['ftp']['description']
  • root['schemas']['Network']['properties']['http']['description']
  • root['schemas']['Network']['properties']['ipProtocol']['description']
  • root['schemas']['Network']['properties']['ipSubnetRange']['description']
  • root['schemas']['Network']['properties']['organizationName']['description']
  • root['schemas']['Network']['properties']['parentSessionId']['description']
  • root['schemas']['Network']['properties']['receivedBytes']['description']
  • root['schemas']['Network']['properties']['receivedPackets']['description']
  • root['schemas']['Network']['properties']['sentBytes']['description']
  • root['schemas']['Network']['properties']['sentPackets']['description']
  • root['schemas']['Network']['properties']['sessionDuration']['description']
  • root['schemas']['Network']['properties']['sessionId']['description']
  • root['schemas']['Network']['properties']['smtp']['description']
  • root['schemas']['Network']['properties']['tls']['description']
  • root['schemas']['Noun']['description']
  • root['schemas']['Noun']['properties']['administrativeDomain']['description']
  • root['schemas']['Noun']['properties']['application']['description']
  • root['schemas']['Noun']['properties']['artifact']['description']
  • root['schemas']['Noun']['properties']['asset']['description']
  • root['schemas']['Noun']['properties']['assetId']['description']
  • root['schemas']['Noun']['properties']['cloud']['description']
  • root['schemas']['Noun']['properties']['domain']['description']
  • root['schemas']['Noun']['properties']['email']['description']
  • root['schemas']['Noun']['properties']['file']['description']
  • root['schemas']['Noun']['properties']['group']['description']
  • root['schemas']['Noun']['properties']['hostname']['description']
  • root['schemas']['Noun']['properties']['investigation']['description']
  • root['schemas']['Noun']['properties']['ip']['description']
  • root['schemas']['Noun']['properties']['ipGeoArtifact']['description']
  • root['schemas']['Noun']['properties']['ipLocation']['description']
  • root['schemas']['Noun']['properties']['labels']['description']
  • root['schemas']['Noun']['properties']['location']['description']
  • root['schemas']['Noun']['properties']['mac']['description']
  • root['schemas']['Noun']['properties']['namespace']['description']
  • root['schemas']['Noun']['properties']['natIp']['description']
  • root['schemas']['Noun']['properties']['natPort']['description']
  • root['schemas']['Noun']['properties']['network']['description']
  • root['schemas']['Noun']['properties']['objectReference']['description']
  • root['schemas']['Noun']['properties']['platform']['description']
  • root['schemas']['Noun']['properties']['platformPatchLevel']['description']
  • root['schemas']['Noun']['properties']['platformVersion']['description']
  • root['schemas']['Noun']['properties']['port']['description']
  • root['schemas']['Noun']['properties']['process']['description']
  • root['schemas']['Noun']['properties']['processAncestors']['description']
  • root['schemas']['Noun']['properties']['registry']['description']
  • root['schemas']['Noun']['properties']['resource']['description']
  • root['schemas']['Noun']['properties']['resourceAncestors']['description']
  • root['schemas']['Noun']['properties']['securityResult']['description']
  • root['schemas']['Noun']['properties']['url']['description']
  • root['schemas']['Noun']['properties']['urlMetadata']['description']
  • root['schemas']['Noun']['properties']['user']['description']
  • root['schemas']['Noun']['properties']['userManagementChain']['description']
  • root['schemas']['NtfsFileMetadata']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['changeTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameAccessTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameChangeTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameCreateTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameModifyTime']['description']
  • root['schemas']['Option']['description']
  • root['schemas']['Option']['properties']['code']['description']
  • root['schemas']['Option']['properties']['data']['description']
  • root['schemas']['PDFInfo']['description']
  • root['schemas']['PDFInfo']['properties']['acroform']['description']
  • root['schemas']['PDFInfo']['properties']['autoaction']['description']
  • root['schemas']['PDFInfo']['properties']['embeddedFile']['description']
  • root['schemas']['PDFInfo']['properties']['encrypted']['description']
  • root['schemas']['PDFInfo']['properties']['endobjCount']['description']
  • root['schemas']['PDFInfo']['properties']['endstreamCount']['description']
  • root['schemas']['PDFInfo']['properties']['flash']['description']
  • root['schemas']['PDFInfo']['properties']['header']['description']
  • root['schemas']['PDFInfo']['properties']['javascript']['description']
  • root['schemas']['PDFInfo']['properties']['jbig2Compression']['description']
  • root['schemas']['PDFInfo']['properties']['js']['description']
  • root['schemas']['PDFInfo']['properties']['launchActionCount']['description']
  • root['schemas']['PDFInfo']['properties']['objCount']['description']
  • root['schemas']['PDFInfo']['properties']['objectStreamCount']['description']
  • root['schemas']['PDFInfo']['properties']['openaction']['description']
  • root['schemas']['PDFInfo']['properties']['pageCount']['description']
  • root['schemas']['PDFInfo']['properties']['startxref']['description']
  • root['schemas']['PDFInfo']['properties']['streamCount']['description']
  • root['schemas']['PDFInfo']['properties']['suspiciousColors']['description']
  • root['schemas']['PDFInfo']['properties']['trailer']['description']
  • root['schemas']['PDFInfo']['properties']['xfa']['description']
  • root['schemas']['PDFInfo']['properties']['xref']['description']
  • root['schemas']['ParserExtension']['properties']['dynamicParsing']
  • root['schemas']['PeFileMetadata']['description']
  • root['schemas']['PeFileMetadata']['properties']['importHash']['description']
  • root['schemas']['Permission']['description']
  • root['schemas']['Permission']['properties']['description']['description']
  • root['schemas']['Permission']['properties']['name']['description']
  • root['schemas']['Permission']['properties']['type']['description']
  • root['schemas']['PlatformSoftware']['description']
  • root['schemas']['PlatformSoftware']['properties']['platform']['description']
  • root['schemas']['PlatformSoftware']['properties']['platformPatchLevel']['description']
  • root['schemas']['PlatformSoftware']['properties']['platformVersion']['description']
  • root['schemas']['PopularityRank']['description']
  • root['schemas']['PopularityRank']['properties']['giver']['description']
  • root['schemas']['PopularityRank']['properties']['ingestionTime']['description']
  • root['schemas']['PopularityRank']['properties']['rank']['description']
  • root['schemas']['Prevalence']['description']
  • root['schemas']['Prevalence']['properties']['dayCount']['description']
  • root['schemas']['Prevalence']['properties']['dayMax']['description']
  • root['schemas']['Prevalence']['properties']['dayMaxSubDomains']['description']
  • root['schemas']['Prevalence']['properties']['rollingMax']['description']
  • root['schemas']['Prevalence']['properties']['rollingMaxSubDomains']['description']
  • root['schemas']['Process']['description']
  • root['schemas']['Process']['properties']['accessMask']['description']
  • root['schemas']['Process']['properties']['commandLine']['description']
  • root['schemas']['Process']['properties']['commandLineHistory']['description']
  • root['schemas']['Process']['properties']['egid']['description']
  • root['schemas']['Process']['properties']['euid']['description']
  • root['schemas']['Process']['properties']['file']['description']
  • root['schemas']['Process']['properties']['integrityLevelRid']['description']
  • root['schemas']['Process']['properties']['parentPid']['description']
  • root['schemas']['Process']['properties']['parentProcess']['description']
  • root['schemas']['Process']['properties']['pgid']['description']
  • root['schemas']['Process']['properties']['pid']['description']
  • root['schemas']['Process']['properties']['productSpecificParentProcessId']['description']
  • root['schemas']['Process']['properties']['productSpecificProcessId']['description']
  • root['schemas']['Process']['properties']['rgid']['description']
  • root['schemas']['Process']['properties']['ruid']['description']
  • root['schemas']['Process']['properties']['sessionLeaderPid']['description']
  • root['schemas']['Process']['properties']['tokenElevationType']['description']
  • root['schemas']['Process']['properties']['tty']['description']
  • root['schemas']['ProviderMLVerdict']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['benignCount']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['confidenceScore']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['maliciousCount']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['mandiantSources']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['sourceProvider']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['thirdPartySources']['description']
  • root['schemas']['PublicKey']['description']
  • root['schemas']['PublicKey']['properties']['algorithm']['description']
  • root['schemas']['PublicKey']['properties']['rsa']['description']
  • root['schemas']['Question']['description']
  • root['schemas']['Question']['properties']['class']['description']
  • root['schemas']['Question']['properties']['name']['description']
  • root['schemas']['Question']['properties']['prevalence']['description']
  • root['schemas']['Question']['properties']['type']['description']
  • root['schemas']['RSA']['description']
  • root['schemas']['RSA']['properties']['exponent']['description']
  • root['schemas']['RSA']['properties']['keySize']['description']
  • root['schemas']['RSA']['properties']['modulus']['description']
  • root['schemas']['Reference']['description']
  • root['schemas']['Reference']['properties']['entity']['description']
  • root['schemas']['Reference']['properties']['event']['description']
  • root['schemas']['Reference']['properties']['id']['description']
  • root['schemas']['Registry']['description']
  • root['schemas']['Registry']['properties']['registryKey']['description']
  • root['schemas']['Registry']['properties']['registryValueData']['description']
  • root['schemas']['Registry']['properties']['registryValueName']['description']
  • root['schemas']['Registry']['properties']['registryValueType']['description']
  • root['schemas']['Relation']['description']
  • root['schemas']['Relation']['properties']['direction']['description']
  • root['schemas']['Relation']['properties']['entity']['description']
  • root['schemas']['Relation']['properties']['entityLabel']['description']
  • root['schemas']['Relation']['properties']['entityType']['description']
  • root['schemas']['Relation']['properties']['relationship']['description']
  • root['schemas']['Relation']['properties']['uid']['description']
  • root['schemas']['Resource']['description']
  • root['schemas']['Resource']['properties']['attribute']['description']
  • root['schemas']['Resource']['properties']['id']['description']
  • root['schemas']['Resource']['properties']['name']['description']
  • root['schemas']['Resource']['properties']['parent']['description']
  • root['schemas']['Resource']['properties']['productObjectId']['description']
  • root['schemas']['Resource']['properties']['resourceSubtype']['description']
  • root['schemas']['Resource']['properties']['resourceType']['description']
  • root['schemas']['Resource']['properties']['type']['description']
  • root['schemas']['ResourceRecord']['description']
  • root['schemas']['ResourceRecord']['properties']['binaryData']['description']
  • root['schemas']['ResourceRecord']['properties']['class']['description']
  • root['schemas']['ResourceRecord']['properties']['data']['description']
  • root['schemas']['ResourceRecord']['properties']['name']['description']
  • root['schemas']['ResourceRecord']['properties']['ttl']['description']
  • root['schemas']['ResourceRecord']['properties']['type']['description']
  • root['schemas']['ResponsePlatformInfo']['description']
  • root['schemas']['ResponsePlatformInfo']['properties']['alertId']['description']
  • root['schemas']['ResponsePlatformInfo']['properties']['responsePlatformType']['description']
  • root['schemas']['RiskDelta']['description']
  • root['schemas']['RiskDelta']['properties']['previousRangeEndTime']['description']
  • root['schemas']['RiskDelta']['properties']['previousRiskScore']['description']
  • root['schemas']['RiskDelta']['properties']['riskScoreDelta']['description']
  • root['schemas']['RiskDelta']['properties']['riskScoreNumericDelta']['description']
  • root['schemas']['Role']['description']
  • root['schemas']['Role']['properties']['description']['description']
  • root['schemas']['Role']['properties']['name']['description']
  • root['schemas']['Role']['properties']['type']['description']
  • root['schemas']['SSLCertificate']['description']
  • root['schemas']['SSLCertificate']['properties']['certExtensions']['description']
  • root['schemas']['SSLCertificate']['properties']['certSignature']['description']
  • root['schemas']['SSLCertificate']['properties']['ec']['description']
  • root['schemas']['SSLCertificate']['properties']['extension']['description']
  • root['schemas']['SSLCertificate']['properties']['firstSeenTime']['description']
  • root['schemas']['SSLCertificate']['properties']['issuer']['description']
  • root['schemas']['SSLCertificate']['properties']['publicKey']['description']
  • root['schemas']['SSLCertificate']['properties']['serialNumber']['description']
  • root['schemas']['SSLCertificate']['properties']['signatureAlgorithm']['description']
  • root['schemas']['SSLCertificate']['properties']['size']['description']
  • root['schemas']['SSLCertificate']['properties']['subject']['description']
  • root['schemas']['SSLCertificate']['properties']['thumbprint']['description']
  • root['schemas']['SSLCertificate']['properties']['thumbprintSha256']['description']
  • root['schemas']['SSLCertificate']['properties']['validity']['description']
  • root['schemas']['SSLCertificate']['properties']['version']['description']
  • root['schemas']['SecurityResult']['description']
  • root['schemas']['SecurityResult']['properties']['detectionDepth']
  • root['schemas']['SecurityResult']['properties']['about']['description']
  • root['schemas']['SecurityResult']['properties']['action']['description']
  • root['schemas']['SecurityResult']['properties']['actionDetails']['description']
  • root['schemas']['SecurityResult']['properties']['alertState']['description']
  • root['schemas']['SecurityResult']['properties']['analyticsMetadata']['description']
  • root['schemas']['SecurityResult']['properties']['associations']['description']
  • root['schemas']['SecurityResult']['properties']['attackDetails']['description']
  • root['schemas']['SecurityResult']['properties']['campaigns']['description']
  • root['schemas']['SecurityResult']['properties']['category']['description']
  • root['schemas']['SecurityResult']['properties']['categoryDetails']['description']
  • root['schemas']['SecurityResult']['properties']['confidence']['description']
  • root['schemas']['SecurityResult']['properties']['confidenceDetails']['description']
  • root['schemas']['SecurityResult']['properties']['confidenceScore']['description']
  • root['schemas']['SecurityResult']['properties']['description']['description']
  • root['schemas']['SecurityResult']['properties']['detectionFields']['description']
  • root['schemas']['SecurityResult']['properties']['firstDiscoveredTime']['description']
  • root['schemas']['SecurityResult']['properties']['lastDiscoveredTime']['description']
  • root['schemas']['SecurityResult']['properties']['lastUpdatedTime']['description']
  • root['schemas']['SecurityResult']['properties']['outcomes']['description']
  • root['schemas']['SecurityResult']['properties']['priority']['description']
  • root['schemas']['SecurityResult']['properties']['priorityDetails']['description']
  • root['schemas']['SecurityResult']['properties']['reports']['description']
  • root['schemas']['SecurityResult']['properties']['riskScore']['description']
  • root['schemas']['SecurityResult']['properties']['ruleAuthor']['description']
  • root['schemas']['SecurityResult']['properties']['ruleId']['description']
  • root['schemas']['SecurityResult']['properties']['ruleLabels']['description']
  • root['schemas']['SecurityResult']['properties']['ruleName']['description']
  • root['schemas']['SecurityResult']['properties']['ruleSet']['description']
  • root['schemas']['SecurityResult']['properties']['ruleSetDisplayName']['description']
  • root['schemas']['SecurityResult']['properties']['ruleType']['description']
  • root['schemas']['SecurityResult']['properties']['ruleVersion']['description']
  • root['schemas']['SecurityResult']['properties']['rulesetCategoryDisplayName']['description']
  • root['schemas']['SecurityResult']['properties']['severity']['description']
  • root['schemas']['SecurityResult']['properties']['severityDetails']['description']
  • root['schemas']['SecurityResult']['properties']['summary']['description']
  • root['schemas']['SecurityResult']['properties']['threatFeedName']['description']
  • root['schemas']['SecurityResult']['properties']['threatId']['description']
  • root['schemas']['SecurityResult']['properties']['threatIdNamespace']['description']
  • root['schemas']['SecurityResult']['properties']['threatName']['description']
  • root['schemas']['SecurityResult']['properties']['threatStatus']['description']
  • root['schemas']['SecurityResult']['properties']['threatVerdict']['description']
  • root['schemas']['SecurityResult']['properties']['urlBackToProduct']['description']
  • root['schemas']['SecurityResult']['properties']['variables']['description']
  • root['schemas']['SecurityResult']['properties']['verdict']['description']
  • root['schemas']['SecurityResult']['properties']['verdictInfo']['description']
  • root['schemas']['Series']['properties']['metricTrendConfig']
  • root['schemas']['Server']['description']
  • root['schemas']['Server']['properties']['certificate']['description']
  • root['schemas']['Server']['properties']['ja3s']['description']
  • root['schemas']['SignatureInfo']['description']
  • root['schemas']['SignatureInfo']['properties']['codesign']['description']
  • root['schemas']['SignatureInfo']['properties']['sigcheck']['description']
  • root['schemas']['SignerInfo']['description']
  • root['schemas']['SignerInfo']['properties']['certIssuer']['description']
  • root['schemas']['SignerInfo']['properties']['name']['description']
  • root['schemas']['SignerInfo']['properties']['status']['description']
  • root['schemas']['SignerInfo']['properties']['validUsage']['description']
  • root['schemas']['Smtp']['description']
  • root['schemas']['Smtp']['properties']['helo']['description']
  • root['schemas']['Smtp']['properties']['isTls']['description']
  • root['schemas']['Smtp']['properties']['isWebmail']['description']
  • root['schemas']['Smtp']['properties']['mailFrom']['description']
  • root['schemas']['Smtp']['properties']['messagePath']['description']
  • root['schemas']['Smtp']['properties']['rcptTo']['description']
  • root['schemas']['Smtp']['properties']['serverResponse']['description']
  • root['schemas']['SoarAlertMetadata']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['alertId']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['product']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceRule']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceSystem']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceSystemTicketId']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceSystemUri']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['vendor']['description']
  • root['schemas']['Software']['description']
  • root['schemas']['Software']['properties']['description']['description']
  • root['schemas']['Software']['properties']['name']['description']
  • root['schemas']['Software']['properties']['permissions']['description']
  • root['schemas']['Software']['properties']['vendorName']['description']
  • root['schemas']['Software']['properties']['version']['description']
  • root['schemas']['Source']['description']
  • root['schemas']['Source']['properties']['benignCount']['description']
  • root['schemas']['Source']['properties']['maliciousCount']['description']
  • root['schemas']['Source']['properties']['name']['description']
  • root['schemas']['Source']['properties']['quality']['description']
  • root['schemas']['Source']['properties']['responseCount']['description']
  • root['schemas']['Source']['properties']['sourceCount']['description']
  • root['schemas']['Source']['properties']['threatIntelligenceSources']['description']
  • root['schemas']['StringSequence']['description']
  • root['schemas']['StringSequence']['properties']['stringVals']['description']
  • root['schemas']['StringToInt64MapEntry']['properties']['key']['description']
  • root['schemas']['StringToInt64MapEntry']['properties']['value']['description']
  • root['schemas']['Subject']['description']
  • root['schemas']['Subject']['properties']['commonName']['description']
  • root['schemas']['Subject']['properties']['countryName']['description']
  • root['schemas']['Subject']['properties']['locality']['description']
  • root['schemas']['Subject']['properties']['organization']['description']
  • root['schemas']['Subject']['properties']['organizationalUnit']['description']
  • root['schemas']['Subject']['properties']['stateOrProvinceName']['description']
  • root['schemas']['Tactic']['description']
  • root['schemas']['Tactic']['properties']['id']['description']
  • root['schemas']['Tactic']['properties']['name']['description']
  • root['schemas']['Tags']['description']
  • root['schemas']['Tags']['properties']['dataTapConfigName']['description']
  • root['schemas']['Tags']['properties']['tenantId']['description']
  • root['schemas']['Technique']['description']
  • root['schemas']['Technique']['properties']['id']['description']
  • root['schemas']['Technique']['properties']['name']['description']
  • root['schemas']['Technique']['properties']['subtechniqueId']['description']
  • root['schemas']['Technique']['properties']['subtechniqueName']['description']
  • root['schemas']['TimeOff']['description']
  • root['schemas']['TimeOff']['properties']['description']['description']
  • root['schemas']['TimeOff']['properties']['interval']['description']
  • root['schemas']['Tls']['description']
  • root['schemas']['Tls']['properties']['cipher']['description']
  • root['schemas']['Tls']['properties']['client']['description']
  • root['schemas']['Tls']['properties']['curve']['description']
  • root['schemas']['Tls']['properties']['established']['description']
  • root['schemas']['Tls']['properties']['nextProtocol']['description']
  • root['schemas']['Tls']['properties']['resumed']['description']
  • root['schemas']['Tls']['properties']['server']['description']
  • root['schemas']['Tls']['properties']['version']['description']
  • root['schemas']['Tls']['properties']['versionProtocol']['description']
  • root['schemas']['Tracker']['description']
  • root['schemas']['Tracker']['properties']['id']['description']
  • root['schemas']['Tracker']['properties']['timestamp']['description']
  • root['schemas']['Tracker']['properties']['tracker']['description']
  • root['schemas']['Tracker']['properties']['url']['description']
  • root['schemas']['Tunnels']['description']
  • root['schemas']['Tunnels']['properties']['provider']['description']
  • root['schemas']['Tunnels']['properties']['type']['description']
  • root['schemas']['UDM']['description']
  • root['schemas']['UDM']['properties']['about']['description']
  • root['schemas']['UDM']['properties']['additional']['description']
  • root['schemas']['UDM']['properties']['extensions']['description']
  • root['schemas']['UDM']['properties']['extracted']['description']
  • root['schemas']['UDM']['properties']['intermediary']['description']
  • root['schemas']['UDM']['properties']['metadata']['description']
  • root['schemas']['UDM']['properties']['network']['description']
  • root['schemas']['UDM']['properties']['observer']['description']
  • root['schemas']['UDM']['properties']['principal']['description']
  • root['schemas']['UDM']['properties']['securityResult']['description']
  • root['schemas']['UDM']['properties']['src']['description']
  • root['schemas']['UDM']['properties']['target']['description']
  • root['schemas']['UdmEventInfo']['properties']['connectedComponentLabel']
  • root['schemas']['UdmEventInfo']['properties']['datatableRowInfo']
  • root['schemas']['UdmEventInfo']['properties']['tenantId']
  • root['schemas']['UdmEventList']['properties']['datatableInfo']
  • root['schemas']['Uint64Sequence']['description']
  • root['schemas']['Uint64Sequence']['properties']['uint64Vals']['description']
  • root['schemas']['Url']['description']
  • root['schemas']['Url']['properties']['categories']['description']
  • root['schemas']['Url']['properties']['favicon']['description']
  • root['schemas']['Url']['properties']['htmlMeta']['description']
  • root['schemas']['Url']['properties']['lastFinalUrl']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseCode']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseContentLength']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseContentSha256']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseCookies']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseHeaders']['description']
  • root['schemas']['Url']['properties']['tags']['description']
  • root['schemas']['Url']['properties']['title']['description']
  • root['schemas']['Url']['properties']['trackers']['description']
  • root['schemas']['Url']['properties']['url']['description']
  • root['schemas']['User']['description']
  • root['schemas']['User']['properties']['accountExpirationTime']['description']
  • root['schemas']['User']['properties']['accountLockoutTime']['description']
  • root['schemas']['User']['properties']['accountType']['description']
  • root['schemas']['User']['properties']['attribute']['description']
  • root['schemas']['User']['properties']['companyName']['description']
  • root['schemas']['User']['properties']['department']['description']
  • root['schemas']['User']['properties']['emailAddresses']['description']
  • root['schemas']['User']['properties']['employeeId']['description']
  • root['schemas']['User']['properties']['firstName']['description']
  • root['schemas']['User']['properties']['firstSeenTime']['description']
  • root['schemas']['User']['properties']['groupIdentifiers']['description']
  • root['schemas']['User']['properties']['groupid']['description']
  • root['schemas']['User']['properties']['hireDate']['description']
  • root['schemas']['User']['properties']['lastBadPasswordAttemptTime']['description']
  • root['schemas']['User']['properties']['lastLoginTime']['description']
  • root['schemas']['User']['properties']['lastName']['description']
  • root['schemas']['User']['properties']['lastPasswordChangeTime']['description']
  • root['schemas']['User']['properties']['managers']['description']
  • root['schemas']['User']['properties']['middleName']['description']
  • root['schemas']['User']['properties']['officeAddress']['description']
  • root['schemas']['User']['properties']['passwordExpirationTime']['description']
  • root['schemas']['User']['properties']['personalAddress']['description']
  • root['schemas']['User']['properties']['phoneNumbers']['description']
  • root['schemas']['User']['properties']['productObjectId']['description']
  • root['schemas']['User']['properties']['roleDescription']['description']
  • root['schemas']['User']['properties']['roleName']['description']
  • root['schemas']['User']['properties']['terminationDate']['description']
  • root['schemas']['User']['properties']['timeOff']['description']
  • root['schemas']['User']['properties']['title']['description']
  • root['schemas']['User']['properties']['userAuthenticationStatus']['description']
  • root['schemas']['User']['properties']['userDisplayName']['description']
  • root['schemas']['User']['properties']['userRole']['description']
  • root['schemas']['User']['properties']['userid']['description']
  • root['schemas']['User']['properties']['windowsSid']['description']
  • root['schemas']['Validity']['description']
  • root['schemas']['Validity']['properties']['expiryTime']['description']
  • root['schemas']['Validity']['properties']['issueTime']['description']
  • root['schemas']['Verdict']['description']
  • root['schemas']['Verdict']['properties']['analystVerdict']['description']
  • root['schemas']['Verdict']['properties']['neighbourInfluence']['description']
  • root['schemas']['Verdict']['properties']['responseCount']['description']
  • root['schemas']['Verdict']['properties']['sourceCount']['description']
  • root['schemas']['Verdict']['properties']['verdict']['description']
  • root['schemas']['VerdictInfo']['description']
  • root['schemas']['VerdictInfo']['properties']['benignCount']['description']
  • root['schemas']['VerdictInfo']['properties']['categoryDetails']['description']
  • root['schemas']['VerdictInfo']['properties']['confidenceScore']['description']
  • root['schemas']['VerdictInfo']['properties']['globalCustomerCount']['description']
  • root['schemas']['VerdictInfo']['properties']['globalHitsCount']['description']
  • root['schemas']['VerdictInfo']['properties']['iocStats']['description']
  • root['schemas']['VerdictInfo']['properties']['maliciousCount']['description']
  • root['schemas']['VerdictInfo']['properties']['neighbourInfluence']['description']
  • root['schemas']['VerdictInfo']['properties']['pwn']['description']
  • root['schemas']['VerdictInfo']['properties']['pwnFirstTaggedTime']['description']
  • root['schemas']['VerdictInfo']['properties']['responseCount']['description']
  • root['schemas']['VerdictInfo']['properties']['sourceCount']['description']
  • root['schemas']['VerdictInfo']['properties']['sourceProvider']['description']
  • root['schemas']['VerdictInfo']['properties']['verdictResponse']['description']
  • root['schemas']['VerdictInfo']['properties']['verdictTime']['description']
  • root['schemas']['VerdictInfo']['properties']['verdictType']['description']
  • root['schemas']['Vulnerabilities']['description']
  • root['schemas']['Vulnerabilities']['properties']['vulnerabilities']['description']
  • root['schemas']['Vulnerability']['description']
  • root['schemas']['Vulnerability']['properties']['about']['description']
  • root['schemas']['Vulnerability']['properties']['cveDescription']['description']
  • root['schemas']['Vulnerability']['properties']['cveId']['description']
  • root['schemas']['Vulnerability']['properties']['cvssBaseScore']['description']
  • root['schemas']['Vulnerability']['properties']['cvssVector']['description']
  • root['schemas']['Vulnerability']['properties']['cvssVersion']['description']
  • root['schemas']['Vulnerability']['properties']['description']['description']
  • root['schemas']['Vulnerability']['properties']['firstFound']['description']
  • root['schemas']['Vulnerability']['properties']['lastFound']['description']
  • root['schemas']['Vulnerability']['properties']['name']['description']
  • root['schemas']['Vulnerability']['properties']['scanEndTime']['description']
  • root['schemas']['Vulnerability']['properties']['scanStartTime']['description']
  • root['schemas']['Vulnerability']['properties']['severity']['description']
  • root['schemas']['Vulnerability']['properties']['severityDetails']['description']
  • root['schemas']['Vulnerability']['properties']['vendor']['description']
  • root['schemas']['Vulnerability']['properties']['vendorKnowledgeBaseArticleId']['description']
  • root['schemas']['Vulnerability']['properties']['vendorVulnerabilityId']['description']
  • root['schemas']['X509']['description']
  • root['schemas']['X509']['properties']['algorithm']['description']
  • root['schemas']['X509']['properties']['certIssuer']['description']
  • root['schemas']['X509']['properties']['name']['description']
  • root['schemas']['X509']['properties']['serialNumber']['description']
  • root['schemas']['X509']['properties']['thumbprint']['description']
dictionary_item_removed
  • root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['delete']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['undelete']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardCharts']['methods']['list']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardQueries']['methods']['list']
  • root['schemas']['ListDashboardChartsResponse']
  • root['schemas']['ListDashboardQueriesResponse']
  • root['schemas']['UndeleteInstanceRequest']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['description']
new_valueQueries the instance for EntityRiskScores. The API returns Risk Scores for entities including users and assets.
old_valueQueries the instance for EntityRiskScores. The API returns Risk Scores for entities which could be users, assets, resources etc in a system given the following filters: Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['parameters']['filter']['description']
new_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.product_object_id - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
old_valueFilter to be applied over multiple Entity Risk Score fields. Please see API definition for usage
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['fetchPrioritizedIocsOnly']['description']
new_valueOptional. Indicates if only prioritized iocs should be fetched. If threat collection id is set, this must be not be set.
old_valueOptional. Indicates if only prioritized iocs should be fetched.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchRulesAlerts']['parameters']['maxNumAlertsToReturn']['description']
new_valueOptional. The maximum number of alerts to return. The default and maximum value is 10,000; values above that will be coerced to 10,000. When the number of available alerts is greater than this value, the response will contain a too_many_alerts field set to true.
old_valueOptional. Maximum number of alerts to return.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['patch']['parameters']['updateMask']['description']
new_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned
old_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_native_dashboard)
root['revision']
new_value20250213
old_value20241212
root['schemas']['DashboardChart']['description']
new_valueDashboardChart resource. NEXT TAG: 10
old_valueDashboardChart resource. NEXT TAG: 9
root['schemas']['DataAccessScope']['properties']['allowedDataAccessLabels']['description']
new_valueOptional. The allowed labels for the scope. Either allow_all or allowed_data_access_labels needs to be provided. When provided, there has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
old_valueRequired. The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allow_all or allowed_data_access_labels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
root['schemas']['EditChartRequest']['properties']['editMask']['description']
new_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input
old_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_chart)
root['schemas']['EntityIndicator']['description']
new_valueIdentifying information for an Entity at a given point in time. This encapsulates the indicator type (in the field name) and value, as well as the namespace when relevant (for internal Asset indicators).
old_valueEnacpsulates the Entity Indicator Value and Type
root['schemas']['EntityIndicator']['properties']['assetIpAddress']['description']
new_valueThe IP address to identify an asset.
old_valueThe IP address.
root['schemas']['EntityIndicator']['properties']['destinationIpAddress']['description']
new_valueThe resolved ip address. This corresponds to the `ip` field in the UDM `Artifact`.
old_valueArtifact types. The resolved ip address in internal KValueType from udm artifact.ip.
root['schemas']['EntityIndicator']['properties']['domainname']['description']
new_valueThe domain name. This corresponds to the `name` field in the UDM `Domain` and to the `domain_name` field when specified as a entityRiskScores.query entity_idicator filter.
old_valueThe domain name.
root['schemas']['EntityIndicator']['properties']['email']['description']
new_valueThe email address to identify a user. This corresponds to the `email_addresses` field in the UDM `User`.
old_valueThe email.
root['schemas']['EntityIndicator']['properties']['employeeId']['description']
new_valueThe employee id to identify a user.
old_valueThe employee id.
root['schemas']['EntityIndicator']['properties']['filePath']['description']
new_valueThe file path. This corresponds to the `full_path` field in the UDM `File`.
old_valueThe file path,
root['schemas']['EntityIndicator']['properties']['fullCommandLine']['description']
new_valueThe full command line. This corresponds to the `command_line` field in the UDM `Process`.
old_valueThe full command line.
root['schemas']['EntityIndicator']['properties']['hashMd5']['description']
new_valueThe hash md5.
old_valueFile types. The hash md5.
root['schemas']['EntityIndicator']['properties']['hostname']['description']
new_valueThe hostname to identify an asset.
old_valueAsset types. The hostname.
root['schemas']['EntityIndicator']['properties']['indicatorNamespace']['description']
new_valueNamespace value of the indicator. Namespaces are supported for Asset indicators - hostname, mac, asset_ip_address, product_id, and project_object_id.
old_valueNamespace value of the indicator. An unknown namespace will be stored as 'malachite_null_namespace' specifically. Searching globally across all namespaces for an unknown namespace.
root['schemas']['EntityIndicator']['properties']['mac']['description']
new_valueThe MAC address to identify an asset.
old_valueThe MAC address.
root['schemas']['EntityIndicator']['properties']['parentProcessId']['description']
new_valueThe parent process id. This corresponds to the `parent_process.pid` field in the UDM `Process`.
old_valueThe parent process id.
root['schemas']['EntityIndicator']['properties']['processId']['description']
new_valueThe process id. This corresponds to the `pid` field in the UDM `Process`.
old_valueThe process id.
root['schemas']['EntityIndicator']['properties']['productId']['description']
new_valueSome ID that uniquely identifies an asset. This corresponds to the `asset_id` field in the UDM `Asset` and `Noun`.
old_valueThe product specific id.
root['schemas']['EntityIndicator']['properties']['productObjectId']['description']
new_valueThe product object id which can be used to identify an asset, user, group, or resource. This corresponds to the `product_object_id` field in the UDM `Resource`, `User`, `Asset`, and `Group`.
old_valueThe product object id.
root['schemas']['EntityIndicator']['properties']['projectObjectId']['description']
new_valueDeprecated. Some vendor-specific ID to identify a user. This corresponds to the `product_object_id` field in the UDM `User`.
old_valueThe project object id.
root['schemas']['EntityIndicator']['properties']['rawPid']['description']
new_valueThe raw pid.
old_valueProcess types. The raw pid.
root['schemas']['EntityIndicator']['properties']['resource']['description']
new_valueSystem unique resource name. This corresponds to the `name` field in the UDM `Resource` and to the `resource_name` field when specified as a entityRiskScores.query entity_idicator filter.
old_valueSystem unique resource name.
root['schemas']['EntityIndicator']['properties']['resourceProjectObjectId']['description']
new_valueLDAP Object Id or generic product object identifier that creates a unique user entity identifier. This corresponds to the `product_object_id` field in the UDM `Resource`.
old_valueResource types. LDAP Object Id or generic product object identifier that creates a unique user entity identifier.
root['schemas']['EntityIndicator']['properties']['username']['description']
new_valueThe user name or user ID to identify a user. This corresponds to the `userid` field in the UDM `User` and the `user_name` field when specified as a entityRiskScores.query entity_idicator filter.
old_valueUser types. The username.
root['schemas']['EntityIndicator']['properties']['windowsSid']['description']
new_valueThe windows SID to identify a user.
old_valueThe windows sid.
root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStats']['description']
new_valueLINT.IfChange(stats_data) Stats results when the query is for statistics NEXT TAG = 6;
old_valueLINT.IfChange (stats_data) Stats results when the query is for statistics NEXT TAG = 6;
root['schemas']['Instance']['properties']
new_value
customerCode
descriptionAn acronym related to the company name.
typestring
displayName
descriptionThe display name of the instance.
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
secopsUrls
descriptionURL of the SecOps instance for the instance. https://.backstory.chronicle.security
items
typestring
typearray
state
descriptionOutput only. The state of the instance.
enum
  • STATE_UNSPECIFIED
  • ACTIVE
  • SOFT_DELETED
  • SOFT_DELETE_INITIATED
  • UNDELETE_INITIATED
enumDescriptions
  • The default value.
  • The instance is active.
  • The instance is soft-deleted.
  • The instance is in the process of being soft-deleted.
  • The instance is in the process of being undeleted.
readOnlyTrue
typestring
old_value
deleteTime
descriptionOutput only. The time at which the instance was soft-deleted.
formatgoogle-datetime
readOnlyTrue
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
purgeTime
descriptionOutput only. The earliest time that soft-deleted tenants will be permanently deleted and will no longer be able to be undeleted.
formatgoogle-datetime
readOnlyTrue
typestring
state
descriptionOutput only. The state of the instance.
enum
  • STATE_UNSPECIFIED
  • ACTIVE
  • SOFT_DELETED
  • SOFT_DELETE_INITIATED
  • UNDELETE_INITIATED
enumDescriptions
  • The default value.
  • The instance is active.
  • The instance is soft-deleted.
  • The instance is in the process of being soft-deleted.
  • The instance is in the process of being undeleted.
readOnlyTrue
typestring
wipeoutStatus
descriptionOutput only. The wipeout status of the instance.
enum
  • WIPEOUT_STATE_UNSPECIFIED
  • DELETE_REQUESTED
  • SOFT_DELETE_IN_PROGRESS
  • SOFT_DELETE_COMPLETED
  • UNDELETE_REQUESTED
  • DATA_DELETION_IN_PROGRESS
  • ERROR
  • WIPED_OUT
  • UNDELETE_COMPLETED
enumDescriptions
  • The default value.
  • The instance has requested deletion.
  • The instance is in the process of being soft-deleted.
  • The instance has been soft-deleted.
  • The instance has requested undeletion.
  • The instance is in the process of being data deleted.
  • The instance has an error during wipeout.
  • The instance has been wiped out.
  • The instance has been undeleted.
readOnlyTrue
typestring
root['schemas']['IocAssociation']['properties']['countryCode']['description']
new_valueOutput only. Deprecated. Use region_code instead. Country from which the threat actor originated.
old_valueOutput only. Country from which the threat actor/ malware is originated.
root['schemas']['IocAssociation']['properties']['regionCode']['description']
new_valueOutput only. Name of the country the threat is originating from.
old_valueOutput only. Name of the country, the threat is originating from.
root['schemas']['LegacySearchRulesAlertsResponse']['properties']['tooManyAlerts']['description']
new_valueIndicates that more data was available but not sent due to more hits than max_num_alerts_to_return.
old_valueIndicates that more data was available but not sent due to more hits than max_matches_to_return.
root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['continuationTime']['description']
new_valueOptional. DEPRECATED: Prefer using `page_token` or `page_start_time` instead. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. All detection alerts discovered after `continuation_time` will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
old_valueOptional. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. When initiating the very first connection, clients should leave this unspecified. If unspecified, this defaults to the time of the connection. All detection alerts discovered after continuation_time will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['continuationTime']['description']
new_valueDEPRECATED: Prefer using `page_token` instead by specifying either `page_start_time` or `page_token` in the request. A continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
old_valueA continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
root['schemas']['LogType']['properties']['displayName']['description']
new_valueRequired. The display name of this log type. This is the tag used in YARA-l rules and search queries.
old_valueRequired. The display name of this log type.
root['schemas']['StatusProto']['properties']['canonicalCode']['description']
new_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;
old_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be.
root['schemas']['StatusProto']['properties']['code']['description']
new_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;
old_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto
root['schemas']['StatusProto']['properties']['message']['description']
new_valueDetail message copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string message = 3;
old_valueDetail message
root['schemas']['StatusProto']['properties']['messageSet']['description']
new_valuemessage_set associates an arbitrary proto message with the status. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional proto2.bridge.MessageSet message_set = 5;
old_valuemessage_set associates an arbitrary proto message with the status.
root['schemas']['StatusProto']['properties']['space']['description']
new_valueThe following are usually only present when code != 0 Space to which this status belongs copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string space = 2;
old_valueThe following are usually only present when code != 0 Space to which this status belongs
root['schemas']['Visualization']['description']
new_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 16
old_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 15
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][0]
new_valueDefault threat status
old_value
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][0]
new_valueThe default action.
old_value
root['schemas']['Metadata']['properties']['enrichmentState']['enumDescriptions'][0]
new_valueUnspecified.
old_value
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['User']['properties']['accountType']['enumDescriptions'][0]
new_valueDefault user account type.
old_value
root['schemas']['VerdictInfo']['properties']['verdictResponse']['enumDescriptions'][0]
new_valueThe default verdict response type.
old_value
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['schemas']['Association']['properties']['type']['enumDescriptions'][0]
new_valueThe default Association Type.
old_value
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][0]
new_valueDefault source type
old_value
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchCuratedDetections']['parameters']['alertState']['enumDescriptions'][0]
new_valueThe security result type is not known.
old_value
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][0]
new_valueThe default mechanism.
old_value
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['Dhcp']['properties']['opcode']['enumDescriptions'][0]
new_valueDefault opcode.
old_value
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][0]
new_valueThe default severity level.
old_value
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][0]
new_valueDefault
old_value
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][0]
new_valueThe default action.
old_value
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][0]
new_valueDefault type.
old_value
root['schemas']['VerdictInfo']['properties']['verdictType']['enumDescriptions'][0]
new_valueVerdict category not specified.
old_value
root['schemas']['Role']['properties']['type']['enumDescriptions'][0]
new_valueDefault user role.
old_value
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][0]
new_valueDefault registry value type used when the type is unknown.
old_value
root['schemas']['Feedback']['properties']['reputation']['enumDescriptions'][0]
new_valueAn unspecified reputation.
old_value
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][0]
new_valueThe default category.
old_value
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][0]
new_valueDefault.
old_value
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][0]
new_valueIoCStat source is unidentified.
old_value
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][0]
new_valueThe default authentication status.
old_value
root['schemas']['Asset']['properties']['type']['enumDescriptions'][0]
new_valueUnspecified asset role.
old_value
root['schemas']['Feedback']['properties']['verdict']['enumDescriptions'][0]
new_valueAn unspecified verdict.
old_value
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][0]
new_valueThe default confidence level.
old_value
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][0]
new_valueThe default confidence level.
old_value
root['schemas']['Relation']['properties']['direction']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][0]
new_valueThe default protocol.
old_value
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['SecurityResult']['properties']['alertState']['enumDescriptions'][0]
new_valueThe security result type is not known.
old_value
root['schemas']['Investigation']['properties']['reputation']['enumDescriptions'][0]
new_valueAn unspecified reputation.
old_value
root['schemas']['Network']['properties']['direction']['enumDescriptions'][0]
new_valueThe default direction.
old_value
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][0]
new_valueDefault reason.
old_value
root['schemas']['ResponsePlatformInfo']['properties']['responsePlatformType']['enumDescriptions'][0]
new_valueResponse platform not specified.
old_value
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][0]
new_valueDefault
old_value
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][0]
new_valueDefault message type.
old_value
root['schemas']['User']['properties']['userRole']['enumDescriptions'][0]
new_valueDefault user role.
old_value
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][0]
new_valueThe default application protocol.
old_value
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][0]
new_valueDefault reason.
old_value
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['LegacyFeedback']['properties']['verdict']['enumDescriptions'][0]
new_valueAn unspecified verdict.
old_value
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][0]
new_valueDefault
old_value
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][0]
new_valueAn undetermined token type.
old_value
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][0]
new_valueUnspecified deployment status.
old_value
root['schemas']['Source']['properties']['quality']['enumDescriptions'][0]
new_valueThe default confidence level.
old_value
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Investigation']['properties']['verdict']['enumDescriptions'][0]
new_valueAn unspecified verdict.
old_value
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][0]
new_valueDefault value
old_value
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][0]
new_valueThe default action.
old_value
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][0]
new_valueFile type is UNSPECIFIED.
old_value
root['schemas']['FindingVariable']['properties']['type']['enumDescriptions'][0]
new_valueAn unspecified variable type.
old_value
root['schemas']['AssociationIdentity']['properties']['associationType']['enumDescriptions'][0]
new_valueThe default Association Type.
old_value
root['schemas']['Permission']['properties']['type']['enumDescriptions'][0]
new_valueDefault permission type.
old_value
root['schemas']['LegacyFeedback']['properties']['reputation']['enumDescriptions'][0]
new_valueAn unspecified reputation.
old_value
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][0]
new_valueDefault reason.
old_value
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][0]
new_valueThe default type.
old_value
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][0]
new_valueThe default severity level.
old_value
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][0]
new_valueUnspecified threat verdict level.
old_value
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['AnalystVerdict']['properties']['verdictResponse']['enumDescriptions'][0]
new_valueThe default verdict response type.
old_value
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchDetections']['parameters']['alertState']['enumDescriptions'][0]
new_valueThe security result type is not known.
old_value
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
iterable_item_added
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][2]User.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][3]Group.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][4]Resource.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][5]An external IP address.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][6]A file.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][7]A domain.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][8]A url.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][9]A mutex.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][10]A metric.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchCuratedDetections']['parameters']['alertState']['enumDescriptions'][1]The security result is not an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchCuratedDetections']['parameters']['alertState']['enumDescriptions'][2]The security result is an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchDetections']['parameters']['alertState']['enumDescriptions'][1]The security result is not an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchDetections']['parameters']['alertState']['enumDescriptions'][2]The security result is an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][0]An unspecified collection type.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][1]An alert reported in customer telemetry.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][2]A finding from the Uppercase team.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][4]A detection found by applying a rule.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][5]An alert generated by Chronicle machine learning models.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][6]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['AnalystVerdict']['properties']['verdictResponse']['enumDescriptions'][1]VerdictResponse resulted a threat as malicious.
root['schemas']['AnalystVerdict']['properties']['verdictResponse']['enumDescriptions'][2]VerdictResponse resulted a threat as benign.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][1]Minimum.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][2]Maximum.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][3]Count.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][4]Sum.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][5]Average.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][6]Standard Deviation.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][1]Principal Device
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][2]Target User
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][3]Target Device
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][4]Principal User
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][5]Target IP
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][6]Principal File Hash
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][7]Principal Country
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][8]Security Category
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][9]Network ASN
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][10]Client Certificate Hash
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][11]DNS Query Type
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][12]DNS Domain
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][13]HTTP User Agent
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][14]Event Type
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][15]Product Name
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][16]Product Event Type
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][17]Parent Folder Path
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][18]Target resource Name
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][19]Principal Application.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][20]Target Application.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][21]Email To Address.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][22]Email From Address.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][23]Mail Id.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][24]Principal IP.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][25]Security Action.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][26]Security Rule Id.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][27]Target Network Organization name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][28]Principal Network Organization name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][29]Principal Process File Path.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][30]Principal Process File SHA256 Hash.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][31]Security Result rule name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][32]Target Resource label key.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][33]Vendor name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][34]Target Resource type.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][35]Target Location name.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][1]Asset is active, functional and deployed.
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][2]Asset is pending decommission and no longer deployed.
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][3]Asset is decommissioned.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][1]A workstation or desktop.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][2]A laptop computer.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][3]An IOT asset.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][4]A network attached storage device.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][5]A printer.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][6]A scanner.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][7]A server.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][8]A tape library device.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][9]A mobile device such as a mobile phone or PDA.
root['schemas']['Association']['properties']['type']['enumDescriptions'][1]Association type Threat actor.
root['schemas']['Association']['properties']['type']['enumDescriptions'][2]Association type Malware.
root['schemas']['AssociationIdentity']['properties']['associationType']['enumDescriptions'][1]Association type Threat actor.
root['schemas']['AssociationIdentity']['properties']['associationType']['enumDescriptions'][2]Association type Malware.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][1]Username + password authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][2]OTP authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][3]Hardware key authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][4]Local authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][5]Remote authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][6]RDP, Terminal Services, or VNC.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][7]Some other mechanism that is not defined here.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][8]Badge reader authentication
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][9]Network authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][10]Batch authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][11]Service authentication
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][12]Direct human-interactive unlock authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][13]Network clear text authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][14]Authentication with new credentials.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][15]Interactive authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][16]Interactive authentication using cached credentials.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][17]Cached Remote Interactive authentication using cached credentials.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][19]Biometric device such as a fingerprint reader.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][20]Wearable such as an Apple Watch.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][1]A machine authentication.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][2]An SSO authentication.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][3]A VPN authentication.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][4]A Physical authentication (e.g. "Badge reader").
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][5]A TACACS family protocol for networked systems authentication (e.g. TACACS, TACACS+).
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][20]FILE_TYPE_DESKTOP_ENTRY
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][82]FILE_TYPE_SLK
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][111]FILE_TYPE_MSIX
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][143]FILE_TYPE_RDP
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][160]FILE_TYPE_HTA
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][161]FILE_TYPE_INTERNET_SHORTCUT
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][1]File type is PE_EXE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][2]Although DLLs are actually portable executables, this value enables the file type to be identified separately. File type is PE_DLL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][3]File type is MSI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][4]File type is NE_EXE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][5]File type is NE_DLL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][6]File type is DOS_EXE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][7]File type is DOS_COM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][8]File type is COFF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][9]File type is ELF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][10]File type is LINUX_KERNEL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][11]File type is RPM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][12]File type is LINUX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][13]File type is MACH_O.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][14]File type is JAVA_BYTECODE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][15]File type is DMG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][16]File type is DEB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][17]File type is PKG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][18]File type is PYC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][19]File type is LNK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][20]File type is DESKTOP_ENTRY.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][21]File type is JPEG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][22]File type is TIFF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][23]File type is GIF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][24]File type is PNG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][25]File type is BMP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][26]File type is GIMP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][27]File type is Adobe InDesign.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][28]File type is PSD. Adobe Photoshop.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][29]File type is TARGA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][30]File type is XWD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][31]File type is DIB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][32]File type is JNG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][33]File type is ICO.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][34]File type is FPX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][35]File type is EPS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][36]File type is SVG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][37]File type is EMF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][38]File type is WEBP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][39]File type is DWG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][40]File type is DXF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][41]File type is 3DS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][42]File type is OGG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][43]File type is FLC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][44]File type is FLI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][45]File type is MP3.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][46]File type is FLAC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][47]File type is WAV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][48]File type is MIDI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][49]File type is AVI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][50]File type is MPEG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][51]File type is QUICKTIME.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][52]File type is ASF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][53]File type is DIVX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][54]File type is FLV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][55]File type is WMA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][56]File type is WMV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][57]File type is RM. RealMedia type.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][58]File type is MOV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][59]File type is MP4.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][60]File type is T3GP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][61]File type is WEBM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][62]File type is MKV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][63]File type is PDF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][64]File type is PS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][65]File type is DOC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][66]File type is DOCX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][67]File type is PPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][68]File type is PPTX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][69]File type is XLS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][70]File type is XLSX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][71]File type is RTF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][72]File type is PPSX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][73]File type is ODP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][74]File type is ODS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][75]File type is ODT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][76]File type is HWP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][77]File type is GUL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][78]File type is ODF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][79]File type is ODG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][80]File type is ONE_NOTE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][81]File type is OOXML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][82]File type is SLK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][83]File type is EBOOK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][84]File type is LATEX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][85]File type is TTF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][86]File type is EOT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][87]File type is WOFF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][88]File type is CHM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][89]File type is ZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][90]File type is GZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][91]File type is BZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][92]File type is RZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][93]File type is DZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][94]File type is SEVENZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][95]File type is CAB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][96]File type is JAR.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][97]File type is RAR.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][98]File type is MSCOMPRESS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][99]File type is ACE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][100]File type is ARC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][101]File type is ARJ.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][102]File type is ASD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][103]File type is BLACKHOLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][104]File type is KGB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][105]File type is ZLIB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][106]File type is TAR.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][107]File type is ZST.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][108]File type is LZFSE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][109]File type is PYTHON_WHL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][110]File type is PYTHON_PKG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][111]File type is MSIX, new Windows app package format.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][112]File type is TEXT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][113]File type is SCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][114]File type is PHP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][115]File type is PYTHON.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][116]File type is PERL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][117]File type is RUBY.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][118]File type is C.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][119]File type is CPP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][120]File type is JAVA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][121]File type is SHELLSCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][122]File type is PASCAL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][123]File type is AWK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][124]File type is DYALOG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][125]File type is FORTRAN.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][126]File type is JAVASCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][127]File type is POWERSHELL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][128]File type is VBA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][129]File type is M4.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][130]File type is OBJETIVEC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][131]File type is JMOD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][132]File type is MAKEFILE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][133]File type is INI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][134]File type is CLJ.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][135]File type is PDB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][136]File type is SQL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][137]File type is NEKO.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][138]File type is WER.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][139]File type is GOLANG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][140]File type is M3U.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][141]File type is BAT, Windows .bat/.cmd (old files are tagged as SHELLSCRIPT).
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][142]File type is MSC, Microsoft Management Console (MMC).
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][143]File type is RDP, Microsoft Remote Desktop Protocol (RDP) file.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][144]File type is SYMBIAN.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][145]File type is PALMOS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][146]File type is WINCE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][147]File type is ANDROID.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][148]File type is IPHONE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][149]File type is HTML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][150]File type is XML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][151]File type is SWF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][152]File type is FLA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][153]File type is COOKIE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][154]File type is TORRENT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][155]File type is EMAIL_TYPE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][156]File type is OUTLOOK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][157]File type is SGML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][158]File type is JSON.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][159]File type is CSV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][160]File type is HTA (HTML Application).
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][161]File type is MSHTML .url.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][162]File type is CAP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][163]File type is ISOIMAGE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][164]File type is SQUASHFS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][165]File type is VHD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][166]File type is APPLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][167]File type is MACINTOSH.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][168]File type is APPLESINGLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][169]File type is APPLEDOUBLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][170]File type is MACINTOSH_HFS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][171]File type is APPLE_PLIST.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][172]File type is MACINTOSH_LIB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][173]File type is APPLESCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][174]File type is APPLESCRIPT_COMPILED .
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][175]File type is CRX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][176]File type is XPI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][177]File type is ROM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][178]File type is IPS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][179]File type is PEM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][180]File type is PGP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][181]File type is CRT.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][1]Google Cloud Platform.
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][2]Amazon Web Services.
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][3]Microsoft Azure.
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][3]Uppercase
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][0]An unspecified collection type.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][1]An alert reported in customer telemetry.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][2]A finding from the Uppercase team.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][4]A detection found by applying a rule.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][5]An alert generated by Chronicle machine learning models.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][6]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][8]RULES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][8]RULES
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['Dhcp']['properties']['opcode']['enumDescriptions'][1]Request.
root['schemas']['Dhcp']['properties']['opcode']['enumDescriptions'][2]Reply.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][1]DHCPDISCOVER.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][2]DHCPOFFER.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][3]DHCPREQUEST.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][4]DHCPDECLINE.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][5]DHCPACK.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][6]DHCPNAK.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][7]DHCPRELEASE.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][8]DHCPINFORM.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][9]Microsoft Windows DHCP "lease deleted".
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][10]Microsoft Windows DHCP "lease expired".
root['schemas']['EdrEvent']['properties']['dataSource']['enum'][23]TRELLIX
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][2]User.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][3]Group.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][4]Resource.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][5]An external IP address.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][6]A file.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][7]A domain.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][8]A url.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][9]A mutex.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][10]A metric.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][2]User.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][3]Group.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][4]Resource.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][5]An external IP address.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][6]A file.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][7]A domain.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][8]A url.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][9]A mutex.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][10]A metric.
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][1]Entities ingested from customers (e.g. AD_CONTEXT, DLP_CONTEXT)
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][2]Entities derived from customer data such as prevalence, artifact first/last seen, or asset/user first seen stats.
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][3]Global contextual entities such as WHOIS or Safe Browsing.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['FeedDetails']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedDetails']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][1]Case or Alert not malicious.
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][2]Case or Alert is malicious.
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][3]Case or Alert is under maintenance.
root['schemas']['Feedback']['properties']['reputation']['enumDescriptions'][1]A categorization of the finding as useful.
root['schemas']['Feedback']['properties']['reputation']['enumDescriptions'][2]A categorization of the finding as not useful.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['Feedback']['properties']['verdict']['enumDescriptions'][1]A categorization of the finding as a "true positive".
root['schemas']['Feedback']['properties']['verdict']['enumDescriptions'][2]A categorization of the finding as a "false positive".
root['schemas']['FindingVariable']['properties']['type']['enumDescriptions'][1]A variable coming from the match conditions.
root['schemas']['FindingVariable']['properties']['type']['enumDescriptions'][2]A variable representing significant data that was found in the detection logic.
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][3]Uppercase
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][1]Case or Alert not malicious.
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][2]Case or Alert is malicious.
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][3]Case or Alert is under maintenance.
root['schemas']['Investigation']['properties']['reputation']['enumDescriptions'][1]A categorization of the finding as useful.
root['schemas']['Investigation']['properties']['reputation']['enumDescriptions'][2]A categorization of the finding as not useful.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['Investigation']['properties']['verdict']['enumDescriptions'][1]A categorization of the finding as a "true positive".
root['schemas']['Investigation']['properties']['verdict']['enumDescriptions'][2]A categorization of the finding as a "false positive".
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][91]FRONT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][94]VUHL_SO_IDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][221]TEHTRIS_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][222]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][223]GCLDW_CLODWAVE_HIDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][243]CYNERIO_NDR_H
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][282]WIREGUARD_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][290]CLAVISTER_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][427]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][467]VICARIUS_VRX_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][603]FORTINET_ADC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][622]HUAWEI_WIRELESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][627]AZURE_VNET_FLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][629]CISCO_NETFLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][641]BELDEN_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][666]HP_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][681]VELOCLOUD_SDWAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][708]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][709]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][710]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][745]TRELLIX_HX_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][807]RAVEN_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][827]AZURE_RISKY_USERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][828]AZURE_RISK_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][829]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][859]D_OPENPATH_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][873]CIP_FASTWEB_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][947]SOLIDSERVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][990]HLX_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][991]CMB_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1013]WFA_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1020]PINGONE_AIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1021]PINGONE_PROTECT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1129]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1130]FOXPASS_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1131]DRAYTEK_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1132]CHROMEOS_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1133]VECTRA_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1134]METABASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1135]HUAWEI_FUSIONSPHERE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1136]HUAWEI_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1281]MY_SAILPOINT_LIFECYCLE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1366]ONEIDENTITY_SAFEGUARD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1399]CLICKHOUSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1422]JOBLOGIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1461]ZOHO_ASSIST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1483]OPENTEXT_CORDY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1526]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1556]CROWDSTRIKE_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1625]JAMF_TELEMETRY_V2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1820]IBM_SENSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1829]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1830]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1839]ACN_SIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1840]ARCON_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1843]ARCDA_COREWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1844]IBM_SVA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1848]AUTODESK_CAD_CAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1850]FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1857]BLUE_VOYANT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1858]BBVA_MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1864]CAMEYO_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1872]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1874]CMMRZ_FORTI_DECEPTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1875]CSG_CITRIX_RX
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1876]EQIX_CONFIGURATION_BUILDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1879]D_STORMBREAKER_ALERTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1880]D_STORMBREAKER_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1891]FA_SOLUTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1892]FILES_DOT_COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1893]FINCOMUN_ORACLE_SPEI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1900]GHANGOR_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1905]NETLIFY_LOGDRAINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1916]GDLP_ATLAS_USER_ELEVATION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1922]HSCR_ACCOUNTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1923]HILLSTONE_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1924]HOXHUNT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1926]MC001_ELASTIC_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1933]INTEL_EMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1939]INDUSFACE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1950]MLL001_MOL_AGYIEUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1951]MLL001_MOL_SFTPGO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1952]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1953]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1954]MLL001_MOL_PCI_DC_SAD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1955]MLL001_MOL_PCI_DB_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1956]MLL001_MOL_PCI_GKE_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1957]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1958]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1959]MLL001_MOL_PCI_TOKENISER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1974]PINGCAP_TIDB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1975]PLUMFINTECH_PLUM_SCA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1979]PRIVACY_I
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1984]JIRANSECURITY_MAILSCREEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1985]MY_RESOLVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1986]REVIVESEC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1989]BRDCM_IMS_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1990]BBVA_BANKTRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1991]BBVA_CONSORES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1992]RQTI0LIH_VERVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1993]RQTI0LIH_ONEHUB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1994]RQTI0LIH_EPI_MES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1995]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1996]SAP_LEASING
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1997]BBVA_SIRE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1998]BBVA_POWER_CURVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1999]BBVA_SMARTSTREAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2000]BBVA_SOLUCIONES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2001]BBVA_TEXSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2002]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2003]BBVA_SIIBE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2004]BBVA_MBOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2005]BBVA_SINBA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2006]BBVA_MSDP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2007]BBVA_PLUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2008]BBVA_CAIRO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2009]BBVA_SICOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2010]BBVA_FUMER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2011]BBVA_MCOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2012]BBVA_MCWN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2013]BBVA_ZEIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2014]BBVA_CYGE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2015]BBVA_SISP_NET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2016]BBVA_CLAIM_CENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2017]BBVA_SAIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2018]BBVA_SPWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2019]BBVA_VALIDADOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2020]BBVA_GUIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2021]BBVA_HECO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2022]GL_TRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2023]ORACLE_AVDF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2024]REBLAZE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2025]VZ_MAXMIND_GEOIP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2026]TT002_EXASOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2027]CORERO_SMARTWALL_ONE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2028]AVEPOINT_ENPOWER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2029]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2030]GITHUB_DEPENDABOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2031]AWS_EKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2032]THALES_PS10K_HSM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2033]F5_DCS_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2034]CLOUDWAVE_HONEYPOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2035]PAN_PRISMA_CWP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2036]FORTINET_FORTISASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2037]MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2038]AWS_DASHA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2039]ONETRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2040]NETWRIX_PRIVILEGE_SECURE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2041]SANGFOR_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2044]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2047]SNF_SDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2052]SOFTETHER_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2055]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2065]UNICO_IDCLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2066]UNICO_IDTRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2085]WING_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2087]WSGC_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2088]ZERO_NETWORKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2101]JUNIPER_SSR_CONDUCTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2102]INFORMATICA_POWERCENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2113]EXTERRO_FTK_CENTRAL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2114]CROWDSTRIKE_RECON
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2115]CLOUDFLARE_PAGESHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2116]FORTRA_VM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2117]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2118]RAPID_IDENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2119]SLSFR_VERTEX_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2120]ARCDA_VISTA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2121]PRMTH_WSO2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2122]MC001_CLICKS_ENTERPAT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2123]MC001_CLICKS_CLIUSERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2124]MC001_ROSHTOV_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2125]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2126]MC001_MACCABI_PHARMACY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2127]SPACELIFT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2128]PAVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2129]MC001_MACCABI_NEW_APP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2130]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2131]MC001_OFEK_EITAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2132]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2133]MC001_MACCABI_ONLINE_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2134]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2135]CPS_JED_JCD_METRIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2136]H_ISAC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2137]IIJ_LANSCOPE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2138]ML009_MENLO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2429]BBVA_CUSTODIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2430]BBVA_CREDIT_VW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2431]BBVA_CREDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2494]BBVA_WALLSTREET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2496]INFORMATICA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2737]MT_APPLIED_PRINT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2756]HANNA_KASEYA_IT_GLUE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2757]KNRTH_COMMONFATE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2759]PARXL_MERAKI_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2763]PRMTH_FIRSTIQ
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2764]PRMTH_PWSS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2783]RENAULT_IRN_74898
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2784]RENAULT_IRN_73882
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2785]RENAULT_IRN_72284
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2786]RENAULT_IRN_74143
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2787]RENAULT_IRN_70132
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2788]RENAULT_IRN_50567
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2789]RENAULT_IRN_8185
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2790]RENAULT_IRN_77153
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2791]RENAULT_IRN_67551
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2792]RENAULT_IRN_73940
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2793]RENAULT_IRN_75039
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2794]RENAULT_IRN_69293
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2795]RENAULT_IRN_74601
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2799]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2812]SML_SITEMINDER_PP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2824]SNF_FORENSIC_PREFETCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2825]SNF_FORENSIC_HAYABUSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2864]SHOPIFY_APV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2882]SHOPIFY_SVC_INT_2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2913]VCTR727_AURUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2946]WMT_GENAI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2968]WSGC_ECOM
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][1]IoCStat is from a Mandiant Source.
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][2]IoCStat is from a third-party source.
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][3]IoCStat is from a threat intelligence feed.
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][1]Low confidence.
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][2]Medium confidence.
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][3]High confidence.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][1]Case or Alert not malicious.
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][2]Case or Alert is malicious.
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][3]Case or Alert is under maintenance.
root['schemas']['LegacyFeedback']['properties']['reputation']['enumDescriptions'][1]A categorization of the finding as useful.
root['schemas']['LegacyFeedback']['properties']['reputation']['enumDescriptions'][2]A categorization of the finding as not useful.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['LegacyFeedback']['properties']['verdict']['enumDescriptions'][1]A categorization of the finding as a "true positive".
root['schemas']['LegacyFeedback']['properties']['verdict']['enumDescriptions'][2]A categorization of the finding as a "false positive".
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][1]Allowed.
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][2]Blocked.
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][3]Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][4]Put somewhere for later analysis (does NOT imply block).
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][5]Failed (e.g. the event was allowed but failed).
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][6]Challenged (e.g. the user was challenged by a Captcha, 2FA).
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][0]An unspecified collection type.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][1]An alert reported in customer telemetry.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][2]A finding from the Uppercase team.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][4]A detection found by applying a rule.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][5]An alert generated by Chronicle machine learning models.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][6]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][3]Uppercase
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][1]Minimum.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][2]Maximum.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][3]Count.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][4]Sum.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][5]Average.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][6]Standard Deviation.
root['schemas']['Metadata']['properties']['enrichmentState']['enumDescriptions'][1]The event has been enriched by Chronicle.
root['schemas']['Metadata']['properties']['enrichmentState']['enumDescriptions'][2]The event has not been enriched by Chronicle.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][1]Principal Device
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][2]Target User
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][3]Target Device
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][4]Principal User
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][5]Target IP
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][6]Principal File Hash
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][7]Principal Country
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][8]Security Category
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][9]Network ASN
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][10]Client Certificate Hash
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][11]DNS Query Type
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][12]DNS Domain
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][13]HTTP User Agent
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][14]Event Type
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][15]Product Name
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][16]Product Event Type
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][17]Parent Folder Path
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][18]Target resource Name
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][19]Principal Application.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][20]Target Application.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][21]Email To Address.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][22]Email From Address.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][23]Mail Id.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][24]Principal IP.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][25]Security Action.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][26]Security Rule Id.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][27]Target Network Organization name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][28]Principal Network Organization name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][29]Principal Process File Path.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][30]Principal Process File SHA256 Hash.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][31]Security Result rule name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][32]Target Resource label key.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][33]Vendor name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][34]Target Resource type.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][35]Target Location name.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][1]Total received network bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][2]Total network sent bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][3]Total network sent bytes and received bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][4]Successful authentication attempts.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][5]Failed authentication attempts.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][6]Total authentication attempts.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][7]Total number of sent bytes for DNS events.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][8]Total number of events having non-null received bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][9]Total number of events having non-null sent bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][10]Total events having non-null sent or received bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][11]DNS query success count - Number of events with response_code = 0.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][12]Number of events with response_code != 0.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][13]Total number of DNS queries made.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][14]Number of successfule file executions.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][15]Number of failed file executions.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][16]Total number file executions.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][17]Number of successful HTTP queries.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][18]Number of failed HTTP queries.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][19]Total number of HTTP queries.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][20]Total number of emails sent in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][21]Total number of download actions in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][22]Total number of change actions in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][23]Total number of authentication attempts in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][24]Number of outbound network bytes (total sent) in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][25]Total number of network bytes (both sent and received) in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][26]Track number of alerts fired by EDR/SENTINEL/MICROSOFT_GRAPH.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][27]First-time analytic tracking successful resource creations.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][28]Volume-based analytic tracking successful resource creations.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][29]Volume-based analytic tracking successful resource reads.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][30]Volume-based analytic tracking failed resource reads.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][31]Volume-based analytic tracking successful resource deletions.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][1]Apple Filing Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][2]Advanced Program-to-Program Communication.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][3]Advanced Message Queuing Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][4]Publishing Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][5]Block Extensible Exchange Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][6]Crypto currency protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][7]Peer-to-peer file sharing.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][8]Coherent File Distribution Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][9]Common Industrial Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][10]Constrained Application Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][11]Connection Oriented Transport Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][12]DCE/RPC.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][13]Data Distribution Service.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][14]Automation industry protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][15]DHCP.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][16]Digital Imaging and Communications in Medicine Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][17]Distributed Network Protocol 3 (DNP3)
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][18]DNS.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][19]Classic file sharing protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][20]Endpoint Handlespace Redundancy Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][21]Filesharing peer-to-peer protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][22]User Information Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][23]Censorship resistant peer-to-peer network.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][24]File Transfer Access and Management.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][25]GOOSE Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][26]Gopher protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][27]gRPC Remote Procedure Call.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][28]Health Level Seven.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][29]Packet-based multimedia communications system.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][30]HTTP.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][31]HTTPS.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][32]IEC 60870-5-104 (IEC 104) Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][33]Internet Relay Chat Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][34]Peer-to-peer hashtables.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][35]Kerberos 5.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][36]Lightweight Directory Access Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][37]Line Printer Daemon Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][38]Multipurpose Internet Mail Extensions and Secure MIME.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][39]Multimedia Messaging Service.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][40]Serial communications protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][41]Message Queuing Telemetry Transport.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][42]Network Configuration.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][43]Network File System.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][44]Network Information Service.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][45]Network News Transfer Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][46]National Transportation Communications for Intelligent Transportation System.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][47]Network Time Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][48]AOL Instant Messenger Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][49]Peer Name Resolution Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][50]Precision Time Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][51]QUIC.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][52]Remote Desktop Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][53]Reliable Event Logging Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][54]Routing Information Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][55]Remote Login in UNIX Systems.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][56]Remote Procedure Call.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][57]Real Time Messaging Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][58]Real-time Transport Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][59]Real Time Publish Subscribe.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][60]Real Time Streaming Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][61]Session Announcement Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][62]Session Description Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][63]Session Initiation Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][64]Service Location Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][65]Server Message Block.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][66]Simple Mail Transfer Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][67]Simple Network Management Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][68]Simple Network Time Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][69]Secure Shell.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][70]Secure SMS Messaging Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][71]Styx/9P - Plan 9 from Bell Labs distributed file system protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][72]Sampled Values Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][73]Transaction Capabilities Application Part.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][74]Tabular Data Stream.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][75]Anonymity network.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][76]Time Stamp Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][77]Virtual Terminal Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][78]Remote Directory Access Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][79]Web Distributed Authoring and Versioning.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][80]Message Handling Service Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][81]Directory Access Protocol (DAP).
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][82]Extensible Messaging and Presence Protocol.
root['schemas']['Network']['properties']['direction']['enumDescriptions'][1]An inbound request.
root['schemas']['Network']['properties']['direction']['enumDescriptions'][2]An outbound request.
root['schemas']['Network']['properties']['direction']['enumDescriptions'][3]A broadcast.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][1]ICMP.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][2]IGMP
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][3]TCP.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][4]UDP.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][5]IPv6 Encapsulation
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][6]Generic Routing Encapsulation
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][7]Encapsulating Security Payload
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][8]ICMPv6
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][9]Enhanced Interior Gateway Routing
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][10]Ethernet-within-IP Encapsulation
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][11]Protocol Independent Multicast
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][12]Virtual Router Redundancy Protocol
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][13]Stream Control Transmission Protocol
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][1]Microsoft Windows.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][2]macOS.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][3]Linux.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][4]Deprecated: see cloud.environment.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][7]IOS
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][8]Android
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][9]Chrome OS
root['schemas']['Permission']['properties']['type']['enumDescriptions'][1]Administrator write permission.
root['schemas']['Permission']['properties']['type']['enumDescriptions'][2]Administrator read permission.
root['schemas']['Permission']['properties']['type']['enumDescriptions'][3]Data resource access write permission.
root['schemas']['Permission']['properties']['type']['enumDescriptions'][4]Data resource access read permission.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][1]Microsoft Windows.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][2]macOS.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][3]Linux.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][4]Deprecated: see cloud.environment.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][7]IOS
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][8]Android
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][9]Chrome OS
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][1]A full token with no privileges removed or groups disabled.
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][2]An elevated token with no privileges removed or groups disabled. Used when running as administrator.
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][3]A limited token with administrative privileges removed and administrative groups disabled.
root['schemas']['RawLog']['properties']['type']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['RawLog']['properties']['type']['enum'][91]FRONT
root['schemas']['RawLog']['properties']['type']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][94]VUHL_SO_IDH
root['schemas']['RawLog']['properties']['type']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['RawLog']['properties']['type']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['RawLog']['properties']['type']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['RawLog']['properties']['type']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['RawLog']['properties']['type']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['RawLog']['properties']['type']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['RawLog']['properties']['type']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['RawLog']['properties']['type']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['RawLog']['properties']['type']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['RawLog']['properties']['type']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['RawLog']['properties']['type']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['RawLog']['properties']['type']['enum'][221]TEHTRIS_EDR
root['schemas']['RawLog']['properties']['type']['enum'][222]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['RawLog']['properties']['type']['enum'][223]GCLDW_CLODWAVE_HIDS
root['schemas']['RawLog']['properties']['type']['enum'][243]CYNERIO_NDR_H
root['schemas']['RawLog']['properties']['type']['enum'][282]WIREGUARD_VPN
root['schemas']['RawLog']['properties']['type']['enum'][290]CLAVISTER_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][427]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][467]VICARIUS_VRX_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][603]FORTINET_ADC
root['schemas']['RawLog']['properties']['type']['enum'][622]HUAWEI_WIRELESS
root['schemas']['RawLog']['properties']['type']['enum'][627]AZURE_VNET_FLOW
root['schemas']['RawLog']['properties']['type']['enum'][629]CISCO_NETFLOW
root['schemas']['RawLog']['properties']['type']['enum'][641]BELDEN_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][666]HP_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][681]VELOCLOUD_SDWAN
root['schemas']['RawLog']['properties']['type']['enum'][708]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['RawLog']['properties']['type']['enum'][709]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['RawLog']['properties']['type']['enum'][710]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['RawLog']['properties']['type']['enum'][745]TRELLIX_HX_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][807]RAVEN_DB
root['schemas']['RawLog']['properties']['type']['enum'][827]AZURE_RISKY_USERS
root['schemas']['RawLog']['properties']['type']['enum'][828]AZURE_RISK_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][829]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['RawLog']['properties']['type']['enum'][859]D_OPENPATH_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][873]CIP_FASTWEB_IOC
root['schemas']['RawLog']['properties']['type']['enum'][947]SOLIDSERVER
root['schemas']['RawLog']['properties']['type']['enum'][990]HLX_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][991]CMB_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1013]WFA_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1020]PINGONE_AIC
root['schemas']['RawLog']['properties']['type']['enum'][1021]PINGONE_PROTECT
root['schemas']['RawLog']['properties']['type']['enum'][1129]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['RawLog']['properties']['type']['enum'][1130]FOXPASS_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1131]DRAYTEK_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][1132]CHROMEOS_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1133]VECTRA_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1134]METABASE
root['schemas']['RawLog']['properties']['type']['enum'][1135]HUAWEI_FUSIONSPHERE
root['schemas']['RawLog']['properties']['type']['enum'][1136]HUAWEI_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][1281]MY_SAILPOINT_LIFECYCLE
root['schemas']['RawLog']['properties']['type']['enum'][1366]ONEIDENTITY_SAFEGUARD
root['schemas']['RawLog']['properties']['type']['enum'][1399]CLICKHOUSE
root['schemas']['RawLog']['properties']['type']['enum'][1422]JOBLOGIC
root['schemas']['RawLog']['properties']['type']['enum'][1461]ZOHO_ASSIST
root['schemas']['RawLog']['properties']['type']['enum'][1483]OPENTEXT_CORDY
root['schemas']['RawLog']['properties']['type']['enum'][1526]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['RawLog']['properties']['type']['enum'][1556]CROWDSTRIKE_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1625]JAMF_TELEMETRY_V2
root['schemas']['RawLog']['properties']['type']['enum'][1820]IBM_SENSE
root['schemas']['RawLog']['properties']['type']['enum'][1829]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1830]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1839]ACN_SIA
root['schemas']['RawLog']['properties']['type']['enum'][1840]ARCON_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1843]ARCDA_COREWEB
root['schemas']['RawLog']['properties']['type']['enum'][1844]IBM_SVA
root['schemas']['RawLog']['properties']['type']['enum'][1848]AUTODESK_CAD_CAM
root['schemas']['RawLog']['properties']['type']['enum'][1850]FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1857]BLUE_VOYANT
root['schemas']['RawLog']['properties']['type']['enum'][1858]BBVA_MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][1864]CAMEYO_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1872]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['RawLog']['properties']['type']['enum'][1874]CMMRZ_FORTI_DECEPTOR
root['schemas']['RawLog']['properties']['type']['enum'][1875]CSG_CITRIX_RX
root['schemas']['RawLog']['properties']['type']['enum'][1876]EQIX_CONFIGURATION_BUILDER
root['schemas']['RawLog']['properties']['type']['enum'][1879]D_STORMBREAKER_ALERTS
root['schemas']['RawLog']['properties']['type']['enum'][1880]D_STORMBREAKER_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1891]FA_SOLUTIONS
root['schemas']['RawLog']['properties']['type']['enum'][1892]FILES_DOT_COM
root['schemas']['RawLog']['properties']['type']['enum'][1893]FINCOMUN_ORACLE_SPEI
root['schemas']['RawLog']['properties']['type']['enum'][1900]GHANGOR_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1905]NETLIFY_LOGDRAINS
root['schemas']['RawLog']['properties']['type']['enum'][1916]GDLP_ATLAS_USER_ELEVATION
root['schemas']['RawLog']['properties']['type']['enum'][1922]HSCR_ACCOUNTS
root['schemas']['RawLog']['properties']['type']['enum'][1923]HILLSTONE_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1924]HOXHUNT
root['schemas']['RawLog']['properties']['type']['enum'][1926]MC001_ELASTIC_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][1933]INTEL_EMA
root['schemas']['RawLog']['properties']['type']['enum'][1939]INDUSFACE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][1950]MLL001_MOL_AGYIEUS
root['schemas']['RawLog']['properties']['type']['enum'][1951]MLL001_MOL_SFTPGO
root['schemas']['RawLog']['properties']['type']['enum'][1952]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['RawLog']['properties']['type']['enum'][1953]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['RawLog']['properties']['type']['enum'][1954]MLL001_MOL_PCI_DC_SAD
root['schemas']['RawLog']['properties']['type']['enum'][1955]MLL001_MOL_PCI_DB_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1956]MLL001_MOL_PCI_GKE_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1957]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['RawLog']['properties']['type']['enum'][1958]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][1959]MLL001_MOL_PCI_TOKENISER
root['schemas']['RawLog']['properties']['type']['enum'][1974]PINGCAP_TIDB
root['schemas']['RawLog']['properties']['type']['enum'][1975]PLUMFINTECH_PLUM_SCA
root['schemas']['RawLog']['properties']['type']['enum'][1979]PRIVACY_I
root['schemas']['RawLog']['properties']['type']['enum'][1984]JIRANSECURITY_MAILSCREEN
root['schemas']['RawLog']['properties']['type']['enum'][1985]MY_RESOLVER
root['schemas']['RawLog']['properties']['type']['enum'][1986]REVIVESEC
root['schemas']['RawLog']['properties']['type']['enum'][1989]BRDCM_IMS_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1990]BBVA_BANKTRADE
root['schemas']['RawLog']['properties']['type']['enum'][1991]BBVA_CONSORES
root['schemas']['RawLog']['properties']['type']['enum'][1992]RQTI0LIH_VERVE
root['schemas']['RawLog']['properties']['type']['enum'][1993]RQTI0LIH_ONEHUB
root['schemas']['RawLog']['properties']['type']['enum'][1994]RQTI0LIH_EPI_MES
root['schemas']['RawLog']['properties']['type']['enum'][1995]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['RawLog']['properties']['type']['enum'][1996]SAP_LEASING
root['schemas']['RawLog']['properties']['type']['enum'][1997]BBVA_SIRE
root['schemas']['RawLog']['properties']['type']['enum'][1998]BBVA_POWER_CURVE
root['schemas']['RawLog']['properties']['type']['enum'][1999]BBVA_SMARTSTREAM
root['schemas']['RawLog']['properties']['type']['enum'][2000]BBVA_SOLUCIONES
root['schemas']['RawLog']['properties']['type']['enum'][2001]BBVA_TEXSA
root['schemas']['RawLog']['properties']['type']['enum'][2002]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['RawLog']['properties']['type']['enum'][2003]BBVA_SIIBE
root['schemas']['RawLog']['properties']['type']['enum'][2004]BBVA_MBOT
root['schemas']['RawLog']['properties']['type']['enum'][2005]BBVA_SINBA
root['schemas']['RawLog']['properties']['type']['enum'][2006]BBVA_MSDP
root['schemas']['RawLog']['properties']['type']['enum'][2007]BBVA_PLUS
root['schemas']['RawLog']['properties']['type']['enum'][2008]BBVA_CAIRO
root['schemas']['RawLog']['properties']['type']['enum'][2009]BBVA_SICOR
root['schemas']['RawLog']['properties']['type']['enum'][2010]BBVA_FUMER
root['schemas']['RawLog']['properties']['type']['enum'][2011]BBVA_MCOR
root['schemas']['RawLog']['properties']['type']['enum'][2012]BBVA_MCWN
root['schemas']['RawLog']['properties']['type']['enum'][2013]BBVA_ZEIT
root['schemas']['RawLog']['properties']['type']['enum'][2014]BBVA_CYGE
root['schemas']['RawLog']['properties']['type']['enum'][2015]BBVA_SISP_NET
root['schemas']['RawLog']['properties']['type']['enum'][2016]BBVA_CLAIM_CENTER
root['schemas']['RawLog']['properties']['type']['enum'][2017]BBVA_SAIT
root['schemas']['RawLog']['properties']['type']['enum'][2018]BBVA_SPWEB
root['schemas']['RawLog']['properties']['type']['enum'][2019]BBVA_VALIDADOR
root['schemas']['RawLog']['properties']['type']['enum'][2020]BBVA_GUIA
root['schemas']['RawLog']['properties']['type']['enum'][2021]BBVA_HECO
root['schemas']['RawLog']['properties']['type']['enum'][2022]GL_TRADE
root['schemas']['RawLog']['properties']['type']['enum'][2023]ORACLE_AVDF
root['schemas']['RawLog']['properties']['type']['enum'][2024]REBLAZE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2025]VZ_MAXMIND_GEOIP
root['schemas']['RawLog']['properties']['type']['enum'][2026]TT002_EXASOL
root['schemas']['RawLog']['properties']['type']['enum'][2027]CORERO_SMARTWALL_ONE
root['schemas']['RawLog']['properties']['type']['enum'][2028]AVEPOINT_ENPOWER
root['schemas']['RawLog']['properties']['type']['enum'][2029]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['RawLog']['properties']['type']['enum'][2030]GITHUB_DEPENDABOT
root['schemas']['RawLog']['properties']['type']['enum'][2031]AWS_EKS
root['schemas']['RawLog']['properties']['type']['enum'][2032]THALES_PS10K_HSM
root['schemas']['RawLog']['properties']['type']['enum'][2033]F5_DCS_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2034]CLOUDWAVE_HONEYPOT
root['schemas']['RawLog']['properties']['type']['enum'][2035]PAN_PRISMA_CWP
root['schemas']['RawLog']['properties']['type']['enum'][2036]FORTINET_FORTISASE
root['schemas']['RawLog']['properties']['type']['enum'][2037]MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][2038]AWS_DASHA
root['schemas']['RawLog']['properties']['type']['enum'][2039]ONETRUST
root['schemas']['RawLog']['properties']['type']['enum'][2040]NETWRIX_PRIVILEGE_SECURE
root['schemas']['RawLog']['properties']['type']['enum'][2041]SANGFOR_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][2044]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][2047]SNF_SDH
root['schemas']['RawLog']['properties']['type']['enum'][2052]SOFTETHER_VPN
root['schemas']['RawLog']['properties']['type']['enum'][2055]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2065]UNICO_IDCLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2066]UNICO_IDTRUST
root['schemas']['RawLog']['properties']['type']['enum'][2085]WING_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][2087]WSGC_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2088]ZERO_NETWORKS
root['schemas']['RawLog']['properties']['type']['enum'][2101]JUNIPER_SSR_CONDUCTOR
root['schemas']['RawLog']['properties']['type']['enum'][2102]INFORMATICA_POWERCENTER
root['schemas']['RawLog']['properties']['type']['enum'][2113]EXTERRO_FTK_CENTRAL
root['schemas']['RawLog']['properties']['type']['enum'][2114]CROWDSTRIKE_RECON
root['schemas']['RawLog']['properties']['type']['enum'][2115]CLOUDFLARE_PAGESHIELD
root['schemas']['RawLog']['properties']['type']['enum'][2116]FORTRA_VM
root['schemas']['RawLog']['properties']['type']['enum'][2117]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['RawLog']['properties']['type']['enum'][2118]RAPID_IDENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2119]SLSFR_VERTEX_IOC
root['schemas']['RawLog']['properties']['type']['enum'][2120]ARCDA_VISTA
root['schemas']['RawLog']['properties']['type']['enum'][2121]PRMTH_WSO2
root['schemas']['RawLog']['properties']['type']['enum'][2122]MC001_CLICKS_ENTERPAT
root['schemas']['RawLog']['properties']['type']['enum'][2123]MC001_CLICKS_CLIUSERS
root['schemas']['RawLog']['properties']['type']['enum'][2124]MC001_ROSHTOV_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][2125]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['RawLog']['properties']['type']['enum'][2126]MC001_MACCABI_PHARMACY
root['schemas']['RawLog']['properties']['type']['enum'][2127]SPACELIFT
root['schemas']['RawLog']['properties']['type']['enum'][2128]PAVE
root['schemas']['RawLog']['properties']['type']['enum'][2129]MC001_MACCABI_NEW_APP
root['schemas']['RawLog']['properties']['type']['enum'][2130]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2131]MC001_OFEK_EITAN
root['schemas']['RawLog']['properties']['type']['enum'][2132]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2133]MC001_MACCABI_ONLINE_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2134]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['RawLog']['properties']['type']['enum'][2135]CPS_JED_JCD_METRIC
root['schemas']['RawLog']['properties']['type']['enum'][2136]H_ISAC
root['schemas']['RawLog']['properties']['type']['enum'][2137]IIJ_LANSCOPE
root['schemas']['RawLog']['properties']['type']['enum'][2138]ML009_MENLO
root['schemas']['RawLog']['properties']['type']['enum'][2429]BBVA_CUSTODIA
root['schemas']['RawLog']['properties']['type']['enum'][2430]BBVA_CREDIT_VW
root['schemas']['RawLog']['properties']['type']['enum'][2431]BBVA_CREDIT
root['schemas']['RawLog']['properties']['type']['enum'][2494]BBVA_WALLSTREET
root['schemas']['RawLog']['properties']['type']['enum'][2496]INFORMATICA
root['schemas']['RawLog']['properties']['type']['enum'][2737]MT_APPLIED_PRINT
root['schemas']['RawLog']['properties']['type']['enum'][2756]HANNA_KASEYA_IT_GLUE
root['schemas']['RawLog']['properties']['type']['enum'][2757]KNRTH_COMMONFATE
root['schemas']['RawLog']['properties']['type']['enum'][2759]PARXL_MERAKI_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2763]PRMTH_FIRSTIQ
root['schemas']['RawLog']['properties']['type']['enum'][2764]PRMTH_PWSS
root['schemas']['RawLog']['properties']['type']['enum'][2783]RENAULT_IRN_74898
root['schemas']['RawLog']['properties']['type']['enum'][2784]RENAULT_IRN_73882
root['schemas']['RawLog']['properties']['type']['enum'][2785]RENAULT_IRN_72284
root['schemas']['RawLog']['properties']['type']['enum'][2786]RENAULT_IRN_74143
root['schemas']['RawLog']['properties']['type']['enum'][2787]RENAULT_IRN_70132
root['schemas']['RawLog']['properties']['type']['enum'][2788]RENAULT_IRN_50567
root['schemas']['RawLog']['properties']['type']['enum'][2789]RENAULT_IRN_8185
root['schemas']['RawLog']['properties']['type']['enum'][2790]RENAULT_IRN_77153
root['schemas']['RawLog']['properties']['type']['enum'][2791]RENAULT_IRN_67551
root['schemas']['RawLog']['properties']['type']['enum'][2792]RENAULT_IRN_73940
root['schemas']['RawLog']['properties']['type']['enum'][2793]RENAULT_IRN_75039
root['schemas']['RawLog']['properties']['type']['enum'][2794]RENAULT_IRN_69293
root['schemas']['RawLog']['properties']['type']['enum'][2795]RENAULT_IRN_74601
root['schemas']['RawLog']['properties']['type']['enum'][2799]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][2812]SML_SITEMINDER_PP
root['schemas']['RawLog']['properties']['type']['enum'][2824]SNF_FORENSIC_PREFETCH
root['schemas']['RawLog']['properties']['type']['enum'][2825]SNF_FORENSIC_HAYABUSA
root['schemas']['RawLog']['properties']['type']['enum'][2864]SHOPIFY_APV
root['schemas']['RawLog']['properties']['type']['enum'][2882]SHOPIFY_SVC_INT_2
root['schemas']['RawLog']['properties']['type']['enum'][2913]VCTR727_AURUS
root['schemas']['RawLog']['properties']['type']['enum'][2946]WMT_GENAI
root['schemas']['RawLog']['properties']['type']['enum'][2968]WSGC_ECOM
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][1]The registry value is not set and only the key exists.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][2]A null-terminated string.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][3]A null-terminated string that contains unexpanded references to environment variables
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][4]Binary data in any form.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][5]A 32-bit number.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][6]A 32-bit number in little-endian format.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][7]A 32-bit number in big-endian format.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][8]A null-terminated Unicode string that contains the target path of a symbolic link.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][9]A sequence of null-terminated strings, terminated by an empty string
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][10]A device driver resource list.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][11]A 64-bit number.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][12]A 64-bit number in little-endian format.
root['schemas']['Relation']['properties']['direction']['enumDescriptions'][1]Modeled in both directions. Primary entity (a) to related entity (b) and related entity (b) to primary entity (a).
root['schemas']['Relation']['properties']['direction']['enumDescriptions'][2]Modeled in a single direction. Primary entity (a) to related entity (b).
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][1]The Noun represents a principal type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][2]The Noun represents a target type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][3]The Noun represents an observer type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][4]The Noun represents src type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][5]The Noun represents a network type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][6]The Noun represents a SecurityResult object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][7]The Noun represents an intermediary type object.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][2]User.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][3]Group.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][4]Resource.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][5]An external IP address.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][6]A file.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][7]A domain.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][8]A url.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][9]A mutex.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][10]A metric.
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][1]Related entity is owned by the primary entity (e.g. user owns device asset).
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][2]Related entity is administered by the primary entity (e.g. user administers a group).
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][3]Primary entity is a member of the related entity (e.g. user is a member of a group).
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][4]Primary entity may have executed the related entity.
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][5]Primary entity may have been downloaded from the related entity.
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][6]Primary entity contacts the related entity.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][1]Mutex.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][2]Task.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][3]Named pipe.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][4]Device.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][5]Firewall rule.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][6]Mailbox folder.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][7]VPC Network.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][8]Virtual machine.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][9]Storage bucket.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][10]Storage object.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][11]Database.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][12]Data table.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][13]Cloud project.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][14]Cloud organization.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][15]Service account.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][16]Access policy.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][17]Cluster.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][18]Settings.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][19]Dataset.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][20]Endpoint that receive traffic from a load balancer or proxy.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][21]Pod, which is a collection of containers. Often used in Kubernetes.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][22]Container.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][23]Cloud function.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][24]Runtime.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][25]IP address.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][26]Disk.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][27]Volume.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][28]Machine image.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][29]Snapshot.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][30]Repository.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][31]Credential, e.g. access keys, ssh keys, tokens, certificates.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][32]Load balancer.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][33]Gateway.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][34]Subnet.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][35]User.
root['schemas']['ResponsePlatformInfo']['properties']['responsePlatformType']['enumDescriptions'][1]Siemplify
root['schemas']['Role']['properties']['type']['enumDescriptions'][1]Product administrator with elevated privileges.
root['schemas']['Role']['properties']['type']['enumDescriptions'][2]System service account for automated privilege access.
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][91]FRONT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][94]VUHL_SO_IDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][221]TEHTRIS_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][222]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][223]GCLDW_CLODWAVE_HIDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][243]CYNERIO_NDR_H
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][282]WIREGUARD_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][290]CLAVISTER_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][427]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][467]VICARIUS_VRX_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][603]FORTINET_ADC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][622]HUAWEI_WIRELESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][627]AZURE_VNET_FLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][629]CISCO_NETFLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][641]BELDEN_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][666]HP_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][681]VELOCLOUD_SDWAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][708]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][709]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][710]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][745]TRELLIX_HX_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][807]RAVEN_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][827]AZURE_RISKY_USERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][828]AZURE_RISK_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][829]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][859]D_OPENPATH_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][873]CIP_FASTWEB_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][947]SOLIDSERVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][990]HLX_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][991]CMB_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1013]WFA_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1020]PINGONE_AIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1021]PINGONE_PROTECT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1129]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1130]FOXPASS_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1131]DRAYTEK_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1132]CHROMEOS_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1133]VECTRA_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1134]METABASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1135]HUAWEI_FUSIONSPHERE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1136]HUAWEI_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1281]MY_SAILPOINT_LIFECYCLE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1366]ONEIDENTITY_SAFEGUARD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1399]CLICKHOUSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1422]JOBLOGIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1461]ZOHO_ASSIST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1483]OPENTEXT_CORDY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1526]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1556]CROWDSTRIKE_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1625]JAMF_TELEMETRY_V2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1820]IBM_SENSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1829]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1830]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1839]ACN_SIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1840]ARCON_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1843]ARCDA_COREWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1844]IBM_SVA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1848]AUTODESK_CAD_CAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1850]FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1857]BLUE_VOYANT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1858]BBVA_MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1864]CAMEYO_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1872]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1874]CMMRZ_FORTI_DECEPTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1875]CSG_CITRIX_RX
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1876]EQIX_CONFIGURATION_BUILDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1879]D_STORMBREAKER_ALERTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1880]D_STORMBREAKER_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1891]FA_SOLUTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1892]FILES_DOT_COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1893]FINCOMUN_ORACLE_SPEI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1900]GHANGOR_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1905]NETLIFY_LOGDRAINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1916]GDLP_ATLAS_USER_ELEVATION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1922]HSCR_ACCOUNTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1923]HILLSTONE_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1924]HOXHUNT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1926]MC001_ELASTIC_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1933]INTEL_EMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1939]INDUSFACE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1950]MLL001_MOL_AGYIEUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1951]MLL001_MOL_SFTPGO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1952]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1953]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1954]MLL001_MOL_PCI_DC_SAD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1955]MLL001_MOL_PCI_DB_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1956]MLL001_MOL_PCI_GKE_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1957]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1958]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1959]MLL001_MOL_PCI_TOKENISER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1974]PINGCAP_TIDB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1975]PLUMFINTECH_PLUM_SCA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1979]PRIVACY_I
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1984]JIRANSECURITY_MAILSCREEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1985]MY_RESOLVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1986]REVIVESEC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1989]BRDCM_IMS_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1990]BBVA_BANKTRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1991]BBVA_CONSORES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1992]RQTI0LIH_VERVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1993]RQTI0LIH_ONEHUB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1994]RQTI0LIH_EPI_MES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1995]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1996]SAP_LEASING
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1997]BBVA_SIRE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1998]BBVA_POWER_CURVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1999]BBVA_SMARTSTREAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2000]BBVA_SOLUCIONES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2001]BBVA_TEXSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2002]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2003]BBVA_SIIBE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2004]BBVA_MBOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2005]BBVA_SINBA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2006]BBVA_MSDP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2007]BBVA_PLUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2008]BBVA_CAIRO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2009]BBVA_SICOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2010]BBVA_FUMER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2011]BBVA_MCOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2012]BBVA_MCWN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2013]BBVA_ZEIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2014]BBVA_CYGE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2015]BBVA_SISP_NET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2016]BBVA_CLAIM_CENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2017]BBVA_SAIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2018]BBVA_SPWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2019]BBVA_VALIDADOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2020]BBVA_GUIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2021]BBVA_HECO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2022]GL_TRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2023]ORACLE_AVDF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2024]REBLAZE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2025]VZ_MAXMIND_GEOIP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2026]TT002_EXASOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2027]CORERO_SMARTWALL_ONE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2028]AVEPOINT_ENPOWER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2029]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2030]GITHUB_DEPENDABOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2031]AWS_EKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2032]THALES_PS10K_HSM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2033]F5_DCS_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2034]CLOUDWAVE_HONEYPOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2035]PAN_PRISMA_CWP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2036]FORTINET_FORTISASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2037]MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2038]AWS_DASHA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2039]ONETRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2040]NETWRIX_PRIVILEGE_SECURE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2041]SANGFOR_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2044]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2047]SNF_SDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2052]SOFTETHER_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2055]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2065]UNICO_IDCLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2066]UNICO_IDTRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2085]WING_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2087]WSGC_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2088]ZERO_NETWORKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2101]JUNIPER_SSR_CONDUCTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2102]INFORMATICA_POWERCENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2113]EXTERRO_FTK_CENTRAL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2114]CROWDSTRIKE_RECON
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2115]CLOUDFLARE_PAGESHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2116]FORTRA_VM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2117]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2118]RAPID_IDENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2119]SLSFR_VERTEX_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2120]ARCDA_VISTA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2121]PRMTH_WSO2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2122]MC001_CLICKS_ENTERPAT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2123]MC001_CLICKS_CLIUSERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2124]MC001_ROSHTOV_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2125]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2126]MC001_MACCABI_PHARMACY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2127]SPACELIFT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2128]PAVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2129]MC001_MACCABI_NEW_APP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2130]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2131]MC001_OFEK_EITAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2132]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2133]MC001_MACCABI_ONLINE_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2134]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2135]CPS_JED_JCD_METRIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2136]H_ISAC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2137]IIJ_LANSCOPE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2138]ML009_MENLO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2429]BBVA_CUSTODIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2430]BBVA_CREDIT_VW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2431]BBVA_CREDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2494]BBVA_WALLSTREET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2496]INFORMATICA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2737]MT_APPLIED_PRINT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2756]HANNA_KASEYA_IT_GLUE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2757]KNRTH_COMMONFATE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2759]PARXL_MERAKI_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2763]PRMTH_FIRSTIQ
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2764]PRMTH_PWSS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2783]RENAULT_IRN_74898
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2784]RENAULT_IRN_73882
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2785]RENAULT_IRN_72284
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2786]RENAULT_IRN_74143
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2787]RENAULT_IRN_70132
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2788]RENAULT_IRN_50567
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2789]RENAULT_IRN_8185
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2790]RENAULT_IRN_77153
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2791]RENAULT_IRN_67551
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2792]RENAULT_IRN_73940
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2793]RENAULT_IRN_75039
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2794]RENAULT_IRN_69293
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2795]RENAULT_IRN_74601
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2799]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2812]SML_SITEMINDER_PP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2824]SNF_FORENSIC_PREFETCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2825]SNF_FORENSIC_HAYABUSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2864]SHOPIFY_APV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2882]SHOPIFY_SVC_INT_2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2913]VCTR727_AURUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2946]WMT_GENAI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2968]WSGC_ECOM
root['schemas']['SearchHistory']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchQuery']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][1]Allowed.
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][2]Blocked.
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][3]Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][4]Put somewhere for later analysis (does NOT imply block).
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][5]Failed (e.g. the event was allowed but failed).
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][6]Challenged (e.g. the user was challenged by a Captcha, 2FA).
root['schemas']['SecurityResult']['properties']['alertState']['enumDescriptions'][1]The security result is not an alert.
root['schemas']['SecurityResult']['properties']['alertState']['enumDescriptions'][2]The security result is an alert.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][1]Malware, spyware, rootkit.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][2]Below the conviction threshold; probably bad.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][3]Potentially Unwanted App (such as adware).
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][4]Includes C&C or network exploit.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][5]Suspicious activity, such as potential reverse tunnel.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][6]Non-security related: URL has category like gambling or porn.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][7]DoS, DDoS.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][8]Port scan detected by an IDS, probing of web app.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][9]If we know this is a C&C channel.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][10]Unauthorized access attempted, including attempted access to files, web services, processes, web objects, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][11]Authentication failed (e.g. bad password or bad 2-factor authentication).
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][12]Exploit: For all manner of exploits including attempted overflows, bad protocol encodings, ROP, SQL injection, etc. For both network and host- based exploits.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][13]DLP: Sensitive data transmission, copy to thumb drive.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][14]DLP: Sensitive data found at rest in a scan.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][15]Attempt to destroy/delete data.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][16]TOR Exit Nodes.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][17]Spam email, message, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][18]Phishing email, chat messages, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][19]Spoofed source email address, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][20]Security-related policy violation (e.g. firewall/proxy/HIPS rule violated, NAC block action).
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][21]Threats which manipulate to break normal security procedures.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][22]Phishing pages, pops, https phishing etc.
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][1]Low confidence.
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][2]Medium confidence.
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][3]High confidence.
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][1]Low priority.
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][2]Medium priority.
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][3]High priority.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][1]Info severity.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][2]An error.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][3]No malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][4]Low-severity malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][5]Medium-severity malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][6]High-severity malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][7]Critical-severity malicious result.
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][3]Uppercase
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][1]Active threat.
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][2]Cleared threat.
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][3]False positive.
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][1]Undetected threat verdict level.
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][2]Suspicious threat verdict level.
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][3]Malicious threat verdict level.
root['schemas']['Source']['properties']['quality']['enumDescriptions'][1]Low confidence.
root['schemas']['Source']['properties']['quality']['enumDescriptions'][2]Medium confidence.
root['schemas']['Source']['properties']['quality']['enumDescriptions'][3]High confidence.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][1]A human account part of some domain in directory services.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][2]A local machine account.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][3]A SaaS service account type (such as Slack or GitHub).
root['schemas']['User']['properties']['accountType']['enumDescriptions'][4]A non-human account for data access.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][5]A system built in default account.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][1]The authentication method is in active state.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][2]The authentication method is in suspended/disabled state.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][3]The authentication method has no active credentials.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][4]The authentication method has been deleted.
root['schemas']['User']['properties']['userRole']['enumDescriptions'][1]Product administrator with elevated privileges.
root['schemas']['User']['properties']['userRole']['enumDescriptions'][2]System service account for automated privilege access. Deprecated: not a role, instead set User.account_type.
root['schemas']['UserError']['properties']['reason']['enum'][15]INVALID_CONFIG_FOR_DASHBOARD_IMPORT
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][15]Invalid config for dashboard import. Example ErrorInfo: { "reason": "INVALID_CONFIG_FOR_DASHBOARD_IMPORT", "domain": "chronicle.googleapis.com", }
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][1]Allowed.
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][2]Blocked.
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][3]Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][4]Put somewhere for later analysis (does NOT imply block).
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][5]Failed (e.g. the event was allowed but failed).
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][6]Challenged (e.g. the user was challenged by a Captcha, 2FA).
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['VerdictInfo']['properties']['verdictResponse']['enumDescriptions'][1]VerdictResponse resulted a threat as malicious.
root['schemas']['VerdictInfo']['properties']['verdictResponse']['enumDescriptions'][2]VerdictResponse resulted a threat as benign.
root['schemas']['VerdictInfo']['properties']['verdictType']['enumDescriptions'][1]MLVerdict result provided from threat providers, like Mandiant. These fields are used to model Mandiant sources.
root['schemas']['VerdictInfo']['properties']['verdictType']['enumDescriptions'][2]Verdict provided by the human analyst. These fields are used to model Mandiant sources.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][1]Low severity.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][2]Medium severity.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][3]High severity.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][4]Critical severity.
iterable_item_removed
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1919]WSGC_WSI_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1919]WSGC_WSI_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1919]WSGC_WSI_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2739]WSGC_WSI_ECOM
prod/eu-chronicle-v1beta
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['referenceLists']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['rules']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['CompilationDiagnostic']
  • root['schemas']['CompilationPosition']
  • root['schemas']['ListOperationsResponse']
  • root['schemas']['ListReferenceListsResponse']
  • root['schemas']['ListRetrohuntsResponse']
  • root['schemas']['ListRuleDeploymentsResponse']
  • root['schemas']['ListRuleRevisionsResponse']
  • root['schemas']['ListRulesResponse']
  • root['schemas']['Operation']
  • root['schemas']['ReferenceList']
  • root['schemas']['ReferenceListEntry']
  • root['schemas']['ReferenceListScope']
  • root['schemas']['Retrohunt']
  • root['schemas']['Rule']
  • root['schemas']['RuleDeployment']
  • root['schemas']['ScopeInfo']
  • root['schemas']['Severity']
  • root['schemas']['Status']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250213
old_value20241212
root['schemas']['DataAccessScope']['properties']['allowedDataAccessLabels']['description']
new_valueOptional. The allowed labels for the scope. Either allow_all or allowed_data_access_labels needs to be provided. When provided, there has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
old_valueRequired. The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allow_all or allowed_data_access_labels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
root['schemas']['Instance']['properties']
new_value
customerCode
descriptionAn acronym related to the company name.
typestring
displayName
descriptionThe display name of the instance.
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
secopsUrls
descriptionURL of the SecOps instance for the instance. https://.backstory.chronicle.security
items
typestring
typearray
old_value
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
wipeoutStatus
descriptionOutput only. The wipeout status of the instance.
enum
  • WIPEOUT_STATE_UNSPECIFIED
  • DELETE_REQUESTED
  • SOFT_DELETE_IN_PROGRESS
  • SOFT_DELETE_COMPLETED
  • UNDELETE_REQUESTED
  • DATA_DELETION_IN_PROGRESS
  • ERROR
  • WIPED_OUT
  • UNDELETE_COMPLETED
enumDescriptions
  • The default value.
  • The instance has requested deletion.
  • The instance is in the process of being soft-deleted.
  • The instance has been soft-deleted.
  • The instance has requested undeletion.
  • The instance is in the process of being data deleted.
  • The instance has an error during wipeout.
  • The instance has been wiped out.
  • The instance has been undeleted.
readOnlyTrue
typestring
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][15]INVALID_CONFIG_FOR_DASHBOARD_IMPORT
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][15]Invalid config for dashboard import. Example ErrorInfo: { "reason": "INVALID_CONFIG_FOR_DASHBOARD_IMPORT", "domain": "chronicle.googleapis.com", }
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/eu-rbmopenmaap-
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/eu-rbmopenmaap-v1
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/europe-west2-chronicle-
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/europe-west2-chronicle-v1alpha
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feedPacks']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feeds']['methods']['scheduleTransfer']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacyBatchGetCollections']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['threatArtifactId']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['export']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['import']
  • root['schemas']['AzureAuthV2']
  • root['schemas']['AzureBlobStoreV2Settings']
  • root['schemas']['DynamicParsingConfig']
  • root['schemas']['EnrichmentInfo']
  • root['schemas']['EntityChangedCountTimelineBucket']
  • root['schemas']['EntityChangedInfo']
  • root['schemas']['ExportNativeDashboardsRequest']
  • root['schemas']['ExportNativeDashboardsResponse']
  • root['schemas']['FederationGroupSelection']
  • root['schemas']['FederationMetadata']
  • root['schemas']['FeedPack']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnMetadata']
  • root['schemas']['ImportExportStatus']
  • root['schemas']['ImportNativeDashboardsInlineSource']
  • root['schemas']['ImportNativeDashboardsRequest']
  • root['schemas']['ImportNativeDashboardsResponse']
  • root['schemas']['InlineDestination']
  • root['schemas']['InstanceSelection']
  • root['schemas']['LegacyBatchGetCollectionsResponse']
  • root['schemas']['ListFeedPacksResponse']
  • root['schemas']['LogField']
  • root['schemas']['MetricTrendConfig']
  • root['schemas']['MssoAuthentication']
  • root['schemas']['NativeDashboardWithChartsAndQueries']
  • root['schemas']['PackLogType']
  • root['schemas']['ScheduleFeedTransferErrorDetails']
  • root['schemas']['ScheduleFeedTransferRequest']
  • root['schemas']['ScheduleFeedTransferResponse']
  • root['schemas']['SearchDataTableColumnInfo']
  • root['schemas']['SearchDataTableInfo']
  • root['schemas']['SearchDataTableRow']
  • root['schemas']['SearchDataTableRowInfo']
  • root['schemas']['TrellixHxAlertsSettings']
  • root['schemas']['TrellixHxHostsSettings']
  • root['schemas']['TrellixIAMAuthentication']
  • root['schemas']['TrellixStarXAuthentication']
  • root['schemas']['DataTable']['properties']['updateSource']
  • root['schemas']['Dhcp']['properties']['clientIdentifierString']
  • root['schemas']['EventCountTimelineBucket']['properties']['baselineTimedEntityCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['entityChangedCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['filteredTimedEntityCount']
  • root['schemas']['FeedDetails']['properties']['azureBlobStoreV2Settings']
  • root['schemas']['FeedDetails']['properties']['trellixHxAlertsSettings']
  • root['schemas']['FeedDetails']['properties']['trellixHxHostsSettings']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['compressArrayFields']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['useArrayBracketNotation']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnData']['properties']['columnMetadata']
  • root['schemas']['IDM']['properties']['assetEnrichmentInfo']
  • root['schemas']['IDM']['properties']['geoipEnrichmentInfo']
  • root['schemas']['IDM']['properties']['processEnrichmentInfo']
  • root['schemas']['IDM']['properties']['userEnrichmentInfo']
  • root['schemas']['IDM']['properties']['vtFilemetadataEnrichmentInfo']
  • root['schemas']['IocAssociation']['properties']['associatedActors']['deprecated']
  • root['schemas']['IocAssociation']['properties']['countryCode']['deprecated']
  • root['schemas']['LegacyFetchUdmSearchViewRequest']['properties']['federationMetadata']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageToken']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageToken']
  • root['schemas']['LogType']['properties']['customLogTypeLabel']
  • root['schemas']['LogType']['properties']['isCustom']
  • root['schemas']['LogType']['properties']['productSource']
  • root['schemas']['ParserExtension']['properties']['dynamicParsing']
  • root['schemas']['SecurityResult']['properties']['detectionDepth']
  • root['schemas']['Series']['properties']['metricTrendConfig']
  • root['schemas']['UdmEventInfo']['properties']['connectedComponentLabel']
  • root['schemas']['UdmEventInfo']['properties']['datatableRowInfo']
  • root['schemas']['UdmEventInfo']['properties']['tenantId']
  • root['schemas']['UdmEventList']['properties']['datatableInfo']
dictionary_item_removed
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardCharts']['methods']['list']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardQueries']['methods']['list']
  • root['schemas']['ListDashboardChartsResponse']
  • root['schemas']['ListDashboardQueriesResponse']
  • root['schemas']['StringToInt64MapEntry']['description']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['parameters']['filter']['description']
new_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.product_object_id - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
old_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['fetchPrioritizedIocsOnly']['description']
new_valueOptional. Indicates if only prioritized iocs should be fetched. If threat artifact id is set, this must be not be set.
old_valueOptional. Indicates if only prioritized iocs should be fetched.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchRulesAlerts']['parameters']['maxNumAlertsToReturn']['description']
new_valueOptional. The maximum number of alerts to return. The default and maximum value is 10,000; values above that will be coerced to 10,000. When the number of available alerts is greater than this value, the response will contain a too_many_alerts field set to true.
old_valueOptional. Maximum number of alerts to return.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['patch']['parameters']['updateMask']['description']
new_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned
old_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_native_dashboard)
root['revision']
new_value20250224
old_value20250102
root['schemas']['Collection']['description']
new_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20
old_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20 LINT.IfChange
root['schemas']['Dhcp']['properties']['clientIdentifier']['description']
new_valueClient identifier. See RFC2132, section 9.14. Note: Make sure to update the client_identifier_string field as well if you update this field.
old_valueClient identifier. See RFC2132, section 9.14.
root['schemas']['EditChartRequest']['properties']['editMask']['description']
new_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input
old_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_chart)
root['schemas']['EntityRisk']['description']
new_valueStores information related to the risk score of an entity. Next ID: 14
old_valueStores information related to the risk score of an entity.
root['schemas']['ExifInfo']['description']
new_valueExif information.
old_value@hide_from_doc
root['schemas']['FileMetadata']['description']
new_valueMetadata about a file. Place metadata about different file types here, for example data from the Microsoft Windows VersionInfo block or digital signer details. Use a different sub-message per file type.
old_value@hide_from_doc
root['schemas']['FileMetadataImports']['description']
new_valueFile metadata imports.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['description']
new_valueFile metadata for PE resource.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['properties']['filetypeMagic']['description']
new_valueType of resource content, as identified by the magic Python module.
old_valueType of resource content, as identified by the magic Python module. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/magic.py END GOOGLE-INTERNAL
root['schemas']['FileMetadataPeResourceInfo']['properties']['languageCode']['description']
new_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
old_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/toolpefile.py?l=419&rcl=df1fcff7c5e82a39875359608b47669d5aff82c7 END GOOGLE-INTERNAL Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
root['schemas']['FileMetadataSection']['description']
new_valueFile metadata section.
old_value@hide_from_doc
root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStats']['description']
new_valueLINT.IfChange(stats_data) Stats results when the query is for statistics NEXT TAG = 6;
old_valueLINT.IfChange (stats_data) Stats results when the query is for statistics NEXT TAG = 6;
root['schemas']['IocAssociation']['properties']['countryCode']['description']
new_valueOutput only. Deprecated. Use region_code instead. Country from which the threat actor originated.
old_valueOutput only. Country from which the threat actor/ malware is originated.
root['schemas']['IocAssociation']['properties']['regionCode']['description']
new_valueOutput only. Name of the country the threat is originating from.
old_valueOutput only. Name of the country, the threat is originating from.
root['schemas']['Label']['properties']['source']['description']
new_valueWhere the label is derived from.
old_value@hide_from_doc
root['schemas']['LegacySearchRulesAlertsResponse']['properties']['tooManyAlerts']['description']
new_valueIndicates that more data was available but not sent due to more hits than max_num_alerts_to_return.
old_valueIndicates that more data was available but not sent due to more hits than max_matches_to_return.
root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['continuationTime']['description']
new_valueOptional. DEPRECATED: Prefer using `page_token` or `page_start_time` instead. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. All detection alerts discovered after `continuation_time` will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
old_valueOptional. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. When initiating the very first connection, clients should leave this unspecified. If unspecified, this defaults to the time of the connection. All detection alerts discovered after continuation_time will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['continuationTime']['description']
new_valueDEPRECATED: Prefer using `page_token` instead by specifying either `page_start_time` or `page_token` in the request. A continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
old_valueA continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
root['schemas']['LogType']['properties']['displayName']['description']
new_valueRequired. The display name of this log type. This is the tag used in YARA-l rules and search queries.
old_valueRequired. The display name of this log type.
root['schemas']['Metadata']['description']
new_valueGeneral information associated with a UDM event.
old_valueNEXT TAG: 21 General information associated with a UDM event.
root['schemas']['StatusProto']['properties']['canonicalCode']['description']
new_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;
old_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be.
root['schemas']['StatusProto']['properties']['code']['description']
new_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;
old_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto
root['schemas']['StatusProto']['properties']['space']['description']
new_valueThe following are usually only present when code != 0 Space to which this status belongs copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string space = 2;
old_valueThe following are usually only present when code != 0 Space to which this status belongs
root['schemas']['Visualization']['description']
new_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 16
old_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 15
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][17]
new_valueSpam email, message, etc.
old_value@exclude Spam email, message, etc.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
iterable_item_added
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][8]RULES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][8]RULES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['EdrEvent']['properties']['dataSource']['enum'][23]TRELLIX
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['FeedDetails']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedDetails']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][91]FRONT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][94]VUHL_SO_IDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][222]TEHTRIS_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][244]CYNERIO_NDR_H
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][283]WIREGUARD_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][604]FORTINET_ADC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][630]CISCO_NETFLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][642]BELDEN_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][667]HP_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][808]RAVEN_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][817]TERADATA_ACCESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][818]TERADATA_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][950]SOLIDSERVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1023]PINGONE_AIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1024]PINGONE_PROTECT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1135]CHROMEOS_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1136]VECTRA_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1137]METABASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1402]CLICKHOUSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1425]JOBLOGIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1464]ZOHO_ASSIST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1825]IBM_SENSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1844]ACN_SIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1845]ARCON_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1849]ARCDA_COREWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1851]IBM_SVA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1857]FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1864]BLUE_VOYANT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1901]FA_SOLUTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1902]FILES_DOT_COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1910]GHANGOR_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1938]HOXHUNT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1939]ISL_LIGHT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1951]INTEL_EMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1957]INDUSFACE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1999]PINGCAP_TIDB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2004]PRIVACY_I
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2010]MY_RESOLVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2011]REVIVESEC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2016]BBVA_CONSORES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2021]SAP_LEASING
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2022]BBVA_SIRE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2026]BBVA_TEXSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2028]BBVA_SIIBE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2029]BBVA_MBOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2030]BBVA_SINBA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2031]BBVA_MSDP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2032]BBVA_PLUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2033]BBVA_CAIRO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2034]BBVA_SICOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2035]BBVA_FUMER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2036]BBVA_MCOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2037]BBVA_MCWN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2038]BBVA_ZEIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2039]BBVA_CYGE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2040]BBVA_SISP_NET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2042]BBVA_SAIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2043]BBVA_SPWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2045]BBVA_GUIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2046]BBVA_HECO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2047]GL_TRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2048]ORACLE_AVDF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2049]REBLAZE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2051]TT002_EXASOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2056]AWS_EKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2058]F5_DCS_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2062]MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2063]AWS_DASHA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2064]ONETRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2066]SANGFOR_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2072]SNF_SDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2074]SECURDEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2078]SOFTETHER_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2092]UNICO_IDTRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2111]WING_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2114]ZERO_NETWORKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2142]FORTRA_VM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2144]RAPID_IDENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2146]ARCDA_VISTA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2147]PRMTH_WSO2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2153]SPACELIFT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2154]PAVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2162]H_ISAC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2164]ML009_MENLO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2457]BBVA_CREDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2522]INFORMATICA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2790]PRMTH_PWSS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2891]SHOPIFY_APV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2940]VCTR727_AURUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2973]WMT_GENAI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2995]WSGC_ECOM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][3007]WMT_VDI
root['schemas']['RawLog']['properties']['type']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['RawLog']['properties']['type']['enum'][91]FRONT
root['schemas']['RawLog']['properties']['type']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][94]VUHL_SO_IDH
root['schemas']['RawLog']['properties']['type']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['RawLog']['properties']['type']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['RawLog']['properties']['type']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['RawLog']['properties']['type']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['RawLog']['properties']['type']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['RawLog']['properties']['type']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['RawLog']['properties']['type']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['RawLog']['properties']['type']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['RawLog']['properties']['type']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['RawLog']['properties']['type']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['RawLog']['properties']['type']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['RawLog']['properties']['type']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][222]TEHTRIS_EDR
root['schemas']['RawLog']['properties']['type']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['RawLog']['properties']['type']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['RawLog']['properties']['type']['enum'][244]CYNERIO_NDR_H
root['schemas']['RawLog']['properties']['type']['enum'][283]WIREGUARD_VPN
root['schemas']['RawLog']['properties']['type']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][604]FORTINET_ADC
root['schemas']['RawLog']['properties']['type']['enum'][623]HUAWEI_WIRELESS
root['schemas']['RawLog']['properties']['type']['enum'][628]AZURE_VNET_FLOW
root['schemas']['RawLog']['properties']['type']['enum'][630]CISCO_NETFLOW
root['schemas']['RawLog']['properties']['type']['enum'][642]BELDEN_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][667]HP_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['RawLog']['properties']['type']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['RawLog']['properties']['type']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['RawLog']['properties']['type']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['RawLog']['properties']['type']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][808]RAVEN_DB
root['schemas']['RawLog']['properties']['type']['enum'][817]TERADATA_ACCESS
root['schemas']['RawLog']['properties']['type']['enum'][818]TERADATA_DB
root['schemas']['RawLog']['properties']['type']['enum'][830]AZURE_RISKY_USERS
root['schemas']['RawLog']['properties']['type']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['RawLog']['properties']['type']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['RawLog']['properties']['type']['enum'][950]SOLIDSERVER
root['schemas']['RawLog']['properties']['type']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1023]PINGONE_AIC
root['schemas']['RawLog']['properties']['type']['enum'][1024]PINGONE_PROTECT
root['schemas']['RawLog']['properties']['type']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['RawLog']['properties']['type']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][1135]CHROMEOS_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1136]VECTRA_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1137]METABASE
root['schemas']['RawLog']['properties']['type']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['RawLog']['properties']['type']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['RawLog']['properties']['type']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['RawLog']['properties']['type']['enum'][1402]CLICKHOUSE
root['schemas']['RawLog']['properties']['type']['enum'][1425]JOBLOGIC
root['schemas']['RawLog']['properties']['type']['enum'][1464]ZOHO_ASSIST
root['schemas']['RawLog']['properties']['type']['enum'][1486]OPENTEXT_CORDY
root['schemas']['RawLog']['properties']['type']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['RawLog']['properties']['type']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['RawLog']['properties']['type']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['RawLog']['properties']['type']['enum'][1825]IBM_SENSE
root['schemas']['RawLog']['properties']['type']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1844]ACN_SIA
root['schemas']['RawLog']['properties']['type']['enum'][1845]ARCON_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1848]APPSMITH_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1849]ARCDA_COREWEB
root['schemas']['RawLog']['properties']['type']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][1851]IBM_SVA
root['schemas']['RawLog']['properties']['type']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['RawLog']['properties']['type']['enum'][1857]FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1864]BLUE_VOYANT
root['schemas']['RawLog']['properties']['type']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['RawLog']['properties']['type']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['RawLog']['properties']['type']['enum'][1882]CSG_CITRIX_RX
root['schemas']['RawLog']['properties']['type']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['RawLog']['properties']['type']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['RawLog']['properties']['type']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['RawLog']['properties']['type']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1901]FA_SOLUTIONS
root['schemas']['RawLog']['properties']['type']['enum'][1902]FILES_DOT_COM
root['schemas']['RawLog']['properties']['type']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['RawLog']['properties']['type']['enum'][1910]GHANGOR_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['RawLog']['properties']['type']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['RawLog']['properties']['type']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['RawLog']['properties']['type']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['RawLog']['properties']['type']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['RawLog']['properties']['type']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['RawLog']['properties']['type']['enum'][1937]HILLSTONE_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1938]HOXHUNT
root['schemas']['RawLog']['properties']['type']['enum'][1939]ISL_LIGHT
root['schemas']['RawLog']['properties']['type']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1948]RQIDJIE5_CAS
root['schemas']['RawLog']['properties']['type']['enum'][1951]INTEL_EMA
root['schemas']['RawLog']['properties']['type']['enum'][1957]INDUSFACE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['RawLog']['properties']['type']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['RawLog']['properties']['type']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['RawLog']['properties']['type']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['RawLog']['properties']['type']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['RawLog']['properties']['type']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['RawLog']['properties']['type']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['RawLog']['properties']['type']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['RawLog']['properties']['type']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['RawLog']['properties']['type']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['RawLog']['properties']['type']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['RawLog']['properties']['type']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1999]PINGCAP_TIDB
root['schemas']['RawLog']['properties']['type']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['RawLog']['properties']['type']['enum'][2004]PRIVACY_I
root['schemas']['RawLog']['properties']['type']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['RawLog']['properties']['type']['enum'][2010]MY_RESOLVER
root['schemas']['RawLog']['properties']['type']['enum'][2011]REVIVESEC
root['schemas']['RawLog']['properties']['type']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['RawLog']['properties']['type']['enum'][2015]BBVA_BANKTRADE
root['schemas']['RawLog']['properties']['type']['enum'][2016]BBVA_CONSORES
root['schemas']['RawLog']['properties']['type']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['RawLog']['properties']['type']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['RawLog']['properties']['type']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['RawLog']['properties']['type']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['RawLog']['properties']['type']['enum'][2021]SAP_LEASING
root['schemas']['RawLog']['properties']['type']['enum'][2022]BBVA_SIRE
root['schemas']['RawLog']['properties']['type']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['RawLog']['properties']['type']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['RawLog']['properties']['type']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['RawLog']['properties']['type']['enum'][2026]BBVA_TEXSA
root['schemas']['RawLog']['properties']['type']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['RawLog']['properties']['type']['enum'][2028]BBVA_SIIBE
root['schemas']['RawLog']['properties']['type']['enum'][2029]BBVA_MBOT
root['schemas']['RawLog']['properties']['type']['enum'][2030]BBVA_SINBA
root['schemas']['RawLog']['properties']['type']['enum'][2031]BBVA_MSDP
root['schemas']['RawLog']['properties']['type']['enum'][2032]BBVA_PLUS
root['schemas']['RawLog']['properties']['type']['enum'][2033]BBVA_CAIRO
root['schemas']['RawLog']['properties']['type']['enum'][2034]BBVA_SICOR
root['schemas']['RawLog']['properties']['type']['enum'][2035]BBVA_FUMER
root['schemas']['RawLog']['properties']['type']['enum'][2036]BBVA_MCOR
root['schemas']['RawLog']['properties']['type']['enum'][2037]BBVA_MCWN
root['schemas']['RawLog']['properties']['type']['enum'][2038]BBVA_ZEIT
root['schemas']['RawLog']['properties']['type']['enum'][2039]BBVA_CYGE
root['schemas']['RawLog']['properties']['type']['enum'][2040]BBVA_SISP_NET
root['schemas']['RawLog']['properties']['type']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['RawLog']['properties']['type']['enum'][2042]BBVA_SAIT
root['schemas']['RawLog']['properties']['type']['enum'][2043]BBVA_SPWEB
root['schemas']['RawLog']['properties']['type']['enum'][2044]BBVA_VALIDADOR
root['schemas']['RawLog']['properties']['type']['enum'][2045]BBVA_GUIA
root['schemas']['RawLog']['properties']['type']['enum'][2046]BBVA_HECO
root['schemas']['RawLog']['properties']['type']['enum'][2047]GL_TRADE
root['schemas']['RawLog']['properties']['type']['enum'][2048]ORACLE_AVDF
root['schemas']['RawLog']['properties']['type']['enum'][2049]REBLAZE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['RawLog']['properties']['type']['enum'][2051]TT002_EXASOL
root['schemas']['RawLog']['properties']['type']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['RawLog']['properties']['type']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['RawLog']['properties']['type']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['RawLog']['properties']['type']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['RawLog']['properties']['type']['enum'][2056]AWS_EKS
root['schemas']['RawLog']['properties']['type']['enum'][2057]THALES_PS10K_HSM
root['schemas']['RawLog']['properties']['type']['enum'][2058]F5_DCS_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['RawLog']['properties']['type']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['RawLog']['properties']['type']['enum'][2061]FORTINET_FORTISASE
root['schemas']['RawLog']['properties']['type']['enum'][2062]MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][2063]AWS_DASHA
root['schemas']['RawLog']['properties']['type']['enum'][2064]ONETRUST
root['schemas']['RawLog']['properties']['type']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['RawLog']['properties']['type']['enum'][2066]SANGFOR_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][2072]SNF_SDH
root['schemas']['RawLog']['properties']['type']['enum'][2074]SECURDEN
root['schemas']['RawLog']['properties']['type']['enum'][2078]SOFTETHER_VPN
root['schemas']['RawLog']['properties']['type']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2091]UNICO_IDCLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2092]UNICO_IDTRUST
root['schemas']['RawLog']['properties']['type']['enum'][2111]WING_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2114]ZERO_NETWORKS
root['schemas']['RawLog']['properties']['type']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['RawLog']['properties']['type']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['RawLog']['properties']['type']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['RawLog']['properties']['type']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['RawLog']['properties']['type']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['RawLog']['properties']['type']['enum'][2142]FORTRA_VM
root['schemas']['RawLog']['properties']['type']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['RawLog']['properties']['type']['enum'][2144]RAPID_IDENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['RawLog']['properties']['type']['enum'][2146]ARCDA_VISTA
root['schemas']['RawLog']['properties']['type']['enum'][2147]PRMTH_WSO2
root['schemas']['RawLog']['properties']['type']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['RawLog']['properties']['type']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['RawLog']['properties']['type']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['RawLog']['properties']['type']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['RawLog']['properties']['type']['enum'][2153]SPACELIFT
root['schemas']['RawLog']['properties']['type']['enum'][2154]PAVE
root['schemas']['RawLog']['properties']['type']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['RawLog']['properties']['type']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['RawLog']['properties']['type']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['RawLog']['properties']['type']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['RawLog']['properties']['type']['enum'][2162]H_ISAC
root['schemas']['RawLog']['properties']['type']['enum'][2163]IIJ_LANSCOPE
root['schemas']['RawLog']['properties']['type']['enum'][2164]ML009_MENLO
root['schemas']['RawLog']['properties']['type']['enum'][2455]BBVA_CUSTODIA
root['schemas']['RawLog']['properties']['type']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['RawLog']['properties']['type']['enum'][2457]BBVA_CREDIT
root['schemas']['RawLog']['properties']['type']['enum'][2520]BBVA_WALLSTREET
root['schemas']['RawLog']['properties']['type']['enum'][2522]INFORMATICA
root['schemas']['RawLog']['properties']['type']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['RawLog']['properties']['type']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['RawLog']['properties']['type']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['RawLog']['properties']['type']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['RawLog']['properties']['type']['enum'][2790]PRMTH_PWSS
root['schemas']['RawLog']['properties']['type']['enum'][2794]RENAULT_IRN_74011
root['schemas']['RawLog']['properties']['type']['enum'][2810]RENAULT_IRN_74898
root['schemas']['RawLog']['properties']['type']['enum'][2811]RENAULT_IRN_73882
root['schemas']['RawLog']['properties']['type']['enum'][2812]RENAULT_IRN_72284
root['schemas']['RawLog']['properties']['type']['enum'][2813]RENAULT_IRN_74143
root['schemas']['RawLog']['properties']['type']['enum'][2814]RENAULT_IRN_70132
root['schemas']['RawLog']['properties']['type']['enum'][2815]RENAULT_IRN_50567
root['schemas']['RawLog']['properties']['type']['enum'][2816]RENAULT_IRN_8185
root['schemas']['RawLog']['properties']['type']['enum'][2817]RENAULT_IRN_77153
root['schemas']['RawLog']['properties']['type']['enum'][2818]RENAULT_IRN_67551
root['schemas']['RawLog']['properties']['type']['enum'][2819]RENAULT_IRN_73940
root['schemas']['RawLog']['properties']['type']['enum'][2820]RENAULT_IRN_75039
root['schemas']['RawLog']['properties']['type']['enum'][2821]RENAULT_IRN_69293
root['schemas']['RawLog']['properties']['type']['enum'][2822]RENAULT_IRN_74601
root['schemas']['RawLog']['properties']['type']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['RawLog']['properties']['type']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['RawLog']['properties']['type']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['RawLog']['properties']['type']['enum'][2891]SHOPIFY_APV
root['schemas']['RawLog']['properties']['type']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['RawLog']['properties']['type']['enum'][2940]VCTR727_AURUS
root['schemas']['RawLog']['properties']['type']['enum'][2973]WMT_GENAI
root['schemas']['RawLog']['properties']['type']['enum'][2995]WSGC_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][3007]WMT_VDI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][91]FRONT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][94]VUHL_SO_IDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][222]TEHTRIS_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][244]CYNERIO_NDR_H
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][283]WIREGUARD_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][604]FORTINET_ADC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][630]CISCO_NETFLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][642]BELDEN_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][667]HP_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][808]RAVEN_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][817]TERADATA_ACCESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][818]TERADATA_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][950]SOLIDSERVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1023]PINGONE_AIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1024]PINGONE_PROTECT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1135]CHROMEOS_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1136]VECTRA_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1137]METABASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1402]CLICKHOUSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1425]JOBLOGIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1464]ZOHO_ASSIST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1825]IBM_SENSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1844]ACN_SIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1845]ARCON_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1849]ARCDA_COREWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1851]IBM_SVA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1857]FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1864]BLUE_VOYANT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1901]FA_SOLUTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1902]FILES_DOT_COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1910]GHANGOR_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1938]HOXHUNT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1939]ISL_LIGHT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1951]INTEL_EMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1957]INDUSFACE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1999]PINGCAP_TIDB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2004]PRIVACY_I
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2010]MY_RESOLVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2011]REVIVESEC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2016]BBVA_CONSORES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2021]SAP_LEASING
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2022]BBVA_SIRE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2026]BBVA_TEXSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2028]BBVA_SIIBE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2029]BBVA_MBOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2030]BBVA_SINBA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2031]BBVA_MSDP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2032]BBVA_PLUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2033]BBVA_CAIRO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2034]BBVA_SICOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2035]BBVA_FUMER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2036]BBVA_MCOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2037]BBVA_MCWN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2038]BBVA_ZEIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2039]BBVA_CYGE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2040]BBVA_SISP_NET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2042]BBVA_SAIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2043]BBVA_SPWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2045]BBVA_GUIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2046]BBVA_HECO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2047]GL_TRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2048]ORACLE_AVDF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2049]REBLAZE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2051]TT002_EXASOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2056]AWS_EKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2058]F5_DCS_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2062]MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2063]AWS_DASHA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2064]ONETRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2066]SANGFOR_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2072]SNF_SDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2074]SECURDEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2078]SOFTETHER_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2092]UNICO_IDTRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2111]WING_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2114]ZERO_NETWORKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2142]FORTRA_VM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2144]RAPID_IDENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2146]ARCDA_VISTA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2147]PRMTH_WSO2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2153]SPACELIFT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2154]PAVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2162]H_ISAC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2164]ML009_MENLO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2457]BBVA_CREDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2522]INFORMATICA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2790]PRMTH_PWSS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2891]SHOPIFY_APV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2940]VCTR727_AURUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2973]WMT_GENAI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2995]WSGC_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][3007]WMT_VDI
root['schemas']['SearchHistory']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['SearchQuery']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][6]Entity Query.
iterable_item_removed
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2739]WSGC_WSI_ECOM
prod/europe-west2-chronicle-v1beta
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/europe-west3-chronicle-
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/europe-west3-chronicle-v1alpha
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feedPacks']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feeds']['methods']['scheduleTransfer']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacyBatchGetCollections']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['threatArtifactId']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['export']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['import']
  • root['schemas']['AzureAuthV2']
  • root['schemas']['AzureBlobStoreV2Settings']
  • root['schemas']['DynamicParsingConfig']
  • root['schemas']['EnrichmentInfo']
  • root['schemas']['EntityChangedCountTimelineBucket']
  • root['schemas']['EntityChangedInfo']
  • root['schemas']['ExportNativeDashboardsRequest']
  • root['schemas']['ExportNativeDashboardsResponse']
  • root['schemas']['FederationGroupSelection']
  • root['schemas']['FederationMetadata']
  • root['schemas']['FeedPack']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnMetadata']
  • root['schemas']['ImportExportStatus']
  • root['schemas']['ImportNativeDashboardsInlineSource']
  • root['schemas']['ImportNativeDashboardsRequest']
  • root['schemas']['ImportNativeDashboardsResponse']
  • root['schemas']['InlineDestination']
  • root['schemas']['InstanceSelection']
  • root['schemas']['LegacyBatchGetCollectionsResponse']
  • root['schemas']['ListFeedPacksResponse']
  • root['schemas']['LogField']
  • root['schemas']['MetricTrendConfig']
  • root['schemas']['MssoAuthentication']
  • root['schemas']['NativeDashboardWithChartsAndQueries']
  • root['schemas']['PackLogType']
  • root['schemas']['ScheduleFeedTransferErrorDetails']
  • root['schemas']['ScheduleFeedTransferRequest']
  • root['schemas']['ScheduleFeedTransferResponse']
  • root['schemas']['SearchDataTableColumnInfo']
  • root['schemas']['SearchDataTableInfo']
  • root['schemas']['SearchDataTableRow']
  • root['schemas']['SearchDataTableRowInfo']
  • root['schemas']['TrellixHxAlertsSettings']
  • root['schemas']['TrellixHxHostsSettings']
  • root['schemas']['TrellixIAMAuthentication']
  • root['schemas']['TrellixStarXAuthentication']
  • root['schemas']['DataTable']['properties']['updateSource']
  • root['schemas']['Dhcp']['properties']['clientIdentifierString']
  • root['schemas']['EventCountTimelineBucket']['properties']['baselineTimedEntityCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['entityChangedCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['filteredTimedEntityCount']
  • root['schemas']['FeedDetails']['properties']['azureBlobStoreV2Settings']
  • root['schemas']['FeedDetails']['properties']['trellixHxAlertsSettings']
  • root['schemas']['FeedDetails']['properties']['trellixHxHostsSettings']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['compressArrayFields']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['useArrayBracketNotation']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnData']['properties']['columnMetadata']
  • root['schemas']['IDM']['properties']['assetEnrichmentInfo']
  • root['schemas']['IDM']['properties']['geoipEnrichmentInfo']
  • root['schemas']['IDM']['properties']['processEnrichmentInfo']
  • root['schemas']['IDM']['properties']['userEnrichmentInfo']
  • root['schemas']['IDM']['properties']['vtFilemetadataEnrichmentInfo']
  • root['schemas']['IocAssociation']['properties']['associatedActors']['deprecated']
  • root['schemas']['IocAssociation']['properties']['countryCode']['deprecated']
  • root['schemas']['LegacyFetchUdmSearchViewRequest']['properties']['federationMetadata']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageToken']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageToken']
  • root['schemas']['LogType']['properties']['customLogTypeLabel']
  • root['schemas']['LogType']['properties']['isCustom']
  • root['schemas']['LogType']['properties']['productSource']
  • root['schemas']['ParserExtension']['properties']['dynamicParsing']
  • root['schemas']['SecurityResult']['properties']['detectionDepth']
  • root['schemas']['Series']['properties']['metricTrendConfig']
  • root['schemas']['UdmEventInfo']['properties']['connectedComponentLabel']
  • root['schemas']['UdmEventInfo']['properties']['datatableRowInfo']
  • root['schemas']['UdmEventInfo']['properties']['tenantId']
  • root['schemas']['UdmEventList']['properties']['datatableInfo']
dictionary_item_removed
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardCharts']['methods']['list']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardQueries']['methods']['list']
  • root['schemas']['ListDashboardChartsResponse']
  • root['schemas']['ListDashboardQueriesResponse']
  • root['schemas']['StringToInt64MapEntry']['description']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['parameters']['filter']['description']
new_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.product_object_id - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
old_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['fetchPrioritizedIocsOnly']['description']
new_valueOptional. Indicates if only prioritized iocs should be fetched. If threat artifact id is set, this must be not be set.
old_valueOptional. Indicates if only prioritized iocs should be fetched.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchRulesAlerts']['parameters']['maxNumAlertsToReturn']['description']
new_valueOptional. The maximum number of alerts to return. The default and maximum value is 10,000; values above that will be coerced to 10,000. When the number of available alerts is greater than this value, the response will contain a too_many_alerts field set to true.
old_valueOptional. Maximum number of alerts to return.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['patch']['parameters']['updateMask']['description']
new_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned
old_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_native_dashboard)
root['revision']
new_value20250224
old_value20250102
root['schemas']['Collection']['description']
new_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20
old_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20 LINT.IfChange
root['schemas']['Dhcp']['properties']['clientIdentifier']['description']
new_valueClient identifier. See RFC2132, section 9.14. Note: Make sure to update the client_identifier_string field as well if you update this field.
old_valueClient identifier. See RFC2132, section 9.14.
root['schemas']['EditChartRequest']['properties']['editMask']['description']
new_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input
old_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_chart)
root['schemas']['EntityRisk']['description']
new_valueStores information related to the risk score of an entity. Next ID: 14
old_valueStores information related to the risk score of an entity.
root['schemas']['ExifInfo']['description']
new_valueExif information.
old_value@hide_from_doc
root['schemas']['FileMetadata']['description']
new_valueMetadata about a file. Place metadata about different file types here, for example data from the Microsoft Windows VersionInfo block or digital signer details. Use a different sub-message per file type.
old_value@hide_from_doc
root['schemas']['FileMetadataImports']['description']
new_valueFile metadata imports.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['description']
new_valueFile metadata for PE resource.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['properties']['filetypeMagic']['description']
new_valueType of resource content, as identified by the magic Python module.
old_valueType of resource content, as identified by the magic Python module. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/magic.py END GOOGLE-INTERNAL
root['schemas']['FileMetadataPeResourceInfo']['properties']['languageCode']['description']
new_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
old_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/toolpefile.py?l=419&rcl=df1fcff7c5e82a39875359608b47669d5aff82c7 END GOOGLE-INTERNAL Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
root['schemas']['FileMetadataSection']['description']
new_valueFile metadata section.
old_value@hide_from_doc
root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStats']['description']
new_valueLINT.IfChange(stats_data) Stats results when the query is for statistics NEXT TAG = 6;
old_valueLINT.IfChange (stats_data) Stats results when the query is for statistics NEXT TAG = 6;
root['schemas']['IocAssociation']['properties']['countryCode']['description']
new_valueOutput only. Deprecated. Use region_code instead. Country from which the threat actor originated.
old_valueOutput only. Country from which the threat actor/ malware is originated.
root['schemas']['IocAssociation']['properties']['regionCode']['description']
new_valueOutput only. Name of the country the threat is originating from.
old_valueOutput only. Name of the country, the threat is originating from.
root['schemas']['Label']['properties']['source']['description']
new_valueWhere the label is derived from.
old_value@hide_from_doc
root['schemas']['LegacySearchRulesAlertsResponse']['properties']['tooManyAlerts']['description']
new_valueIndicates that more data was available but not sent due to more hits than max_num_alerts_to_return.
old_valueIndicates that more data was available but not sent due to more hits than max_matches_to_return.
root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['continuationTime']['description']
new_valueOptional. DEPRECATED: Prefer using `page_token` or `page_start_time` instead. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. All detection alerts discovered after `continuation_time` will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
old_valueOptional. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. When initiating the very first connection, clients should leave this unspecified. If unspecified, this defaults to the time of the connection. All detection alerts discovered after continuation_time will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['continuationTime']['description']
new_valueDEPRECATED: Prefer using `page_token` instead by specifying either `page_start_time` or `page_token` in the request. A continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
old_valueA continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
root['schemas']['LogType']['properties']['displayName']['description']
new_valueRequired. The display name of this log type. This is the tag used in YARA-l rules and search queries.
old_valueRequired. The display name of this log type.
root['schemas']['Metadata']['description']
new_valueGeneral information associated with a UDM event.
old_valueNEXT TAG: 21 General information associated with a UDM event.
root['schemas']['StatusProto']['properties']['canonicalCode']['description']
new_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;
old_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be.
root['schemas']['StatusProto']['properties']['code']['description']
new_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;
old_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto
root['schemas']['StatusProto']['properties']['space']['description']
new_valueThe following are usually only present when code != 0 Space to which this status belongs copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string space = 2;
old_valueThe following are usually only present when code != 0 Space to which this status belongs
root['schemas']['Visualization']['description']
new_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 16
old_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 15
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][17]
new_valueSpam email, message, etc.
old_value@exclude Spam email, message, etc.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
iterable_item_added
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][8]RULES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][8]RULES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['EdrEvent']['properties']['dataSource']['enum'][23]TRELLIX
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['FeedDetails']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedDetails']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][91]FRONT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][94]VUHL_SO_IDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][222]TEHTRIS_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][244]CYNERIO_NDR_H
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][283]WIREGUARD_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][604]FORTINET_ADC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][630]CISCO_NETFLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][642]BELDEN_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][667]HP_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][808]RAVEN_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][817]TERADATA_ACCESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][818]TERADATA_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][950]SOLIDSERVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1023]PINGONE_AIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1024]PINGONE_PROTECT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1135]CHROMEOS_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1136]VECTRA_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1137]METABASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1402]CLICKHOUSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1425]JOBLOGIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1464]ZOHO_ASSIST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1825]IBM_SENSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1844]ACN_SIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1845]ARCON_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1849]ARCDA_COREWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1851]IBM_SVA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1857]FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1864]BLUE_VOYANT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1901]FA_SOLUTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1902]FILES_DOT_COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1910]GHANGOR_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1938]HOXHUNT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1939]ISL_LIGHT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1951]INTEL_EMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1957]INDUSFACE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1999]PINGCAP_TIDB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2004]PRIVACY_I
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2010]MY_RESOLVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2011]REVIVESEC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2016]BBVA_CONSORES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2021]SAP_LEASING
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2022]BBVA_SIRE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2026]BBVA_TEXSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2028]BBVA_SIIBE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2029]BBVA_MBOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2030]BBVA_SINBA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2031]BBVA_MSDP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2032]BBVA_PLUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2033]BBVA_CAIRO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2034]BBVA_SICOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2035]BBVA_FUMER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2036]BBVA_MCOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2037]BBVA_MCWN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2038]BBVA_ZEIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2039]BBVA_CYGE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2040]BBVA_SISP_NET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2042]BBVA_SAIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2043]BBVA_SPWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2045]BBVA_GUIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2046]BBVA_HECO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2047]GL_TRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2048]ORACLE_AVDF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2049]REBLAZE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2051]TT002_EXASOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2056]AWS_EKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2058]F5_DCS_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2062]MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2063]AWS_DASHA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2064]ONETRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2066]SANGFOR_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2072]SNF_SDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2074]SECURDEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2078]SOFTETHER_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2092]UNICO_IDTRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2111]WING_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2114]ZERO_NETWORKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2142]FORTRA_VM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2144]RAPID_IDENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2146]ARCDA_VISTA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2147]PRMTH_WSO2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2153]SPACELIFT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2154]PAVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2162]H_ISAC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2164]ML009_MENLO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2457]BBVA_CREDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2522]INFORMATICA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2790]PRMTH_PWSS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2891]SHOPIFY_APV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2940]VCTR727_AURUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2973]WMT_GENAI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2995]WSGC_ECOM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][3007]WMT_VDI
root['schemas']['RawLog']['properties']['type']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['RawLog']['properties']['type']['enum'][91]FRONT
root['schemas']['RawLog']['properties']['type']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][94]VUHL_SO_IDH
root['schemas']['RawLog']['properties']['type']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['RawLog']['properties']['type']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['RawLog']['properties']['type']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['RawLog']['properties']['type']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['RawLog']['properties']['type']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['RawLog']['properties']['type']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['RawLog']['properties']['type']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['RawLog']['properties']['type']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['RawLog']['properties']['type']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['RawLog']['properties']['type']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['RawLog']['properties']['type']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['RawLog']['properties']['type']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][222]TEHTRIS_EDR
root['schemas']['RawLog']['properties']['type']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['RawLog']['properties']['type']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['RawLog']['properties']['type']['enum'][244]CYNERIO_NDR_H
root['schemas']['RawLog']['properties']['type']['enum'][283]WIREGUARD_VPN
root['schemas']['RawLog']['properties']['type']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][604]FORTINET_ADC
root['schemas']['RawLog']['properties']['type']['enum'][623]HUAWEI_WIRELESS
root['schemas']['RawLog']['properties']['type']['enum'][628]AZURE_VNET_FLOW
root['schemas']['RawLog']['properties']['type']['enum'][630]CISCO_NETFLOW
root['schemas']['RawLog']['properties']['type']['enum'][642]BELDEN_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][667]HP_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['RawLog']['properties']['type']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['RawLog']['properties']['type']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['RawLog']['properties']['type']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['RawLog']['properties']['type']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][808]RAVEN_DB
root['schemas']['RawLog']['properties']['type']['enum'][817]TERADATA_ACCESS
root['schemas']['RawLog']['properties']['type']['enum'][818]TERADATA_DB
root['schemas']['RawLog']['properties']['type']['enum'][830]AZURE_RISKY_USERS
root['schemas']['RawLog']['properties']['type']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['RawLog']['properties']['type']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['RawLog']['properties']['type']['enum'][950]SOLIDSERVER
root['schemas']['RawLog']['properties']['type']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1023]PINGONE_AIC
root['schemas']['RawLog']['properties']['type']['enum'][1024]PINGONE_PROTECT
root['schemas']['RawLog']['properties']['type']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['RawLog']['properties']['type']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][1135]CHROMEOS_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1136]VECTRA_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1137]METABASE
root['schemas']['RawLog']['properties']['type']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['RawLog']['properties']['type']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['RawLog']['properties']['type']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['RawLog']['properties']['type']['enum'][1402]CLICKHOUSE
root['schemas']['RawLog']['properties']['type']['enum'][1425]JOBLOGIC
root['schemas']['RawLog']['properties']['type']['enum'][1464]ZOHO_ASSIST
root['schemas']['RawLog']['properties']['type']['enum'][1486]OPENTEXT_CORDY
root['schemas']['RawLog']['properties']['type']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['RawLog']['properties']['type']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['RawLog']['properties']['type']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['RawLog']['properties']['type']['enum'][1825]IBM_SENSE
root['schemas']['RawLog']['properties']['type']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1844]ACN_SIA
root['schemas']['RawLog']['properties']['type']['enum'][1845]ARCON_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1848]APPSMITH_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1849]ARCDA_COREWEB
root['schemas']['RawLog']['properties']['type']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][1851]IBM_SVA
root['schemas']['RawLog']['properties']['type']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['RawLog']['properties']['type']['enum'][1857]FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1864]BLUE_VOYANT
root['schemas']['RawLog']['properties']['type']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['RawLog']['properties']['type']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['RawLog']['properties']['type']['enum'][1882]CSG_CITRIX_RX
root['schemas']['RawLog']['properties']['type']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['RawLog']['properties']['type']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['RawLog']['properties']['type']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['RawLog']['properties']['type']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1901]FA_SOLUTIONS
root['schemas']['RawLog']['properties']['type']['enum'][1902]FILES_DOT_COM
root['schemas']['RawLog']['properties']['type']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['RawLog']['properties']['type']['enum'][1910]GHANGOR_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['RawLog']['properties']['type']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['RawLog']['properties']['type']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['RawLog']['properties']['type']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['RawLog']['properties']['type']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['RawLog']['properties']['type']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['RawLog']['properties']['type']['enum'][1937]HILLSTONE_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1938]HOXHUNT
root['schemas']['RawLog']['properties']['type']['enum'][1939]ISL_LIGHT
root['schemas']['RawLog']['properties']['type']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1948]RQIDJIE5_CAS
root['schemas']['RawLog']['properties']['type']['enum'][1951]INTEL_EMA
root['schemas']['RawLog']['properties']['type']['enum'][1957]INDUSFACE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['RawLog']['properties']['type']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['RawLog']['properties']['type']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['RawLog']['properties']['type']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['RawLog']['properties']['type']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['RawLog']['properties']['type']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['RawLog']['properties']['type']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['RawLog']['properties']['type']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['RawLog']['properties']['type']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['RawLog']['properties']['type']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['RawLog']['properties']['type']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['RawLog']['properties']['type']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1999]PINGCAP_TIDB
root['schemas']['RawLog']['properties']['type']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['RawLog']['properties']['type']['enum'][2004]PRIVACY_I
root['schemas']['RawLog']['properties']['type']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['RawLog']['properties']['type']['enum'][2010]MY_RESOLVER
root['schemas']['RawLog']['properties']['type']['enum'][2011]REVIVESEC
root['schemas']['RawLog']['properties']['type']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['RawLog']['properties']['type']['enum'][2015]BBVA_BANKTRADE
root['schemas']['RawLog']['properties']['type']['enum'][2016]BBVA_CONSORES
root['schemas']['RawLog']['properties']['type']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['RawLog']['properties']['type']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['RawLog']['properties']['type']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['RawLog']['properties']['type']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['RawLog']['properties']['type']['enum'][2021]SAP_LEASING
root['schemas']['RawLog']['properties']['type']['enum'][2022]BBVA_SIRE
root['schemas']['RawLog']['properties']['type']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['RawLog']['properties']['type']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['RawLog']['properties']['type']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['RawLog']['properties']['type']['enum'][2026]BBVA_TEXSA
root['schemas']['RawLog']['properties']['type']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['RawLog']['properties']['type']['enum'][2028]BBVA_SIIBE
root['schemas']['RawLog']['properties']['type']['enum'][2029]BBVA_MBOT
root['schemas']['RawLog']['properties']['type']['enum'][2030]BBVA_SINBA
root['schemas']['RawLog']['properties']['type']['enum'][2031]BBVA_MSDP
root['schemas']['RawLog']['properties']['type']['enum'][2032]BBVA_PLUS
root['schemas']['RawLog']['properties']['type']['enum'][2033]BBVA_CAIRO
root['schemas']['RawLog']['properties']['type']['enum'][2034]BBVA_SICOR
root['schemas']['RawLog']['properties']['type']['enum'][2035]BBVA_FUMER
root['schemas']['RawLog']['properties']['type']['enum'][2036]BBVA_MCOR
root['schemas']['RawLog']['properties']['type']['enum'][2037]BBVA_MCWN
root['schemas']['RawLog']['properties']['type']['enum'][2038]BBVA_ZEIT
root['schemas']['RawLog']['properties']['type']['enum'][2039]BBVA_CYGE
root['schemas']['RawLog']['properties']['type']['enum'][2040]BBVA_SISP_NET
root['schemas']['RawLog']['properties']['type']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['RawLog']['properties']['type']['enum'][2042]BBVA_SAIT
root['schemas']['RawLog']['properties']['type']['enum'][2043]BBVA_SPWEB
root['schemas']['RawLog']['properties']['type']['enum'][2044]BBVA_VALIDADOR
root['schemas']['RawLog']['properties']['type']['enum'][2045]BBVA_GUIA
root['schemas']['RawLog']['properties']['type']['enum'][2046]BBVA_HECO
root['schemas']['RawLog']['properties']['type']['enum'][2047]GL_TRADE
root['schemas']['RawLog']['properties']['type']['enum'][2048]ORACLE_AVDF
root['schemas']['RawLog']['properties']['type']['enum'][2049]REBLAZE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['RawLog']['properties']['type']['enum'][2051]TT002_EXASOL
root['schemas']['RawLog']['properties']['type']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['RawLog']['properties']['type']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['RawLog']['properties']['type']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['RawLog']['properties']['type']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['RawLog']['properties']['type']['enum'][2056]AWS_EKS
root['schemas']['RawLog']['properties']['type']['enum'][2057]THALES_PS10K_HSM
root['schemas']['RawLog']['properties']['type']['enum'][2058]F5_DCS_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['RawLog']['properties']['type']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['RawLog']['properties']['type']['enum'][2061]FORTINET_FORTISASE
root['schemas']['RawLog']['properties']['type']['enum'][2062]MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][2063]AWS_DASHA
root['schemas']['RawLog']['properties']['type']['enum'][2064]ONETRUST
root['schemas']['RawLog']['properties']['type']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['RawLog']['properties']['type']['enum'][2066]SANGFOR_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][2072]SNF_SDH
root['schemas']['RawLog']['properties']['type']['enum'][2074]SECURDEN
root['schemas']['RawLog']['properties']['type']['enum'][2078]SOFTETHER_VPN
root['schemas']['RawLog']['properties']['type']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2091]UNICO_IDCLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2092]UNICO_IDTRUST
root['schemas']['RawLog']['properties']['type']['enum'][2111]WING_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2114]ZERO_NETWORKS
root['schemas']['RawLog']['properties']['type']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['RawLog']['properties']['type']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['RawLog']['properties']['type']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['RawLog']['properties']['type']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['RawLog']['properties']['type']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['RawLog']['properties']['type']['enum'][2142]FORTRA_VM
root['schemas']['RawLog']['properties']['type']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['RawLog']['properties']['type']['enum'][2144]RAPID_IDENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['RawLog']['properties']['type']['enum'][2146]ARCDA_VISTA
root['schemas']['RawLog']['properties']['type']['enum'][2147]PRMTH_WSO2
root['schemas']['RawLog']['properties']['type']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['RawLog']['properties']['type']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['RawLog']['properties']['type']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['RawLog']['properties']['type']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['RawLog']['properties']['type']['enum'][2153]SPACELIFT
root['schemas']['RawLog']['properties']['type']['enum'][2154]PAVE
root['schemas']['RawLog']['properties']['type']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['RawLog']['properties']['type']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['RawLog']['properties']['type']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['RawLog']['properties']['type']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['RawLog']['properties']['type']['enum'][2162]H_ISAC
root['schemas']['RawLog']['properties']['type']['enum'][2163]IIJ_LANSCOPE
root['schemas']['RawLog']['properties']['type']['enum'][2164]ML009_MENLO
root['schemas']['RawLog']['properties']['type']['enum'][2455]BBVA_CUSTODIA
root['schemas']['RawLog']['properties']['type']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['RawLog']['properties']['type']['enum'][2457]BBVA_CREDIT
root['schemas']['RawLog']['properties']['type']['enum'][2520]BBVA_WALLSTREET
root['schemas']['RawLog']['properties']['type']['enum'][2522]INFORMATICA
root['schemas']['RawLog']['properties']['type']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['RawLog']['properties']['type']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['RawLog']['properties']['type']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['RawLog']['properties']['type']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['RawLog']['properties']['type']['enum'][2790]PRMTH_PWSS
root['schemas']['RawLog']['properties']['type']['enum'][2794]RENAULT_IRN_74011
root['schemas']['RawLog']['properties']['type']['enum'][2810]RENAULT_IRN_74898
root['schemas']['RawLog']['properties']['type']['enum'][2811]RENAULT_IRN_73882
root['schemas']['RawLog']['properties']['type']['enum'][2812]RENAULT_IRN_72284
root['schemas']['RawLog']['properties']['type']['enum'][2813]RENAULT_IRN_74143
root['schemas']['RawLog']['properties']['type']['enum'][2814]RENAULT_IRN_70132
root['schemas']['RawLog']['properties']['type']['enum'][2815]RENAULT_IRN_50567
root['schemas']['RawLog']['properties']['type']['enum'][2816]RENAULT_IRN_8185
root['schemas']['RawLog']['properties']['type']['enum'][2817]RENAULT_IRN_77153
root['schemas']['RawLog']['properties']['type']['enum'][2818]RENAULT_IRN_67551
root['schemas']['RawLog']['properties']['type']['enum'][2819]RENAULT_IRN_73940
root['schemas']['RawLog']['properties']['type']['enum'][2820]RENAULT_IRN_75039
root['schemas']['RawLog']['properties']['type']['enum'][2821]RENAULT_IRN_69293
root['schemas']['RawLog']['properties']['type']['enum'][2822]RENAULT_IRN_74601
root['schemas']['RawLog']['properties']['type']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['RawLog']['properties']['type']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['RawLog']['properties']['type']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['RawLog']['properties']['type']['enum'][2891]SHOPIFY_APV
root['schemas']['RawLog']['properties']['type']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['RawLog']['properties']['type']['enum'][2940]VCTR727_AURUS
root['schemas']['RawLog']['properties']['type']['enum'][2973]WMT_GENAI
root['schemas']['RawLog']['properties']['type']['enum'][2995]WSGC_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][3007]WMT_VDI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][91]FRONT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][94]VUHL_SO_IDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][222]TEHTRIS_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][244]CYNERIO_NDR_H
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][283]WIREGUARD_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][604]FORTINET_ADC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][630]CISCO_NETFLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][642]BELDEN_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][667]HP_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][808]RAVEN_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][817]TERADATA_ACCESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][818]TERADATA_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][950]SOLIDSERVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1023]PINGONE_AIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1024]PINGONE_PROTECT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1135]CHROMEOS_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1136]VECTRA_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1137]METABASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1402]CLICKHOUSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1425]JOBLOGIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1464]ZOHO_ASSIST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1825]IBM_SENSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1844]ACN_SIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1845]ARCON_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1849]ARCDA_COREWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1851]IBM_SVA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1857]FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1864]BLUE_VOYANT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1901]FA_SOLUTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1902]FILES_DOT_COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1910]GHANGOR_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1938]HOXHUNT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1939]ISL_LIGHT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1951]INTEL_EMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1957]INDUSFACE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1999]PINGCAP_TIDB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2004]PRIVACY_I
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2010]MY_RESOLVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2011]REVIVESEC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2016]BBVA_CONSORES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2021]SAP_LEASING
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2022]BBVA_SIRE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2026]BBVA_TEXSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2028]BBVA_SIIBE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2029]BBVA_MBOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2030]BBVA_SINBA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2031]BBVA_MSDP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2032]BBVA_PLUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2033]BBVA_CAIRO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2034]BBVA_SICOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2035]BBVA_FUMER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2036]BBVA_MCOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2037]BBVA_MCWN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2038]BBVA_ZEIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2039]BBVA_CYGE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2040]BBVA_SISP_NET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2042]BBVA_SAIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2043]BBVA_SPWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2045]BBVA_GUIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2046]BBVA_HECO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2047]GL_TRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2048]ORACLE_AVDF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2049]REBLAZE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2051]TT002_EXASOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2056]AWS_EKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2058]F5_DCS_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2062]MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2063]AWS_DASHA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2064]ONETRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2066]SANGFOR_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2072]SNF_SDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2074]SECURDEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2078]SOFTETHER_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2092]UNICO_IDTRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2111]WING_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2114]ZERO_NETWORKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2142]FORTRA_VM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2144]RAPID_IDENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2146]ARCDA_VISTA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2147]PRMTH_WSO2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2153]SPACELIFT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2154]PAVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2162]H_ISAC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2164]ML009_MENLO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2457]BBVA_CREDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2522]INFORMATICA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2790]PRMTH_PWSS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2891]SHOPIFY_APV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2940]VCTR727_AURUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2973]WMT_GENAI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2995]WSGC_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][3007]WMT_VDI
root['schemas']['SearchHistory']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['SearchQuery']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][6]Entity Query.
iterable_item_removed
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2739]WSGC_WSI_ECOM
prod/europe-west3-chronicle-v1beta
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/eventarcpublishing-
values_changed
root['revision']
new_value20250216
old_value20250209
prod/eventarcpublishing-v1
values_changed
root['revision']
new_value20250216
old_value20250209
prod/familymanagement-pa-
values_changed
root['revision']
new_value20250224
old_value20250219
prod/familymanagement-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250219
prod/fcmregistrations-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/fcmregistrations-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/firealerts-pa-
values_changed
root['revision']
new_value20250220
old_value20250219
prod/firealerts-pa-v1
values_changed
root['revision']
new_value20250220
old_value20250219
prod/firebaseabt-pa-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/firebaseabt-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/firebaseabt-pa-v2
values_changed
root['revision']
new_value20250223
old_value20250219
prod/firebaseapptesters-
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebaseapptesters-v1
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebaseapptesters-v1alpha
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebasecrashlytics-
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebasecrashlytics-v1alpha
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebaseextensions-
values_changed
root['revision']
new_value20250223
old_value20250221
prod/firebaseextensions-v1beta
values_changed
root['revision']
new_value20250223
old_value20250221
prod/firebaseextensionspublisher-
values_changed
root['revision']
new_value20250223
old_value20250221
prod/firebaseextensionspublisher-v1beta
values_changed
root['revision']
new_value20250223
old_value20250221
prod/firebasegenaimonitoring-pa-
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebasegenaimonitoring-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebaseinstallations-
values_changed
root['revision']
new_value20250221
old_value20250214
prod/firebaseinstallations-v1
values_changed
root['revision']
new_value20250221
old_value20250214
prod/firebasereleasemon-pa-
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebasereleasemon-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250221
prod/firebaseremoteconfig-pa-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/firebaseremoteconfig-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/firebaseremoteconfig-pa-v2
values_changed
root['revision']
new_value20250224
old_value20250220
prod/firebaseremoteconfigrealtime-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/firebaseremoteconfigrealtime-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/firebasesagepredictions-pa-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/firebasesagepredictions-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/fireconsole-pa-
values_changed
root['revision']
new_value20250221
old_value20250220
prod/fireconsole-pa-v1
values_changed
root['revision']
new_value20250221
old_value20250220
prod/fit-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/fit-v2beta1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/floodforecasting-
values_changed
root['revision']
new_value20250224
old_value20250216
prod/floodforecasting-v1
values_changed
root['revision']
new_value20250224
old_value20250216
prod/generativelanguage-
values_changed
root['revision']
new_value20250221
old_value20250220
prod/generativelanguage-v1
dictionary_item_added
  • root['schemas']['UsageMetadata']['properties']['thoughtsTokenCount']
values_changed
root['revision']
new_value20250221
old_value20250220
root['schemas']['GenerationConfig']['properties']['frequencyPenalty']['description']
new_valueOptional. Frequency penalty applied to the next token's logprobs, multiplied by the number of times each token has been seen in the respponse so far. A positive penalty will discourage the use of tokens that have already been used, proportional to the number of times the token has been used: The more a token is used, the more difficult it is for the model to use that token again increasing the vocabulary of responses. Caution: A _negative_ penalty will encourage the model to reuse tokens proportional to the number of times the token has been used. Small negative values will reduce the vocabulary of a response. Larger negative values will cause the model to start repeating a common token until it hits the max_output_tokens limit.
old_valueOptional. Frequency penalty applied to the next token's logprobs, multiplied by the number of times each token has been seen in the respponse so far. A positive penalty will discourage the use of tokens that have already been used, proportional to the number of times the token has been used: The more a token is used, the more dificult it is for the model to use that token again increasing the vocabulary of responses. Caution: A _negative_ penalty will encourage the model to reuse tokens proportional to the number of times the token has been used. Small negative values will reduce the vocabulary of a response. Larger negative values will cause the model to start repeating a common token until it hits the max_output_tokens limit.
prod/generativelanguage-v1alpha
dictionary_item_added
  • root['schemas']['UsageMetadata']['properties']['thoughtsTokenCount']
values_changed
root['revision']
new_value20250221
old_value20250220
root['schemas']['GenerationConfig']['properties']['frequencyPenalty']['description']
new_valueOptional. Frequency penalty applied to the next token's logprobs, multiplied by the number of times each token has been seen in the respponse so far. A positive penalty will discourage the use of tokens that have already been used, proportional to the number of times the token has been used: The more a token is used, the more difficult it is for the model to use that token again increasing the vocabulary of responses. Caution: A _negative_ penalty will encourage the model to reuse tokens proportional to the number of times the token has been used. Small negative values will reduce the vocabulary of a response. Larger negative values will cause the model to start repeating a common token until it hits the max_output_tokens limit.
old_valueOptional. Frequency penalty applied to the next token's logprobs, multiplied by the number of times each token has been seen in the respponse so far. A positive penalty will discourage the use of tokens that have already been used, proportional to the number of times the token has been used: The more a token is used, the more dificult it is for the model to use that token again increasing the vocabulary of responses. Caution: A _negative_ penalty will encourage the model to reuse tokens proportional to the number of times the token has been used. Small negative values will reduce the vocabulary of a response. Larger negative values will cause the model to start repeating a common token until it hits the max_output_tokens limit.
prod/generativelanguage-v1beta
dictionary_item_added
  • root['schemas']['UsageMetadata']['properties']['thoughtsTokenCount']
values_changed
root['revision']
new_value20250221
old_value20250220
root['schemas']['GenerationConfig']['properties']['frequencyPenalty']['description']
new_valueOptional. Frequency penalty applied to the next token's logprobs, multiplied by the number of times each token has been seen in the respponse so far. A positive penalty will discourage the use of tokens that have already been used, proportional to the number of times the token has been used: The more a token is used, the more difficult it is for the model to use that token again increasing the vocabulary of responses. Caution: A _negative_ penalty will encourage the model to reuse tokens proportional to the number of times the token has been used. Small negative values will reduce the vocabulary of a response. Larger negative values will cause the model to start repeating a common token until it hits the max_output_tokens limit.
old_valueOptional. Frequency penalty applied to the next token's logprobs, multiplied by the number of times each token has been seen in the respponse so far. A positive penalty will discourage the use of tokens that have already been used, proportional to the number of times the token has been used: The more a token is used, the more dificult it is for the model to use that token again increasing the vocabulary of responses. Caution: A _negative_ penalty will encourage the model to reuse tokens proportional to the number of times the token has been used. Small negative values will reduce the vocabulary of a response. Larger negative values will cause the model to start repeating a common token until it hits the max_output_tokens limit.
prod/generativelanguage-v1beta1
values_changed
root['revision']
new_value20250221
old_value20250220
prod/generativelanguage-v1beta2
values_changed
root['revision']
new_value20250221
old_value20250220
prod/generativelanguage-v1beta3
values_changed
root['revision']
new_value20250221
old_value20250220
prod/geoar-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/geoar-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/geofeedtaskrouting-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/geofeedtaskrouting-v1alpha
values_changed
root['revision']
new_value20250223
old_value20250219
prod/gsuiteaddons-v1
values_changed
root['revision']
new_value20250224
old_value20250217
prod/gsuiteaddons-v1alpha1
dictionary_item_removed
  • root['schemas']['GoogleAppsScriptTypeWorkflowWorkflowAddOnManifest']['properties']['dynamicResourceDefinitionProvider']
  • root['schemas']['GoogleAppsScriptTypeWorkflowWorkflowResourceDefinition']['properties']['fieldDefinitionProviderFunction']
values_changed
root['revision']
new_value20250224
old_value20250217
prod/guidedhelp-pa-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/guidedhelp-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/hourly-dynamicmail-pa.sandbox-
values_changed
root['revision']
new_value20250225
old_value20250223
prod/hourly-dynamicmail-pa.sandbox-v2
values_changed
root['revision']
new_value20250225
old_value20250223
prod/ipprotection-ppissuer-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/ipprotection-ppissuer-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/kidsmanagement-pa-
values_changed
root['revision']
new_value20250222
old_value20250218
prod/kidsmanagement-pa-v1
values_changed
root['revision']
new_value20250222
old_value20250218
prod/kidsnotification-pa-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/kidsnotification-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/linkauthorization-
values_changed
root['revision']
new_value20250221
old_value20250219
prod/linkauthorization-v1
values_changed
root['revision']
new_value20250221
old_value20250219
prod/listallowedkids-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/listallowedkids-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/localservicespartner-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/localservicespartner-v1beta1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/mapsplatformdatasets-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/mapsplatformdatasets-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/mapsplatformdatasets-v1alpha
values_changed
root['revision']
new_value20250223
old_value20250219
prod/media3p-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/media3p-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/mlkit-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/mlkit-pa-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/mlkit-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/mlkit-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/mlkit-v1beta1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/mobilemlaccelerationcompatibility-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/mobilemlaccelerationcompatibility-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/mobileperformancereporting-pa-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/mobileperformancereporting-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/monospace-pa-
dictionary_item_added
  • root['resources']['gemini']['methods']['generateContent']
  • root['resources']['models']['methods']['generateContent']
  • root['schemas']['Subscription']
  • root['schemas']['Profile']['properties']['activeSubscription']
values_changed
root['revision']
new_value20250224
old_value20250220
prod/monospace-pa-v1
dictionary_item_added
  • root['resources']['gemini']['methods']['generateContent']
  • root['resources']['models']['methods']['generateContent']
  • root['schemas']['Subscription']
  • root['schemas']['Profile']['properties']['activeSubscription']
values_changed
root['revision']
new_value20250224
old_value20250220
prod/moviesanywhere-
values_changed
root['revision']
new_value20250203
old_value20250127
prod/moviesanywhere-v1
values_changed
root['revision']
new_value20250203
old_value20250127
prod/myphonenumbers-pa-
values_changed
root['revision']
new_value20250219
old_value20250217
prod/myphonenumbers-pa-v1
values_changed
root['revision']
new_value20250219
old_value20250217
prod/northamerica-northeast2-chronicle-
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/northamerica-northeast2-chronicle-v1alpha
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feedPacks']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feeds']['methods']['scheduleTransfer']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacyBatchGetCollections']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['threatArtifactId']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['export']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['import']
  • root['schemas']['AzureAuthV2']
  • root['schemas']['AzureBlobStoreV2Settings']
  • root['schemas']['DynamicParsingConfig']
  • root['schemas']['EnrichmentInfo']
  • root['schemas']['EntityChangedCountTimelineBucket']
  • root['schemas']['EntityChangedInfo']
  • root['schemas']['ExportNativeDashboardsRequest']
  • root['schemas']['ExportNativeDashboardsResponse']
  • root['schemas']['FederationGroupSelection']
  • root['schemas']['FederationMetadata']
  • root['schemas']['FeedPack']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnMetadata']
  • root['schemas']['ImportExportStatus']
  • root['schemas']['ImportNativeDashboardsInlineSource']
  • root['schemas']['ImportNativeDashboardsRequest']
  • root['schemas']['ImportNativeDashboardsResponse']
  • root['schemas']['InlineDestination']
  • root['schemas']['InstanceSelection']
  • root['schemas']['LegacyBatchGetCollectionsResponse']
  • root['schemas']['ListFeedPacksResponse']
  • root['schemas']['LogField']
  • root['schemas']['MetricTrendConfig']
  • root['schemas']['MssoAuthentication']
  • root['schemas']['NativeDashboardWithChartsAndQueries']
  • root['schemas']['PackLogType']
  • root['schemas']['ScheduleFeedTransferErrorDetails']
  • root['schemas']['ScheduleFeedTransferRequest']
  • root['schemas']['ScheduleFeedTransferResponse']
  • root['schemas']['SearchDataTableColumnInfo']
  • root['schemas']['SearchDataTableInfo']
  • root['schemas']['SearchDataTableRow']
  • root['schemas']['SearchDataTableRowInfo']
  • root['schemas']['TrellixHxAlertsSettings']
  • root['schemas']['TrellixHxHostsSettings']
  • root['schemas']['TrellixIAMAuthentication']
  • root['schemas']['TrellixStarXAuthentication']
  • root['schemas']['DataTable']['properties']['updateSource']
  • root['schemas']['Dhcp']['properties']['clientIdentifierString']
  • root['schemas']['EventCountTimelineBucket']['properties']['baselineTimedEntityCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['entityChangedCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['filteredTimedEntityCount']
  • root['schemas']['FeedDetails']['properties']['azureBlobStoreV2Settings']
  • root['schemas']['FeedDetails']['properties']['trellixHxAlertsSettings']
  • root['schemas']['FeedDetails']['properties']['trellixHxHostsSettings']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['compressArrayFields']
  • root['schemas']['GenerateUDMKeyValueMappingsRequest']['properties']['useArrayBracketNotation']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnData']['properties']['columnMetadata']
  • root['schemas']['IDM']['properties']['assetEnrichmentInfo']
  • root['schemas']['IDM']['properties']['geoipEnrichmentInfo']
  • root['schemas']['IDM']['properties']['processEnrichmentInfo']
  • root['schemas']['IDM']['properties']['userEnrichmentInfo']
  • root['schemas']['IDM']['properties']['vtFilemetadataEnrichmentInfo']
  • root['schemas']['IocAssociation']['properties']['associatedActors']['deprecated']
  • root['schemas']['IocAssociation']['properties']['countryCode']['deprecated']
  • root['schemas']['LegacyFetchUdmSearchViewRequest']['properties']['federationMetadata']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageToken']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageToken']
  • root['schemas']['LogType']['properties']['customLogTypeLabel']
  • root['schemas']['LogType']['properties']['isCustom']
  • root['schemas']['LogType']['properties']['productSource']
  • root['schemas']['ParserExtension']['properties']['dynamicParsing']
  • root['schemas']['SecurityResult']['properties']['detectionDepth']
  • root['schemas']['Series']['properties']['metricTrendConfig']
  • root['schemas']['UdmEventInfo']['properties']['connectedComponentLabel']
  • root['schemas']['UdmEventInfo']['properties']['datatableRowInfo']
  • root['schemas']['UdmEventInfo']['properties']['tenantId']
  • root['schemas']['UdmEventList']['properties']['datatableInfo']
dictionary_item_removed
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardCharts']['methods']['list']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardQueries']['methods']['list']
  • root['schemas']['ListDashboardChartsResponse']
  • root['schemas']['ListDashboardQueriesResponse']
  • root['schemas']['StringToInt64MapEntry']['description']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['parameters']['filter']['description']
new_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.product_object_id - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
old_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['fetchPrioritizedIocsOnly']['description']
new_valueOptional. Indicates if only prioritized iocs should be fetched. If threat artifact id is set, this must be not be set.
old_valueOptional. Indicates if only prioritized iocs should be fetched.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchRulesAlerts']['parameters']['maxNumAlertsToReturn']['description']
new_valueOptional. The maximum number of alerts to return. The default and maximum value is 10,000; values above that will be coerced to 10,000. When the number of available alerts is greater than this value, the response will contain a too_many_alerts field set to true.
old_valueOptional. Maximum number of alerts to return.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['patch']['parameters']['updateMask']['description']
new_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned
old_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_native_dashboard)
root['revision']
new_value20250224
old_value20250102
root['schemas']['Collection']['description']
new_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20
old_valueCollection represents a container of objects (such as events, entity context metadata, detection finding metadata) and state (such as investigation details). BEGIN GOOGLE-INTERNAL See go/udm:collections for additional details. END GOOGLE-INTERNAL An example use case for Collection is to model a detection and investigation from detection finding metadata to investigative state collected in the course of the investigation. For more complex investigation and response workflows a Collection could represent an incident consisting of multiple child findings or incidents. This can be expanded on to model remediation elements of a full detection and response workflow. NEXT TAG: 20 LINT.IfChange
root['schemas']['Dhcp']['properties']['clientIdentifier']['description']
new_valueClient identifier. See RFC2132, section 9.14. Note: Make sure to update the client_identifier_string field as well if you update this field.
old_valueClient identifier. See RFC2132, section 9.14.
root['schemas']['EditChartRequest']['properties']['editMask']['description']
new_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input
old_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_chart)
root['schemas']['EntityRisk']['description']
new_valueStores information related to the risk score of an entity. Next ID: 14
old_valueStores information related to the risk score of an entity.
root['schemas']['ExifInfo']['description']
new_valueExif information.
old_value@hide_from_doc
root['schemas']['FileMetadata']['description']
new_valueMetadata about a file. Place metadata about different file types here, for example data from the Microsoft Windows VersionInfo block or digital signer details. Use a different sub-message per file type.
old_value@hide_from_doc
root['schemas']['FileMetadataImports']['description']
new_valueFile metadata imports.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['description']
new_valueFile metadata for PE resource.
old_value@hide_from_doc
root['schemas']['FileMetadataPeResourceInfo']['properties']['filetypeMagic']['description']
new_valueType of resource content, as identified by the magic Python module.
old_valueType of resource content, as identified by the magic Python module. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/magic.py END GOOGLE-INTERNAL
root['schemas']['FileMetadataPeResourceInfo']['properties']['languageCode']['description']
new_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
old_valueHuman-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification. BEGIN GOOGLE-INTERNAL See http://cs/virustotal/virustotal-core-analysis/sav/common/tools/toolpefile/toolpefile.py?l=419&rcl=df1fcff7c5e82a39875359608b47669d5aff82c7 END GOOGLE-INTERNAL Examples: | Language | Sublanguage | Field value | | LANG_NEUTRAL | SUBLANG_NEUTRAL | NEUTRAL | | LANG_FRENCH | - | FRENCH | | LANG_ENGLISH | SUBLANG_ENGLISH US | ENGLISH US |
root['schemas']['FileMetadataSection']['description']
new_valueFile metadata section.
old_value@hide_from_doc
root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStats']['description']
new_valueLINT.IfChange(stats_data) Stats results when the query is for statistics NEXT TAG = 6;
old_valueLINT.IfChange (stats_data) Stats results when the query is for statistics NEXT TAG = 6;
root['schemas']['IocAssociation']['properties']['countryCode']['description']
new_valueOutput only. Deprecated. Use region_code instead. Country from which the threat actor originated.
old_valueOutput only. Country from which the threat actor/ malware is originated.
root['schemas']['IocAssociation']['properties']['regionCode']['description']
new_valueOutput only. Name of the country the threat is originating from.
old_valueOutput only. Name of the country, the threat is originating from.
root['schemas']['Label']['properties']['source']['description']
new_valueWhere the label is derived from.
old_value@hide_from_doc
root['schemas']['LegacySearchRulesAlertsResponse']['properties']['tooManyAlerts']['description']
new_valueIndicates that more data was available but not sent due to more hits than max_num_alerts_to_return.
old_valueIndicates that more data was available but not sent due to more hits than max_matches_to_return.
root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['continuationTime']['description']
new_valueOptional. DEPRECATED: Prefer using `page_token` or `page_start_time` instead. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. All detection alerts discovered after `continuation_time` will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
old_valueOptional. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. When initiating the very first connection, clients should leave this unspecified. If unspecified, this defaults to the time of the connection. All detection alerts discovered after continuation_time will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['continuationTime']['description']
new_valueDEPRECATED: Prefer using `page_token` instead by specifying either `page_start_time` or `page_token` in the request. A continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
old_valueA continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
root['schemas']['LogType']['properties']['displayName']['description']
new_valueRequired. The display name of this log type. This is the tag used in YARA-l rules and search queries.
old_valueRequired. The display name of this log type.
root['schemas']['Metadata']['description']
new_valueGeneral information associated with a UDM event.
old_valueNEXT TAG: 21 General information associated with a UDM event.
root['schemas']['StatusProto']['properties']['canonicalCode']['description']
new_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;
old_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be.
root['schemas']['StatusProto']['properties']['code']['description']
new_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;
old_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto
root['schemas']['StatusProto']['properties']['space']['description']
new_valueThe following are usually only present when code != 0 Space to which this status belongs copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string space = 2;
old_valueThe following are usually only present when code != 0 Space to which this status belongs
root['schemas']['Visualization']['description']
new_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 16
old_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 15
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][17]
new_valueSpam email, message, etc.
old_value@exclude Spam email, message, etc.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][1919]
new_valueLAYERX
old_valueWSGC_WSI_EGIFT_CARDS
iterable_item_added
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][8]RULES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][8]RULES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][9]SOAR_CASES
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['EdrEvent']['properties']['dataSource']['enum'][23]TRELLIX
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][9]SOAR_CASES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][10]SOAR_PLAYBOOKS
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][11]SOAR_CASE_HISTORY
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][9]SOAR Cases - identified as `case`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][10]SOAR Playbooks - identified as `playbook`.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][11]SOAR Case History - identified as `case_history`.
root['schemas']['FeedDetails']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedDetails']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][91]FRONT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][94]VUHL_SO_IDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][222]TEHTRIS_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][244]CYNERIO_NDR_H
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][283]WIREGUARD_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][604]FORTINET_ADC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][630]CISCO_NETFLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][642]BELDEN_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][667]HP_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][808]RAVEN_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][817]TERADATA_ACCESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][818]TERADATA_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][950]SOLIDSERVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1023]PINGONE_AIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1024]PINGONE_PROTECT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1135]CHROMEOS_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1136]VECTRA_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1137]METABASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1402]CLICKHOUSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1425]JOBLOGIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1464]ZOHO_ASSIST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1825]IBM_SENSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1844]ACN_SIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1845]ARCON_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1849]ARCDA_COREWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1851]IBM_SVA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1857]FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1864]BLUE_VOYANT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1901]FA_SOLUTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1902]FILES_DOT_COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1910]GHANGOR_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1938]HOXHUNT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1939]ISL_LIGHT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1951]INTEL_EMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1957]INDUSFACE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1999]PINGCAP_TIDB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2004]PRIVACY_I
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2010]MY_RESOLVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2011]REVIVESEC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2016]BBVA_CONSORES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2021]SAP_LEASING
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2022]BBVA_SIRE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2026]BBVA_TEXSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2028]BBVA_SIIBE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2029]BBVA_MBOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2030]BBVA_SINBA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2031]BBVA_MSDP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2032]BBVA_PLUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2033]BBVA_CAIRO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2034]BBVA_SICOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2035]BBVA_FUMER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2036]BBVA_MCOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2037]BBVA_MCWN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2038]BBVA_ZEIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2039]BBVA_CYGE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2040]BBVA_SISP_NET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2042]BBVA_SAIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2043]BBVA_SPWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2045]BBVA_GUIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2046]BBVA_HECO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2047]GL_TRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2048]ORACLE_AVDF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2049]REBLAZE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2051]TT002_EXASOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2056]AWS_EKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2058]F5_DCS_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2062]MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2063]AWS_DASHA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2064]ONETRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2066]SANGFOR_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2072]SNF_SDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2074]SECURDEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2078]SOFTETHER_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2092]UNICO_IDTRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2111]WING_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2114]ZERO_NETWORKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2142]FORTRA_VM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2144]RAPID_IDENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2146]ARCDA_VISTA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2147]PRMTH_WSO2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2153]SPACELIFT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2154]PAVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2162]H_ISAC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2164]ML009_MENLO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2457]BBVA_CREDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2522]INFORMATICA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2790]PRMTH_PWSS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2891]SHOPIFY_APV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2940]VCTR727_AURUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2973]WMT_GENAI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2995]WSGC_ECOM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][3007]WMT_VDI
root['schemas']['RawLog']['properties']['type']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['RawLog']['properties']['type']['enum'][91]FRONT
root['schemas']['RawLog']['properties']['type']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][94]VUHL_SO_IDH
root['schemas']['RawLog']['properties']['type']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['RawLog']['properties']['type']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['RawLog']['properties']['type']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['RawLog']['properties']['type']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['RawLog']['properties']['type']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['RawLog']['properties']['type']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['RawLog']['properties']['type']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['RawLog']['properties']['type']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['RawLog']['properties']['type']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['RawLog']['properties']['type']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['RawLog']['properties']['type']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['RawLog']['properties']['type']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][222]TEHTRIS_EDR
root['schemas']['RawLog']['properties']['type']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['RawLog']['properties']['type']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['RawLog']['properties']['type']['enum'][244]CYNERIO_NDR_H
root['schemas']['RawLog']['properties']['type']['enum'][283]WIREGUARD_VPN
root['schemas']['RawLog']['properties']['type']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][604]FORTINET_ADC
root['schemas']['RawLog']['properties']['type']['enum'][623]HUAWEI_WIRELESS
root['schemas']['RawLog']['properties']['type']['enum'][628]AZURE_VNET_FLOW
root['schemas']['RawLog']['properties']['type']['enum'][630]CISCO_NETFLOW
root['schemas']['RawLog']['properties']['type']['enum'][642]BELDEN_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][667]HP_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['RawLog']['properties']['type']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['RawLog']['properties']['type']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['RawLog']['properties']['type']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['RawLog']['properties']['type']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][808]RAVEN_DB
root['schemas']['RawLog']['properties']['type']['enum'][817]TERADATA_ACCESS
root['schemas']['RawLog']['properties']['type']['enum'][818]TERADATA_DB
root['schemas']['RawLog']['properties']['type']['enum'][830]AZURE_RISKY_USERS
root['schemas']['RawLog']['properties']['type']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['RawLog']['properties']['type']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['RawLog']['properties']['type']['enum'][950]SOLIDSERVER
root['schemas']['RawLog']['properties']['type']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1023]PINGONE_AIC
root['schemas']['RawLog']['properties']['type']['enum'][1024]PINGONE_PROTECT
root['schemas']['RawLog']['properties']['type']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['RawLog']['properties']['type']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][1135]CHROMEOS_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1136]VECTRA_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1137]METABASE
root['schemas']['RawLog']['properties']['type']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['RawLog']['properties']['type']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['RawLog']['properties']['type']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['RawLog']['properties']['type']['enum'][1402]CLICKHOUSE
root['schemas']['RawLog']['properties']['type']['enum'][1425]JOBLOGIC
root['schemas']['RawLog']['properties']['type']['enum'][1464]ZOHO_ASSIST
root['schemas']['RawLog']['properties']['type']['enum'][1486]OPENTEXT_CORDY
root['schemas']['RawLog']['properties']['type']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['RawLog']['properties']['type']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['RawLog']['properties']['type']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['RawLog']['properties']['type']['enum'][1825]IBM_SENSE
root['schemas']['RawLog']['properties']['type']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1844]ACN_SIA
root['schemas']['RawLog']['properties']['type']['enum'][1845]ARCON_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1848]APPSMITH_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1849]ARCDA_COREWEB
root['schemas']['RawLog']['properties']['type']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][1851]IBM_SVA
root['schemas']['RawLog']['properties']['type']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['RawLog']['properties']['type']['enum'][1857]FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1864]BLUE_VOYANT
root['schemas']['RawLog']['properties']['type']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['RawLog']['properties']['type']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['RawLog']['properties']['type']['enum'][1882]CSG_CITRIX_RX
root['schemas']['RawLog']['properties']['type']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['RawLog']['properties']['type']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['RawLog']['properties']['type']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['RawLog']['properties']['type']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1901]FA_SOLUTIONS
root['schemas']['RawLog']['properties']['type']['enum'][1902]FILES_DOT_COM
root['schemas']['RawLog']['properties']['type']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['RawLog']['properties']['type']['enum'][1910]GHANGOR_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['RawLog']['properties']['type']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['RawLog']['properties']['type']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['RawLog']['properties']['type']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['RawLog']['properties']['type']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['RawLog']['properties']['type']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['RawLog']['properties']['type']['enum'][1937]HILLSTONE_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1938]HOXHUNT
root['schemas']['RawLog']['properties']['type']['enum'][1939]ISL_LIGHT
root['schemas']['RawLog']['properties']['type']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1948]RQIDJIE5_CAS
root['schemas']['RawLog']['properties']['type']['enum'][1951]INTEL_EMA
root['schemas']['RawLog']['properties']['type']['enum'][1957]INDUSFACE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['RawLog']['properties']['type']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['RawLog']['properties']['type']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['RawLog']['properties']['type']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['RawLog']['properties']['type']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['RawLog']['properties']['type']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['RawLog']['properties']['type']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['RawLog']['properties']['type']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['RawLog']['properties']['type']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['RawLog']['properties']['type']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['RawLog']['properties']['type']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['RawLog']['properties']['type']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['RawLog']['properties']['type']['enum'][1999]PINGCAP_TIDB
root['schemas']['RawLog']['properties']['type']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['RawLog']['properties']['type']['enum'][2004]PRIVACY_I
root['schemas']['RawLog']['properties']['type']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['RawLog']['properties']['type']['enum'][2010]MY_RESOLVER
root['schemas']['RawLog']['properties']['type']['enum'][2011]REVIVESEC
root['schemas']['RawLog']['properties']['type']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['RawLog']['properties']['type']['enum'][2015]BBVA_BANKTRADE
root['schemas']['RawLog']['properties']['type']['enum'][2016]BBVA_CONSORES
root['schemas']['RawLog']['properties']['type']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['RawLog']['properties']['type']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['RawLog']['properties']['type']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['RawLog']['properties']['type']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['RawLog']['properties']['type']['enum'][2021]SAP_LEASING
root['schemas']['RawLog']['properties']['type']['enum'][2022]BBVA_SIRE
root['schemas']['RawLog']['properties']['type']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['RawLog']['properties']['type']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['RawLog']['properties']['type']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['RawLog']['properties']['type']['enum'][2026]BBVA_TEXSA
root['schemas']['RawLog']['properties']['type']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['RawLog']['properties']['type']['enum'][2028]BBVA_SIIBE
root['schemas']['RawLog']['properties']['type']['enum'][2029]BBVA_MBOT
root['schemas']['RawLog']['properties']['type']['enum'][2030]BBVA_SINBA
root['schemas']['RawLog']['properties']['type']['enum'][2031]BBVA_MSDP
root['schemas']['RawLog']['properties']['type']['enum'][2032]BBVA_PLUS
root['schemas']['RawLog']['properties']['type']['enum'][2033]BBVA_CAIRO
root['schemas']['RawLog']['properties']['type']['enum'][2034]BBVA_SICOR
root['schemas']['RawLog']['properties']['type']['enum'][2035]BBVA_FUMER
root['schemas']['RawLog']['properties']['type']['enum'][2036]BBVA_MCOR
root['schemas']['RawLog']['properties']['type']['enum'][2037]BBVA_MCWN
root['schemas']['RawLog']['properties']['type']['enum'][2038]BBVA_ZEIT
root['schemas']['RawLog']['properties']['type']['enum'][2039]BBVA_CYGE
root['schemas']['RawLog']['properties']['type']['enum'][2040]BBVA_SISP_NET
root['schemas']['RawLog']['properties']['type']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['RawLog']['properties']['type']['enum'][2042]BBVA_SAIT
root['schemas']['RawLog']['properties']['type']['enum'][2043]BBVA_SPWEB
root['schemas']['RawLog']['properties']['type']['enum'][2044]BBVA_VALIDADOR
root['schemas']['RawLog']['properties']['type']['enum'][2045]BBVA_GUIA
root['schemas']['RawLog']['properties']['type']['enum'][2046]BBVA_HECO
root['schemas']['RawLog']['properties']['type']['enum'][2047]GL_TRADE
root['schemas']['RawLog']['properties']['type']['enum'][2048]ORACLE_AVDF
root['schemas']['RawLog']['properties']['type']['enum'][2049]REBLAZE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['RawLog']['properties']['type']['enum'][2051]TT002_EXASOL
root['schemas']['RawLog']['properties']['type']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['RawLog']['properties']['type']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['RawLog']['properties']['type']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['RawLog']['properties']['type']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['RawLog']['properties']['type']['enum'][2056]AWS_EKS
root['schemas']['RawLog']['properties']['type']['enum'][2057]THALES_PS10K_HSM
root['schemas']['RawLog']['properties']['type']['enum'][2058]F5_DCS_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['RawLog']['properties']['type']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['RawLog']['properties']['type']['enum'][2061]FORTINET_FORTISASE
root['schemas']['RawLog']['properties']['type']['enum'][2062]MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][2063]AWS_DASHA
root['schemas']['RawLog']['properties']['type']['enum'][2064]ONETRUST
root['schemas']['RawLog']['properties']['type']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['RawLog']['properties']['type']['enum'][2066]SANGFOR_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][2072]SNF_SDH
root['schemas']['RawLog']['properties']['type']['enum'][2074]SECURDEN
root['schemas']['RawLog']['properties']['type']['enum'][2078]SOFTETHER_VPN
root['schemas']['RawLog']['properties']['type']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2091]UNICO_IDCLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2092]UNICO_IDTRUST
root['schemas']['RawLog']['properties']['type']['enum'][2111]WING_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2114]ZERO_NETWORKS
root['schemas']['RawLog']['properties']['type']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['RawLog']['properties']['type']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['RawLog']['properties']['type']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['RawLog']['properties']['type']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['RawLog']['properties']['type']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['RawLog']['properties']['type']['enum'][2142]FORTRA_VM
root['schemas']['RawLog']['properties']['type']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['RawLog']['properties']['type']['enum'][2144]RAPID_IDENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['RawLog']['properties']['type']['enum'][2146]ARCDA_VISTA
root['schemas']['RawLog']['properties']['type']['enum'][2147]PRMTH_WSO2
root['schemas']['RawLog']['properties']['type']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['RawLog']['properties']['type']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['RawLog']['properties']['type']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['RawLog']['properties']['type']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['RawLog']['properties']['type']['enum'][2153]SPACELIFT
root['schemas']['RawLog']['properties']['type']['enum'][2154]PAVE
root['schemas']['RawLog']['properties']['type']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['RawLog']['properties']['type']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['RawLog']['properties']['type']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['RawLog']['properties']['type']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['RawLog']['properties']['type']['enum'][2162]H_ISAC
root['schemas']['RawLog']['properties']['type']['enum'][2163]IIJ_LANSCOPE
root['schemas']['RawLog']['properties']['type']['enum'][2164]ML009_MENLO
root['schemas']['RawLog']['properties']['type']['enum'][2455]BBVA_CUSTODIA
root['schemas']['RawLog']['properties']['type']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['RawLog']['properties']['type']['enum'][2457]BBVA_CREDIT
root['schemas']['RawLog']['properties']['type']['enum'][2520]BBVA_WALLSTREET
root['schemas']['RawLog']['properties']['type']['enum'][2522]INFORMATICA
root['schemas']['RawLog']['properties']['type']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['RawLog']['properties']['type']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['RawLog']['properties']['type']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['RawLog']['properties']['type']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['RawLog']['properties']['type']['enum'][2790]PRMTH_PWSS
root['schemas']['RawLog']['properties']['type']['enum'][2794]RENAULT_IRN_74011
root['schemas']['RawLog']['properties']['type']['enum'][2810]RENAULT_IRN_74898
root['schemas']['RawLog']['properties']['type']['enum'][2811]RENAULT_IRN_73882
root['schemas']['RawLog']['properties']['type']['enum'][2812]RENAULT_IRN_72284
root['schemas']['RawLog']['properties']['type']['enum'][2813]RENAULT_IRN_74143
root['schemas']['RawLog']['properties']['type']['enum'][2814]RENAULT_IRN_70132
root['schemas']['RawLog']['properties']['type']['enum'][2815]RENAULT_IRN_50567
root['schemas']['RawLog']['properties']['type']['enum'][2816]RENAULT_IRN_8185
root['schemas']['RawLog']['properties']['type']['enum'][2817]RENAULT_IRN_77153
root['schemas']['RawLog']['properties']['type']['enum'][2818]RENAULT_IRN_67551
root['schemas']['RawLog']['properties']['type']['enum'][2819]RENAULT_IRN_73940
root['schemas']['RawLog']['properties']['type']['enum'][2820]RENAULT_IRN_75039
root['schemas']['RawLog']['properties']['type']['enum'][2821]RENAULT_IRN_69293
root['schemas']['RawLog']['properties']['type']['enum'][2822]RENAULT_IRN_74601
root['schemas']['RawLog']['properties']['type']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['RawLog']['properties']['type']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['RawLog']['properties']['type']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['RawLog']['properties']['type']['enum'][2891]SHOPIFY_APV
root['schemas']['RawLog']['properties']['type']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['RawLog']['properties']['type']['enum'][2940]VCTR727_AURUS
root['schemas']['RawLog']['properties']['type']['enum'][2973]WMT_GENAI
root['schemas']['RawLog']['properties']['type']['enum'][2995]WSGC_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][3007]WMT_VDI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][91]FRONT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][94]VUHL_SO_IDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][146]SMARTSHEET_USER_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][222]TEHTRIS_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][223]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][224]GCLDW_CLODWAVE_HIDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][244]CYNERIO_NDR_H
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][283]WIREGUARD_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][291]CLAVISTER_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][428]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][468]VICARIUS_VRX_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][604]FORTINET_ADC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][623]HUAWEI_WIRELESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][628]AZURE_VNET_FLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][630]CISCO_NETFLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][642]BELDEN_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][667]HP_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][682]VELOCLOUD_SDWAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][709]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][710]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][711]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][746]TRELLIX_HX_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][808]RAVEN_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][817]TERADATA_ACCESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][818]TERADATA_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][830]AZURE_RISKY_USERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][831]AZURE_RISK_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][832]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][862]D_OPENPATH_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][876]CIP_FASTWEB_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][950]SOLIDSERVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][993]HLX_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][994]CMB_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1016]WFA_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1023]PINGONE_AIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1024]PINGONE_PROTECT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1132]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1133]FOXPASS_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1134]DRAYTEK_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1135]CHROMEOS_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1136]VECTRA_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1137]METABASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1138]HUAWEI_FUSIONSPHERE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1139]HUAWEI_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1284]MY_SAILPOINT_LIFECYCLE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1369]ONEIDENTITY_SAFEGUARD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1402]CLICKHOUSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1425]JOBLOGIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1464]ZOHO_ASSIST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1486]OPENTEXT_CORDY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1504]SALESFORCE_SHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1505]SALESFORCE_MARKETING_CLOUD_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1531]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1561]CROWDSTRIKE_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1630]JAMF_TELEMETRY_V2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1825]IBM_SENSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1834]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1835]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1844]ACN_SIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1845]ARCON_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1848]APPSMITH_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1849]ARCDA_COREWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1850]AVIGILON_ALTA_CLOUD_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1851]IBM_SVA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1855]AUTODESK_CAD_CAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1857]FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1864]BLUE_VOYANT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1865]BBVA_MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1871]CAMEYO_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1879]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1881]CMMRZ_FORTI_DECEPTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1882]CSG_CITRIX_RX
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1883]EQIX_CONFIGURATION_BUILDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1886]SNGPS_HP_EL_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1887]SNGPS_HPE_3COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1888]SNGPS_HP_FLEXNET_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1889]D_STORMBREAKER_ALERTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1890]D_STORMBREAKER_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1901]FA_SOLUTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1902]FILES_DOT_COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1903]FINCOMUN_ORACLE_SPEI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1910]GHANGOR_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1914]HKBK_ASE1_EMS_BMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1915]HKBK_ASE1_MORPHISEC_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1916]HKBK_ASE1_DELL_EMC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1918]NETLIFY_LOGDRAINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1930]GDLP_ATLAS_USER_ELEVATION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1936]HSCR_ACCOUNTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1937]HILLSTONE_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1938]HOXHUNT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1939]ISL_LIGHT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1941]MC001_ELASTIC_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1942]N002_CECABANK_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1947]OPENAI_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1948]RQIDJIE5_CAS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1951]INTEL_EMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1957]INDUSFACE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1968]MLL001_MOL_AGYIEUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1969]MLL001_MOL_SFTPGO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1970]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1971]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1972]MLL001_MOL_PCI_DC_SAD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1973]MLL001_MOL_PCI_DB_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1974]MLL001_MOL_PCI_GKE_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1975]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1976]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1977]MLL001_MOL_PCI_TOKENISER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1978]MLL001_MOL_TF_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1979]MLL001_MOL_CLAMAV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1980]MLL001_MOL_MYSQL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1981]MLL001_MOL_PA_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1984]N002_MICROSERVICES_HTTPLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1985]N002_MICROSERVICES_SERVICELOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1986]N002_MICROSERVICES_AUDITLOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1999]PINGCAP_TIDB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2000]PLUMFINTECH_PLUM_SCA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2004]PRIVACY_I
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2009]JIRANSECURITY_MAILSCREEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2010]MY_RESOLVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2011]REVIVESEC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2014]BRDCM_IMS_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2015]BBVA_BANKTRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2016]BBVA_CONSORES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2017]RQTI0LIH_VERVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2018]RQTI0LIH_ONEHUB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2019]RQTI0LIH_EPI_MES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2020]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2021]SAP_LEASING
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2022]BBVA_SIRE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2023]BBVA_POWER_CURVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2024]BBVA_SMARTSTREAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2025]BBVA_SOLUCIONES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2026]BBVA_TEXSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2027]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2028]BBVA_SIIBE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2029]BBVA_MBOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2030]BBVA_SINBA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2031]BBVA_MSDP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2032]BBVA_PLUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2033]BBVA_CAIRO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2034]BBVA_SICOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2035]BBVA_FUMER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2036]BBVA_MCOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2037]BBVA_MCWN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2038]BBVA_ZEIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2039]BBVA_CYGE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2040]BBVA_SISP_NET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2041]BBVA_CLAIM_CENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2042]BBVA_SAIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2043]BBVA_SPWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2044]BBVA_VALIDADOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2045]BBVA_GUIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2046]BBVA_HECO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2047]GL_TRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2048]ORACLE_AVDF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2049]REBLAZE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2050]VZ_MAXMIND_GEOIP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2051]TT002_EXASOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2052]CORERO_SMARTWALL_ONE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2053]AVEPOINT_ENPOWER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2054]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2055]GITHUB_DEPENDABOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2056]AWS_EKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2057]THALES_PS10K_HSM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2058]F5_DCS_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2059]CLOUDWAVE_HONEYPOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2060]PAN_PRISMA_CWP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2061]FORTINET_FORTISASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2062]MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2063]AWS_DASHA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2064]ONETRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2065]NETWRIX_PRIVILEGE_SECURE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2066]SANGFOR_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2069]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2072]SNF_SDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2074]SECURDEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2078]SOFTETHER_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2081]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2091]UNICO_IDCLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2092]UNICO_IDTRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2111]WING_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2113]WSGC_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2114]ZERO_NETWORKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2127]JUNIPER_SSR_CONDUCTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2128]INFORMATICA_POWERCENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2139]EXTERRO_FTK_CENTRAL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2140]CROWDSTRIKE_RECON
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2141]CLOUDFLARE_PAGESHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2142]FORTRA_VM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2143]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2144]RAPID_IDENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2145]SLSFR_VERTEX_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2146]ARCDA_VISTA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2147]PRMTH_WSO2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2148]MC001_CLICKS_ENTERPAT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2149]MC001_CLICKS_CLIUSERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2150]MC001_ROSHTOV_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2151]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2152]MC001_MACCABI_PHARMACY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2153]SPACELIFT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2154]PAVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2155]MC001_MACCABI_NEW_APP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2156]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2157]MC001_OFEK_EITAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2158]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2159]MC001_MACCABI_ONLINE_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2160]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2161]CPS_JED_JCD_METRIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2162]H_ISAC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2163]IIJ_LANSCOPE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2164]ML009_MENLO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2455]BBVA_CUSTODIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2456]BBVA_CREDIT_VW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2457]BBVA_CREDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2520]BBVA_WALLSTREET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2522]INFORMATICA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2763]MT_APPLIED_PRINT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2782]HANNA_KASEYA_IT_GLUE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2783]KNRTH_COMMONFATE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2785]PARXL_MERAKI_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2789]PRMTH_FIRSTIQ
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2790]PRMTH_PWSS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2794]RENAULT_IRN_74011
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2810]RENAULT_IRN_74898
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2811]RENAULT_IRN_73882
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2812]RENAULT_IRN_72284
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2813]RENAULT_IRN_74143
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2814]RENAULT_IRN_70132
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2815]RENAULT_IRN_50567
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2816]RENAULT_IRN_8185
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2817]RENAULT_IRN_77153
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2818]RENAULT_IRN_67551
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2819]RENAULT_IRN_73940
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2820]RENAULT_IRN_75039
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2821]RENAULT_IRN_69293
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2822]RENAULT_IRN_74601
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2826]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2839]SML_SITEMINDER_PP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2851]SNF_FORENSIC_PREFETCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2852]SNF_FORENSIC_HAYABUSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2891]SHOPIFY_APV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2909]SHOPIFY_SVC_INT_2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2940]VCTR727_AURUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2973]WMT_GENAI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2995]WSGC_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][3007]WMT_VDI
root['schemas']['SearchHistory']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['SearchQuery']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][6]Entity Query.
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][6]QUERY_TYPE_ENTITY_GRAPH_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][6]Entity Query.
iterable_item_removed
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2739]WSGC_WSI_ECOM
prod/northamerica-northeast2-chronicle-v1beta
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['ListOperationsResponse']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250224
old_value20250102
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/notifications-pa-
dictionary_item_added
  • root['schemas']['GoogleAndroidLibrariesTapandpayPropose__Proposal']
  • root['schemas']['GoogleLogsTapandpayAndroid__PassesGeofencingEvent']
  • root['schemas']['PhotosEffects_ImageAsset_ItemRef']
  • root['schemas']['WalletGooglepayCommon__IdCardCtaTarget']
  • root['schemas']['GoogleInternalTapandpayV1PassesTemplates__PassTarget']['properties']['attachmentIndex']
  • root['schemas']['GoogleLogsTapandpayAndroid__Tp2AppLogEvent']['properties']['passesGeofencingEvent']
  • root['schemas']['GoogleLogsTapandpayAndroid__TransitHceSessionEvent']['properties']['isWearAppInBackground']
  • root['schemas']['PhotosEffects__ImageAsset']['properties']['itemRef']
  • root['schemas']['WalletGooglepayCommon__MdocUnderReviewTarget']['properties']['screenType']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['idCardCta']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['walletPage']
dictionary_item_removed
  • root['schemas']['GoogleLogsTapandpayAndroid__TransitHceSessionEvent']['properties']['isAppInBackground']
values_changed
root['revision']
new_value20250223
old_value20250218
root['schemas']['GoogleInternalTapandpayV1PassesTemplates__PassTarget']['description']
new_valueAn action to take that is related to a specific pass. Objects that contain a target that is unrecognized or that is not known how to be handled by the current client version should hide the object instead of showing it. Next ID: 12
old_valueAn action to take that is related to a specific pass. Objects that contain a target that is unrecognized or that is not known how to be handled by the current client version should hide the object instead of showing it. Next ID: 11
root['schemas']['GoogleLogsTapandpayAndroid__Tp2AppLogEvent']['description']
new_valueTop-level extension to be reported Next id: 209
old_valueTop-level extension to be reported Next id: 208
root['schemas']['PhotosEffects__ImageAsset']['description']
new_valueNext Id: 5
old_valueNext Id: 4
root['schemas']['WalletGooglepayCommon__MdocUnderReviewTarget']['description']
new_valueA target to intent to the mdoc under review screen. Next id: 4
old_valueA target to intent to the mdoc under review screen. Next id: 3
root['schemas']['WalletGooglepayCommon__NavigationTarget']['description']
new_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 74
old_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 72
iterable_item_added
root['schemas']['AppsDynamite__GroupLabelId']['properties']['groupLabelType']['enum'][10]MEETING_CHAT
root['schemas']['AppsDynamite__GroupLabelId']['properties']['groupLabelType']['enumDescriptions'][10]When applied, signifies the group is a meeting chat. See go/cim-gdm-type-design. NEXT TAG: 11
root['schemas']['ComGoogleCommerceTapandpayNotifications__TapAndPayNotificationAppPayload']['properties']['type']['enum'][47]NOTIFY_DEVICE_TO_PROCEED_STORED_VALUE_SUPERVISED_PUSH_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications__TapAndPayNotificationAppPayload']['properties']['type']['enumDescriptions'][47]Notify the device to prompt the user to tokenize supervised stored value card. Field token_provisioning_data will be set for this type of notification. It will contain server_provisioning_session_id, client_provisioning_session_id. See go/wallet-design-gru-wallet-payments-server.
root['schemas']['GoogleLogsTapandpayAndroid__BackupRestoreEvent']['properties']['errorType']['enum'][9]NO_DATA_TO_RESTORE
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][211]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_ATTEMPT
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][212]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_LOCK_ACQUIRED
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][213]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_LOCK_CONTENTION_RESCHEDULE_NEEDED
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][214]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_LOCK_CONTENTION_RESCHEDULE_NOT_NEEDED
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][211]Events for collecting and analyzing lock contention during checking and updating bundles with ClosedLoopBundleManager. Event for when a bundle check is attempted.
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][212]Event for when the lock is successfully acquired.
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][213]Event for when the lock contention is detected and bundle check reschedule is needed.
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][214]Event for when the lock contention is detected but bundle check reschedule is not needed.
root['schemas']['WalletGooglepayBackendApiNotifications__ClientPayload']['properties']['notificationType']['enum'][76]PERFORM_STORED_VALUE_SUPERVISED_PUSH_TOKENIZATION
root['schemas']['WalletGooglepayBackendApiNotifications__ClientPayload']['properties']['notificationType']['enumDescriptions'][76]Notification type for notifying the supervised device to perform supervised stored value push tokenization. see go/wallet-design-gru-wallet-payments-server. GmsCore destination. Gaia targeted. System notification.
prod/notifications-pa-v1
dictionary_item_added
  • root['schemas']['GoogleAndroidLibrariesTapandpayPropose__Proposal']
  • root['schemas']['GoogleLogsTapandpayAndroid__PassesGeofencingEvent']
  • root['schemas']['PhotosEffects_ImageAsset_ItemRef']
  • root['schemas']['WalletGooglepayCommon__IdCardCtaTarget']
  • root['schemas']['GoogleInternalTapandpayV1PassesTemplates__PassTarget']['properties']['attachmentIndex']
  • root['schemas']['GoogleLogsTapandpayAndroid__Tp2AppLogEvent']['properties']['passesGeofencingEvent']
  • root['schemas']['GoogleLogsTapandpayAndroid__TransitHceSessionEvent']['properties']['isWearAppInBackground']
  • root['schemas']['PhotosEffects__ImageAsset']['properties']['itemRef']
  • root['schemas']['WalletGooglepayCommon__MdocUnderReviewTarget']['properties']['screenType']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['idCardCta']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['walletPage']
dictionary_item_removed
  • root['schemas']['GoogleLogsTapandpayAndroid__TransitHceSessionEvent']['properties']['isAppInBackground']
values_changed
root['revision']
new_value20250223
old_value20250218
root['schemas']['GoogleInternalTapandpayV1PassesTemplates__PassTarget']['description']
new_valueAn action to take that is related to a specific pass. Objects that contain a target that is unrecognized or that is not known how to be handled by the current client version should hide the object instead of showing it. Next ID: 12
old_valueAn action to take that is related to a specific pass. Objects that contain a target that is unrecognized or that is not known how to be handled by the current client version should hide the object instead of showing it. Next ID: 11
root['schemas']['GoogleLogsTapandpayAndroid__Tp2AppLogEvent']['description']
new_valueTop-level extension to be reported Next id: 209
old_valueTop-level extension to be reported Next id: 208
root['schemas']['PhotosEffects__ImageAsset']['description']
new_valueNext Id: 5
old_valueNext Id: 4
root['schemas']['WalletGooglepayCommon__MdocUnderReviewTarget']['description']
new_valueA target to intent to the mdoc under review screen. Next id: 4
old_valueA target to intent to the mdoc under review screen. Next id: 3
root['schemas']['WalletGooglepayCommon__NavigationTarget']['description']
new_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 74
old_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 72
iterable_item_added
root['schemas']['AppsDynamite__GroupLabelId']['properties']['groupLabelType']['enum'][10]MEETING_CHAT
root['schemas']['AppsDynamite__GroupLabelId']['properties']['groupLabelType']['enumDescriptions'][10]When applied, signifies the group is a meeting chat. See go/cim-gdm-type-design. NEXT TAG: 11
root['schemas']['ComGoogleCommerceTapandpayNotifications__TapAndPayNotificationAppPayload']['properties']['type']['enum'][47]NOTIFY_DEVICE_TO_PROCEED_STORED_VALUE_SUPERVISED_PUSH_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications__TapAndPayNotificationAppPayload']['properties']['type']['enumDescriptions'][47]Notify the device to prompt the user to tokenize supervised stored value card. Field token_provisioning_data will be set for this type of notification. It will contain server_provisioning_session_id, client_provisioning_session_id. See go/wallet-design-gru-wallet-payments-server.
root['schemas']['GoogleLogsTapandpayAndroid__BackupRestoreEvent']['properties']['errorType']['enum'][9]NO_DATA_TO_RESTORE
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][211]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_ATTEMPT
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][212]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_LOCK_ACQUIRED
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][213]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_LOCK_CONTENTION_RESCHEDULE_NEEDED
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enum'][214]BUNDLE_MANAGER_CHECK_AND_UPDATE_BUNDLES_LOCK_CONTENTION_RESCHEDULE_NOT_NEEDED
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][211]Events for collecting and analyzing lock contention during checking and updating bundles with ClosedLoopBundleManager. Event for when a bundle check is attempted.
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][212]Event for when the lock is successfully acquired.
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][213]Event for when the lock contention is detected and bundle check reschedule is needed.
root['schemas']['GoogleLogsTapandpayAndroid__ClosedLoopEvent']['properties']['eventType']['enumDescriptions'][214]Event for when the lock contention is detected but bundle check reschedule is not needed.
root['schemas']['WalletGooglepayBackendApiNotifications__ClientPayload']['properties']['notificationType']['enum'][76]PERFORM_STORED_VALUE_SUPERVISED_PUSH_TOKENIZATION
root['schemas']['WalletGooglepayBackendApiNotifications__ClientPayload']['properties']['notificationType']['enumDescriptions'][76]Notification type for notifying the supervised device to perform supervised stored value push tokenization. see go/wallet-design-gru-wallet-payments-server. GmsCore destination. Gaia targeted. System notification.
prod/ogads-pa-
dictionary_item_added
  • root['resources']['v1']['methods']['getnativemobiledata']
  • root['schemas']['BadgeInfo']
  • root['schemas']['MobileDataResponse']
values_changed
root['revision']
new_value20250223
old_value20250216
iterable_item_added
root['resources']['v1']['methods']['getdata']['parameters']['hostProduct']['enum'][718]CODE_ASSIST
root['resources']['v1']['methods']['getdata']['parameters']['hostProduct']['enumDescriptions'][718]go/crescendo-ux
root['resources']['v1']['methods']['getdata']['parameters']['subproduct']['enum'][718]CODE_ASSIST
root['resources']['v1']['methods']['getdata']['parameters']['subproduct']['enumDescriptions'][718]go/crescendo-ux
prod/ogads-pa-v1
dictionary_item_added
  • root['resources']['v1']['methods']['getnativemobiledata']
  • root['schemas']['BadgeInfo']
  • root['schemas']['MobileDataResponse']
values_changed
root['revision']
new_value20250223
old_value20250216
iterable_item_added
root['resources']['v1']['methods']['getdata']['parameters']['hostProduct']['enum'][718]CODE_ASSIST
root['resources']['v1']['methods']['getdata']['parameters']['hostProduct']['enumDescriptions'][718]go/crescendo-ux
root['resources']['v1']['methods']['getdata']['parameters']['subproduct']['enum'][718]CODE_ASSIST
root['resources']['v1']['methods']['getdata']['parameters']['subproduct']['enumDescriptions'][718]go/crescendo-ux
prod/opsconfigmonitoring-
values_changed
root['revision']
new_value20250222
old_value20250208
prod/opsconfigmonitoring-v1
values_changed
root['revision']
new_value20250222
old_value20250208
prod/orglifecycle-v1
values_changed
root['revision']
new_value20250219
old_value20250206
prod/parametermanager-v1
values_changed
root['revision']
new_value20250219
old_value20250205
iterable_item_added
root['endpoints'][1]
descriptionRegional Endpoint
endpointUrlhttps://parametermanager.europe-west2.rep.googleapis.com/
locationeurope-west2
prod/performanceparameters-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/performanceparameters-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/ppissuer-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/ppissuer-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/preprod-hangouts-
values_changed
root['revision']
new_value20250224
old_value20250219
prod/preprod-hangouts-v1
values_changed
root['revision']
new_value20250224
old_value20250219
prod/privacysandboxmaven-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/privacysandboxmaven-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/progressiverollout-
dictionary_item_added
  • root['schemas']['DeleteRequest']
  • root['schemas']['GetOperationRequest']
  • root['schemas']['ReconciliationOperationMetadata']
  • root['schemas']['ReferencePayload']
  • root['schemas']['UpdateRequest']
values_changed
root['revision']
new_value20250219
old_value20250205
prod/progressiverollout-v1alpha
dictionary_item_added
  • root['schemas']['DeleteRequest']
  • root['schemas']['GetOperationRequest']
  • root['schemas']['ReferencePayload']
  • root['schemas']['UpdateRequest']
values_changed
root['revision']
new_value20250219
old_value20250205
prod/progressiverollout-v1beta
dictionary_item_added
  • root['schemas']['DeleteRequest']
  • root['schemas']['GetOperationRequest']
  • root['schemas']['ReconciliationOperationMetadata']
  • root['schemas']['ReferencePayload']
  • root['schemas']['UpdateRequest']
values_changed
root['revision']
new_value20250219
old_value20250205
prod/quantum-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/quantum-v1alpha1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/rbmopenmaap-
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/rbmopenmaap-v1
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/reach-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250219
prod/resultstore-
values_changed
root['revision']
new_value20250220
old_value20250218
prod/resultstore-v2
values_changed
root['revision']
new_value20250220
old_value20250218
prod/routeoptimization-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/routeoptimization-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/routes-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/routes-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/routespreferred-
values_changed
root['revision']
new_value20250220
old_value20250219
prod/routespreferred-v1
values_changed
root['revision']
new_value20250220
old_value20250219
prod/routespreferred-v1alpha
values_changed
root['revision']
new_value20250220
old_value20250219
prod/salesforceshopping-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/salesforceshopping-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/searchresearcherresults-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/searchresearcherresults-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/securitycentermanagement-
dictionary_item_added
  • root['resources']['organizations']['resources']['locations']['methods']
  • root['resources']['projects']['resources']['locations']['methods']['getBillingMetadata']
  • root['schemas']['BillingMetadata']
values_changed
root['revision']
new_value20250223
old_value20250209
prod/securitycentermanagement-v1
dictionary_item_added
  • root['resources']['organizations']['resources']['locations']['methods']
  • root['resources']['projects']['resources']['locations']['methods']['getBillingMetadata']
  • root['schemas']['BillingMetadata']
values_changed
root['revision']
new_value20250223
old_value20250209
prod/servicehealth-v1alpha
values_changed
root['revision']
new_value20250219
old_value20250205
prod/shoppingdataintegration-
values_changed
root['revision']
new_value20250224
old_value20250220
prod/shoppingdataintegration-v1
values_changed
root['revision']
new_value20250224
old_value20250220
prod/sourcerepo-pa-
values_changed
root['revision']
new_value20250224
old_value20250210
prod/sourcerepo-pa-v1
values_changed
root['revision']
new_value20250224
old_value20250210
prod/staging-identitytoolkit.sandbox-v1
values_changed
root['revision']
new_value20250225
old_value20250219
prod/staging-identitytoolkit.sandbox-v2
values_changed
root['revision']
new_value20250225
old_value20250219
prod/staging-identitytoolkit.sandbox-v2alpha1
values_changed
root['revision']
new_value20250225
old_value20250219
prod/staging-identitytoolkit.sandbox-v2beta1
values_changed
root['revision']
new_value20250225
old_value20250219
prod/staging-notifications-pa.sandbox-
dictionary_item_added
  • root['schemas']['GoogleAndroidLibrariesTapandpayPropose__Proposal']
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['walletPage']
values_changed
root['revision']
new_value20250225
old_value20250222
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['WalletGooglepayCommon__NavigationTarget']['description']
new_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 74
old_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 73
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/staging-notifications-pa.sandbox-v1
dictionary_item_added
  • root['schemas']['GoogleAndroidLibrariesTapandpayPropose__Proposal']
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['walletPage']
values_changed
root['revision']
new_value20250225
old_value20250222
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['WalletGooglepayCommon__NavigationTarget']['description']
new_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 74
old_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 73
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/staging-qual-qa-notifications-pa.sandbox-
dictionary_item_added
  • root['schemas']['GoogleAndroidLibrariesTapandpayPropose__Proposal']
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['walletPage']
values_changed
root['revision']
new_value20250225
old_value20250221
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['WalletGooglepayCommon__NavigationTarget']['description']
new_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 74
old_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 73
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/staging-qual-qa-notifications-pa.sandbox-v1
dictionary_item_added
  • root['schemas']['GoogleAndroidLibrariesTapandpayPropose__Proposal']
  • root['schemas']['NotificationsPlatformCommonProto_IosCustomAction_InAppBrowserRedirect']
  • root['schemas']['NotificationsPlatformCommonProto__IosCustomAction']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationServerSessionId']
  • root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['svTokenizationSessionId']
  • root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['iosCustomAction']
  • root['schemas']['WalletGooglepayCommon__NavigationTarget']['properties']['walletPage']
values_changed
root['revision']
new_value20250225
old_value20250221
root['schemas']['NotificationsPlatformCommonProto_CustomPromptButtons_ActionButton']['properties']['customAction']['description']
new_valueCustom action to be handled by the SDK. Android specific
old_valueCustom action to be handled by the SDK. Only supported by Android at the moment.
root['schemas']['WalletGooglepayCommon__NavigationTarget']['description']
new_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 74
old_valueThe target to navigate to. A target should be a pure navigation target. I.e. the target should not represent an action to be taken (besides navigation). Next id: 73
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][23]
new_valueaccount, but not account. A notification is updated.
old_valueaccount, but not account. Slient notification.
iterable_item_added
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][13]SV_WEAR_TOKENIZATION
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enum'][14]SV_INSTALL_WEAR_WALLET_APP
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][13]Start tokenization of a supervised stored value card to a wearable
root['schemas']['ComGoogleCommerceTapandpayNotifications_TapAndPayNotificationAppPayload_AndroidPayGmsCoreTarget']['properties']['targetType']['enumDescriptions'][14]Go to the Play Store to install the Wallet app on WearOS
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enum'][23]DELIVERED_REPLACED
root['schemas']['LogsChimeNotifications__UserInteraction']['properties']['interactionType']['enumDescriptions'][24]Slient notification.
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNotifications_UserActionMetadata_Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ActionLogFilter']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ChimeAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['SearchNowPushProtoChimepayloads__ExpiresAfterSetting']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ContentFeedbackSurvey_SurveyAnswer']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick_ReportAction_ReportReason']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Action']['properties']['type']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Action']['properties']['type']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClickAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClientAction']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ClosetAction']['properties']['undoActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__InlineInjectionMetadata']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__Rating']['properties']['actionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['checkedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['clearedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][136]NOTIFICATION_THUMBS_UP_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enum'][137]NOTIFICATION_THUMBS_DOWN_CLICKED_SRP_LANDING
root['schemas']['Sidekick__ToggleStateAction']['properties']['uncheckedActionType']['enumDescriptions'][136]Actions for Notification SRP landing thumbs button click.
prod/subscribewithgoogle-
values_changed
root['revision']
new_value20250224
old_value20250219
prod/subscribewithgoogle-v1
values_changed
root['revision']
new_value20250224
old_value20250219
prod/takeout-pa-
values_changed
root['revision']
new_value20250220
old_value20250212
prod/takeout-pa-v1
values_changed
root['revision']
new_value20250220
old_value20250212
prod/takeout-pa-v2
values_changed
root['revision']
new_value20250220
old_value20250212
prod/tasks-pa-
values_changed
root['revision']
new_value20250223
old_value20250216
prod/tile-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/tile-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/transferappliance-
values_changed
root['revision']
new_value20250220
old_value20250212
prod/transferappliance-v1alpha1
values_changed
root['revision']
new_value20250220
old_value20250212
prod/travelpartnerprices-
values_changed
root['revision']
new_value20250223
old_value20250220
prod/travelpartnerprices-v1
values_changed
root['revision']
new_value20250223
old_value20250220
prod/us-chronicle-
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['referenceLists']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['rules']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['CompilationDiagnostic']
  • root['schemas']['CompilationPosition']
  • root['schemas']['ListOperationsResponse']
  • root['schemas']['ListReferenceListsResponse']
  • root['schemas']['ListRetrohuntsResponse']
  • root['schemas']['ListRuleDeploymentsResponse']
  • root['schemas']['ListRuleRevisionsResponse']
  • root['schemas']['ListRulesResponse']
  • root['schemas']['Operation']
  • root['schemas']['ReferenceList']
  • root['schemas']['ReferenceListEntry']
  • root['schemas']['ReferenceListScope']
  • root['schemas']['Retrohunt']
  • root['schemas']['Rule']
  • root['schemas']['RuleDeployment']
  • root['schemas']['ScopeInfo']
  • root['schemas']['Severity']
  • root['schemas']['Status']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250213
old_value20241212
root['schemas']['DataAccessScope']['properties']['allowedDataAccessLabels']['description']
new_valueOptional. The allowed labels for the scope. Either allow_all or allowed_data_access_labels needs to be provided. When provided, there has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
old_valueRequired. The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allow_all or allowed_data_access_labels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
root['schemas']['Instance']['properties']
new_value
customerCode
descriptionAn acronym related to the company name.
typestring
displayName
descriptionThe display name of the instance.
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
secopsUrls
descriptionURL of the SecOps instance for the instance. https://.backstory.chronicle.security
items
typestring
typearray
old_value
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
wipeoutStatus
descriptionOutput only. The wipeout status of the instance.
enum
  • WIPEOUT_STATE_UNSPECIFIED
  • DELETE_REQUESTED
  • SOFT_DELETE_IN_PROGRESS
  • SOFT_DELETE_COMPLETED
  • UNDELETE_REQUESTED
  • DATA_DELETION_IN_PROGRESS
  • ERROR
  • WIPED_OUT
  • UNDELETE_COMPLETED
enumDescriptions
  • The default value.
  • The instance has requested deletion.
  • The instance is in the process of being soft-deleted.
  • The instance has been soft-deleted.
  • The instance has requested undeletion.
  • The instance is in the process of being data deleted.
  • The instance has an error during wipeout.
  • The instance has been wiped out.
  • The instance has been undeleted.
readOnlyTrue
typestring
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][15]INVALID_CONFIG_FOR_DASHBOARD_IMPORT
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][15]Invalid config for dashboard import. Example ErrorInfo: { "reason": "INVALID_CONFIG_FOR_DASHBOARD_IMPORT", "domain": "chronicle.googleapis.com", }
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/us-chronicle-v1alpha
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['feeds']['methods']['scheduleTransfer']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacyBatchGetCollections']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['threatCollectionId']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['export']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['import']
  • root['schemas']['AzureAuthV2']
  • root['schemas']['AzureBlobStoreV2Settings']
  • root['schemas']['CustomDrillDownSettings']
  • root['schemas']['DefaultDrillDownSettings']
  • root['schemas']['DrillDown']
  • root['schemas']['DrillDownConfig']
  • root['schemas']['DrillDownDashboardFilter']
  • root['schemas']['DrillDownExternalLink']
  • root['schemas']['DrillDownFilter']
  • root['schemas']['DrillDownQuery']
  • root['schemas']['DynamicParsingConfig']
  • root['schemas']['EnrichmentInfo']
  • root['schemas']['EntityChangedCountTimelineBucket']
  • root['schemas']['EntityChangedInfo']
  • root['schemas']['ExportNativeDashboardsRequest']
  • root['schemas']['ExportNativeDashboardsResponse']
  • root['schemas']['FailureCsvFieldValidation']
  • root['schemas']['FederationMetadata']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnMetadata']
  • root['schemas']['ImportExportStatus']
  • root['schemas']['ImportNativeDashboardsInlineSource']
  • root['schemas']['ImportNativeDashboardsRequest']
  • root['schemas']['ImportNativeDashboardsResponse']
  • root['schemas']['InlineDestination']
  • root['schemas']['InstanceSelection']
  • root['schemas']['LegacyBatchGetCollectionsResponse']
  • root['schemas']['LogField']
  • root['schemas']['MetricTrendConfig']
  • root['schemas']['MssoAuthentication']
  • root['schemas']['NativeDashboardWithChartsAndQueries']
  • root['schemas']['ScheduleFeedTransferErrorDetails']
  • root['schemas']['ScheduleFeedTransferRequest']
  • root['schemas']['ScheduleFeedTransferResponse']
  • root['schemas']['SearchDataTableColumnInfo']
  • root['schemas']['SearchDataTableInfo']
  • root['schemas']['SearchDataTableRow']
  • root['schemas']['SearchDataTableRowInfo']
  • root['schemas']['TrellixHxAlertsSettings']
  • root['schemas']['TrellixHxHostsSettings']
  • root['schemas']['TrellixIAMAuthentication']
  • root['schemas']['TrellixStarXAuthentication']
  • root['schemas']['AnalystVerdict']['description']
  • root['schemas']['AnalystVerdict']['properties']['confidenceScore']['description']
  • root['schemas']['AnalystVerdict']['properties']['verdictResponse']['description']
  • root['schemas']['AnalystVerdict']['properties']['verdictTime']['description']
  • root['schemas']['AnalyticsMetadata']['description']
  • root['schemas']['AnalyticsMetadata']['properties']['analytic']['description']
  • root['schemas']['Artifact']['description']
  • root['schemas']['Artifact']['properties']['anonymous']['description']
  • root['schemas']['Artifact']['properties']['artifactClient']['description']
  • root['schemas']['Artifact']['properties']['asOwner']['description']
  • root['schemas']['Artifact']['properties']['asn']['description']
  • root['schemas']['Artifact']['properties']['firstSeenTime']['description']
  • root['schemas']['Artifact']['properties']['ip']['description']
  • root['schemas']['Artifact']['properties']['jarm']['description']
  • root['schemas']['Artifact']['properties']['lastHttpsCertificate']['description']
  • root['schemas']['Artifact']['properties']['lastHttpsCertificateDate']['description']
  • root['schemas']['Artifact']['properties']['lastSeenTime']['description']
  • root['schemas']['Artifact']['properties']['location']['description']
  • root['schemas']['Artifact']['properties']['network']['description']
  • root['schemas']['Artifact']['properties']['prevalence']['description']
  • root['schemas']['Artifact']['properties']['regionalInternetRegistry']['description']
  • root['schemas']['Artifact']['properties']['risks']['description']
  • root['schemas']['Artifact']['properties']['tags']['description']
  • root['schemas']['Artifact']['properties']['tunnels']['description']
  • root['schemas']['Artifact']['properties']['whois']['description']
  • root['schemas']['Artifact']['properties']['whoisDate']['description']
  • root['schemas']['ArtifactClient']['description']
  • root['schemas']['ArtifactClient']['properties']['behaviors']['description']
  • root['schemas']['ArtifactClient']['properties']['proxies']['description']
  • root['schemas']['Asset']['description']
  • root['schemas']['Asset']['properties']['assetId']['description']
  • root['schemas']['Asset']['properties']['attribute']['description']
  • root['schemas']['Asset']['properties']['category']['description']
  • root['schemas']['Asset']['properties']['creationTime']['description']
  • root['schemas']['Asset']['properties']['deploymentStatus']['description']
  • root['schemas']['Asset']['properties']['firstDiscoverTime']['description']
  • root['schemas']['Asset']['properties']['firstSeenTime']['description']
  • root['schemas']['Asset']['properties']['hardware']['description']
  • root['schemas']['Asset']['properties']['hostname']['description']
  • root['schemas']['Asset']['properties']['ip']['description']
  • root['schemas']['Asset']['properties']['labels']['description']
  • root['schemas']['Asset']['properties']['lastBootTime']['description']
  • root['schemas']['Asset']['properties']['lastDiscoverTime']['description']
  • root['schemas']['Asset']['properties']['location']['description']
  • root['schemas']['Asset']['properties']['mac']['description']
  • root['schemas']['Asset']['properties']['natIp']['description']
  • root['schemas']['Asset']['properties']['networkDomain']['description']
  • root['schemas']['Asset']['properties']['platformSoftware']['description']
  • root['schemas']['Asset']['properties']['productObjectId']['description']
  • root['schemas']['Asset']['properties']['software']['description']
  • root['schemas']['Asset']['properties']['systemLastUpdateTime']['description']
  • root['schemas']['Asset']['properties']['type']['description']
  • root['schemas']['Asset']['properties']['vulnerabilities']['description']
  • root['schemas']['Association']['description']
  • root['schemas']['Association']['properties']['alias']['description']
  • root['schemas']['Association']['properties']['associatedActors']['description']
  • root['schemas']['Association']['properties']['countryCode']['description']
  • root['schemas']['Association']['properties']['description']['description']
  • root['schemas']['Association']['properties']['firstReferenceTime']['description']
  • root['schemas']['Association']['properties']['id']['description']
  • root['schemas']['Association']['properties']['industriesAffected']['description']
  • root['schemas']['Association']['properties']['lastReferenceTime']['description']
  • root['schemas']['Association']['properties']['name']['description']
  • root['schemas']['Association']['properties']['regionCode']['description']
  • root['schemas']['Association']['properties']['role']['description']
  • root['schemas']['Association']['properties']['sourceCountry']['description']
  • root['schemas']['Association']['properties']['sponsorRegion']['description']
  • root['schemas']['Association']['properties']['tags']['description']
  • root['schemas']['Association']['properties']['targetedRegions']['description']
  • root['schemas']['Association']['properties']['type']['description']
  • root['schemas']['AssociationAlias']['description']
  • root['schemas']['AssociationAlias']['properties']['company']['description']
  • root['schemas']['AssociationAlias']['properties']['name']['description']
  • root['schemas']['AttackDetails']['description']
  • root['schemas']['AttackDetails']['properties']['tactics']['description']
  • root['schemas']['AttackDetails']['properties']['techniques']['description']
  • root['schemas']['AttackDetails']['properties']['version']['description']
  • root['schemas']['Attribute']['description']
  • root['schemas']['Attribute']['properties']['cloud']['description']
  • root['schemas']['Attribute']['properties']['creationTime']['description']
  • root['schemas']['Attribute']['properties']['labels']['description']
  • root['schemas']['Attribute']['properties']['lastUpdateTime']['description']
  • root['schemas']['Attribute']['properties']['permissions']['description']
  • root['schemas']['Attribute']['properties']['roles']['description']
  • root['schemas']['Authentication']['description']
  • root['schemas']['Authentication']['properties']['authDetails']['description']
  • root['schemas']['Authentication']['properties']['mechanism']['description']
  • root['schemas']['Authentication']['properties']['type']['description']
  • root['schemas']['AuthorityKeyId']['description']
  • root['schemas']['AuthorityKeyId']['properties']['keyid']['description']
  • root['schemas']['AuthorityKeyId']['properties']['serialNumber']['description']
  • root['schemas']['BackstoryEntity']['description']
  • root['schemas']['BackstoryEntity']['properties']['additional']['description']
  • root['schemas']['BackstoryEntity']['properties']['entity']['description']
  • root['schemas']['BackstoryEntity']['properties']['metadata']['description']
  • root['schemas']['BackstoryEntity']['properties']['metric']['description']
  • root['schemas']['BackstoryEntity']['properties']['relations']['description']
  • root['schemas']['BackstoryEntity']['properties']['riskScore']['description']
  • root['schemas']['BackstoryFile']['description']
  • root['schemas']['BackstoryFile']['properties']['ahash']['description']
  • root['schemas']['BackstoryFile']['properties']['authentihash']['description']
  • root['schemas']['BackstoryFile']['properties']['capabilitiesTags']['description']
  • root['schemas']['BackstoryFile']['properties']['createTime']['description']
  • root['schemas']['BackstoryFile']['properties']['embeddedDomains']['description']
  • root['schemas']['BackstoryFile']['properties']['embeddedIps']['description']
  • root['schemas']['BackstoryFile']['properties']['embeddedUrls']['description']
  • root['schemas']['BackstoryFile']['properties']['exifInfo']['description']
  • root['schemas']['BackstoryFile']['properties']['fileMetadata']['description']
  • root['schemas']['BackstoryFile']['properties']['fileType']['description']
  • root['schemas']['BackstoryFile']['properties']['firstSeenTime']['description']
  • root['schemas']['BackstoryFile']['properties']['firstSubmissionTime']['description']
  • root['schemas']['BackstoryFile']['properties']['fullPath']['description']
  • root['schemas']['BackstoryFile']['properties']['lastAccessTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastAnalysisTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastModificationTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastSeenTime']['description']
  • root['schemas']['BackstoryFile']['properties']['lastSubmissionTime']['description']
  • root['schemas']['BackstoryFile']['properties']['mainIcon']['description']
  • root['schemas']['BackstoryFile']['properties']['md5']['description']
  • root['schemas']['BackstoryFile']['properties']['mimeType']['description']
  • root['schemas']['BackstoryFile']['properties']['names']['description']
  • root['schemas']['BackstoryFile']['properties']['ntfs']['description']
  • root['schemas']['BackstoryFile']['properties']['pdfInfo']['description']
  • root['schemas']['BackstoryFile']['properties']['peFile']['description']
  • root['schemas']['BackstoryFile']['properties']['prevalence']['description']
  • root['schemas']['BackstoryFile']['properties']['securityResult']['description']
  • root['schemas']['BackstoryFile']['properties']['sha1']['description']
  • root['schemas']['BackstoryFile']['properties']['sha256']['description']
  • root['schemas']['BackstoryFile']['properties']['signatureInfo']['description']
  • root['schemas']['BackstoryFile']['properties']['size']['description']
  • root['schemas']['BackstoryFile']['properties']['ssdeep']['description']
  • root['schemas']['BackstoryFile']['properties']['statDev']['description']
  • root['schemas']['BackstoryFile']['properties']['statFlags']['description']
  • root['schemas']['BackstoryFile']['properties']['statInode']['description']
  • root['schemas']['BackstoryFile']['properties']['statMode']['description']
  • root['schemas']['BackstoryFile']['properties']['statNlink']['description']
  • root['schemas']['BackstoryFile']['properties']['tags']['description']
  • root['schemas']['BackstoryFile']['properties']['vhash']['description']
  • root['schemas']['BoolSequence']['description']
  • root['schemas']['BoolSequence']['properties']['boolVals']['description']
  • root['schemas']['BytesSequence']['description']
  • root['schemas']['BytesSequence']['properties']['bytesVals']['description']
  • root['schemas']['CertSignature']['description']
  • root['schemas']['CertSignature']['properties']['signature']['description']
  • root['schemas']['CertSignature']['properties']['signatureAlgorithm']['description']
  • root['schemas']['Certificate']['description']
  • root['schemas']['Certificate']['properties']['issuer']['description']
  • root['schemas']['Certificate']['properties']['md5']['description']
  • root['schemas']['Certificate']['properties']['notAfter']['description']
  • root['schemas']['Certificate']['properties']['notBefore']['description']
  • root['schemas']['Certificate']['properties']['serial']['description']
  • root['schemas']['Certificate']['properties']['sha1']['description']
  • root['schemas']['Certificate']['properties']['sha256']['description']
  • root['schemas']['Certificate']['properties']['subject']['description']
  • root['schemas']['Certificate']['properties']['version']['description']
  • root['schemas']['Client']['description']
  • root['schemas']['Client']['properties']['certificate']['description']
  • root['schemas']['Client']['properties']['ja3']['description']
  • root['schemas']['Client']['properties']['serverName']['description']
  • root['schemas']['Client']['properties']['supportedCiphers']['description']
  • root['schemas']['Cloud']['description']
  • root['schemas']['Cloud']['properties']['availabilityZone']['description']
  • root['schemas']['Cloud']['properties']['environment']['description']
  • root['schemas']['Cloud']['properties']['project']['description']
  • root['schemas']['Cloud']['properties']['vpc']['description']
  • root['schemas']['Collection']['description']
  • root['schemas']['Collection']['properties']['caseName']['description']
  • root['schemas']['Collection']['properties']['collectionElements']['description']
  • root['schemas']['Collection']['properties']['createdTime']['description']
  • root['schemas']['Collection']['properties']['dataAccessScope']['description']
  • root['schemas']['Collection']['properties']['detection']['description']
  • root['schemas']['Collection']['properties']['detectionTime']['description']
  • root['schemas']['Collection']['properties']['feedbackHistory']['description']
  • root['schemas']['Collection']['properties']['feedbackSummary']['description']
  • root['schemas']['Collection']['properties']['id']['description']
  • root['schemas']['Collection']['properties']['idNamespace']['description']
  • root['schemas']['Collection']['properties']['investigation']['description']
  • root['schemas']['Collection']['properties']['lastUpdatedTime']['description']
  • root['schemas']['Collection']['properties']['responsePlatformInfo']['description']
  • root['schemas']['Collection']['properties']['soarAlert']['description']
  • root['schemas']['Collection']['properties']['soarAlertMetadata']['description']
  • root['schemas']['Collection']['properties']['tags']['description']
  • root['schemas']['Collection']['properties']['timeWindow']['description']
  • root['schemas']['Collection']['properties']['type']['description']
  • root['schemas']['DNSRecord']['description']
  • root['schemas']['DNSRecord']['properties']['expire']['description']
  • root['schemas']['DNSRecord']['properties']['minimum']['description']
  • root['schemas']['DNSRecord']['properties']['priority']['description']
  • root['schemas']['DNSRecord']['properties']['refresh']['description']
  • root['schemas']['DNSRecord']['properties']['retry']['description']
  • root['schemas']['DNSRecord']['properties']['rname']['description']
  • root['schemas']['DNSRecord']['properties']['serial']['description']
  • root['schemas']['DNSRecord']['properties']['ttl']['description']
  • root['schemas']['DNSRecord']['properties']['type']['description']
  • root['schemas']['DNSRecord']['properties']['value']['description']
  • root['schemas']['DashboardChart']['properties']['drillDownConfig']
  • root['schemas']['DataAccessIngestionLabel']['properties']['key']['description']
  • root['schemas']['DataAccessIngestionLabel']['properties']['value']['description']
  • root['schemas']['DataAccessLabels']['properties']['allowScopedAccess']['description']
  • root['schemas']['DataAccessLabels']['properties']['customLabels']['description']
  • root['schemas']['DataAccessLabels']['properties']['ingestionKvLabels']['description']
  • root['schemas']['DataAccessLabels']['properties']['ingestionLabels']['description']
  • root['schemas']['DataAccessLabels']['properties']['logTypes']['description']
  • root['schemas']['DataAccessLabels']['properties']['namespaces']['description']
  • root['schemas']['DataTable']['properties']['updateSource']
  • root['schemas']['DetectionWithSamples']['description']
  • root['schemas']['DetectionWithSamples']['properties']['detection']['description']
  • root['schemas']['DetectionWithSamples']['properties']['nestedDetections']['description']
  • root['schemas']['Dhcp']['description']
  • root['schemas']['Dhcp']['properties']['clientIdentifierString']
  • root['schemas']['Dhcp']['properties']['chaddr']['description']
  • root['schemas']['Dhcp']['properties']['ciaddr']['description']
  • root['schemas']['Dhcp']['properties']['clientHostname']['description']
  • root['schemas']['Dhcp']['properties']['clientIdentifier']['description']
  • root['schemas']['Dhcp']['properties']['file']['description']
  • root['schemas']['Dhcp']['properties']['flags']['description']
  • root['schemas']['Dhcp']['properties']['giaddr']['description']
  • root['schemas']['Dhcp']['properties']['hlen']['description']
  • root['schemas']['Dhcp']['properties']['hops']['description']
  • root['schemas']['Dhcp']['properties']['htype']['description']
  • root['schemas']['Dhcp']['properties']['leaseTimeSeconds']['description']
  • root['schemas']['Dhcp']['properties']['opcode']['description']
  • root['schemas']['Dhcp']['properties']['options']['description']
  • root['schemas']['Dhcp']['properties']['requestedAddress']['description']
  • root['schemas']['Dhcp']['properties']['seconds']['description']
  • root['schemas']['Dhcp']['properties']['siaddr']['description']
  • root['schemas']['Dhcp']['properties']['sname']['description']
  • root['schemas']['Dhcp']['properties']['transactionId']['description']
  • root['schemas']['Dhcp']['properties']['type']['description']
  • root['schemas']['Dhcp']['properties']['yiaddr']['description']
  • root['schemas']['Dns']['description']
  • root['schemas']['Dns']['properties']['additional']['description']
  • root['schemas']['Dns']['properties']['answers']['description']
  • root['schemas']['Dns']['properties']['authoritative']['description']
  • root['schemas']['Dns']['properties']['authority']['description']
  • root['schemas']['Dns']['properties']['id']['description']
  • root['schemas']['Dns']['properties']['opcode']['description']
  • root['schemas']['Dns']['properties']['questions']['description']
  • root['schemas']['Dns']['properties']['recursionAvailable']['description']
  • root['schemas']['Dns']['properties']['recursionDesired']['description']
  • root['schemas']['Dns']['properties']['response']['description']
  • root['schemas']['Dns']['properties']['responseCode']['description']
  • root['schemas']['Dns']['properties']['truncated']['description']
  • root['schemas']['Domain']['description']
  • root['schemas']['Domain']['properties']['admin']['description']
  • root['schemas']['Domain']['properties']['auditUpdateTime']['description']
  • root['schemas']['Domain']['properties']['billing']['description']
  • root['schemas']['Domain']['properties']['categories']['description']
  • root['schemas']['Domain']['properties']['contactEmail']['description']
  • root['schemas']['Domain']['properties']['creationTime']['description']
  • root['schemas']['Domain']['properties']['expirationTime']['description']
  • root['schemas']['Domain']['properties']['favicon']['description']
  • root['schemas']['Domain']['properties']['firstSeenTime']['description']
  • root['schemas']['Domain']['properties']['ianaRegistrarId']['description']
  • root['schemas']['Domain']['properties']['jarm']['description']
  • root['schemas']['Domain']['properties']['lastDnsRecords']['description']
  • root['schemas']['Domain']['properties']['lastDnsRecordsTime']['description']
  • root['schemas']['Domain']['properties']['lastHttpsCertificate']['description']
  • root['schemas']['Domain']['properties']['lastHttpsCertificateTime']['description']
  • root['schemas']['Domain']['properties']['lastSeenTime']['description']
  • root['schemas']['Domain']['properties']['name']['description']
  • root['schemas']['Domain']['properties']['nameServer']['description']
  • root['schemas']['Domain']['properties']['popularityRanks']['description']
  • root['schemas']['Domain']['properties']['prevalence']['description']
  • root['schemas']['Domain']['properties']['privateRegistration']['description']
  • root['schemas']['Domain']['properties']['registrant']['description']
  • root['schemas']['Domain']['properties']['registrar']['description']
  • root['schemas']['Domain']['properties']['registryDataRawText']['description']
  • root['schemas']['Domain']['properties']['status']['description']
  • root['schemas']['Domain']['properties']['tags']['description']
  • root['schemas']['Domain']['properties']['tech']['description']
  • root['schemas']['Domain']['properties']['updateTime']['description']
  • root['schemas']['Domain']['properties']['whoisRecordRawText']['description']
  • root['schemas']['Domain']['properties']['whoisServer']['description']
  • root['schemas']['Domain']['properties']['whoisTime']['description']
  • root['schemas']['Domain']['properties']['zone']['description']
  • root['schemas']['DoubleSequence']['description']
  • root['schemas']['DoubleSequence']['properties']['doubleVals']['description']
  • root['schemas']['EC']['description']
  • root['schemas']['EC']['properties']['oid']['description']
  • root['schemas']['EC']['properties']['pub']['description']
  • root['schemas']['Element']['description']
  • root['schemas']['Element']['properties']['association']['description']
  • root['schemas']['Element']['properties']['label']['description']
  • root['schemas']['Element']['properties']['references']['description']
  • root['schemas']['Element']['properties']['referencesSampled']['description']
  • root['schemas']['Email']['description']
  • root['schemas']['Email']['properties']['bcc']['description']
  • root['schemas']['Email']['properties']['bounceAddress']['description']
  • root['schemas']['Email']['properties']['cc']['description']
  • root['schemas']['Email']['properties']['from']['description']
  • root['schemas']['Email']['properties']['mailId']['description']
  • root['schemas']['Email']['properties']['replyTo']['description']
  • root['schemas']['Email']['properties']['subject']['description']
  • root['schemas']['Email']['properties']['to']['description']
  • root['schemas']['EntityIndicator']['properties']['projectObjectId']['deprecated']
  • root['schemas']['EntityMetadata']['description']
  • root['schemas']['EntityMetadata']['properties']['collectedTimestamp']['description']
  • root['schemas']['EntityMetadata']['properties']['creationTimestamp']['description']
  • root['schemas']['EntityMetadata']['properties']['description']['description']
  • root['schemas']['EntityMetadata']['properties']['entityType']['description']
  • root['schemas']['EntityMetadata']['properties']['eventMetadata']['description']
  • root['schemas']['EntityMetadata']['properties']['extracted']['description']
  • root['schemas']['EntityMetadata']['properties']['feed']['description']
  • root['schemas']['EntityMetadata']['properties']['interval']['description']
  • root['schemas']['EntityMetadata']['properties']['productEntityId']['description']
  • root['schemas']['EntityMetadata']['properties']['productName']['description']
  • root['schemas']['EntityMetadata']['properties']['productVersion']['description']
  • root['schemas']['EntityMetadata']['properties']['sourceLabels']['description']
  • root['schemas']['EntityMetadata']['properties']['sourceType']['description']
  • root['schemas']['EntityMetadata']['properties']['structuredFields']['description']
  • root['schemas']['EntityMetadata']['properties']['threat']['description']
  • root['schemas']['EntityMetadata']['properties']['vendorName']['description']
  • root['schemas']['EntityRisk']['description']
  • root['schemas']['EntityRisk']['properties']['DEPRECATEDRiskScore']['description']
  • root['schemas']['EntityRisk']['properties']['detailUri']['description']
  • root['schemas']['EntityRisk']['properties']['detectionsCount']['description']
  • root['schemas']['EntityRisk']['properties']['firstDetectionTime']['description']
  • root['schemas']['EntityRisk']['properties']['lastDetectionTime']['description']
  • root['schemas']['EntityRisk']['properties']['lastResetTime']['description']
  • root['schemas']['EntityRisk']['properties']['normalizedRiskScore']['description']
  • root['schemas']['EntityRisk']['properties']['rawRiskDelta']['description']
  • root['schemas']['EntityRisk']['properties']['riskDelta']['description']
  • root['schemas']['EntityRisk']['properties']['riskScore']['description']
  • root['schemas']['EntityRisk']['properties']['riskVersion']['description']
  • root['schemas']['EntityRisk']['properties']['riskWindow']['description']
  • root['schemas']['EntityRisk']['properties']['riskWindowSize']['description']
  • root['schemas']['EventCountTimelineBucket']['properties']['baselineTimedEntityCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['entityChangedCount']
  • root['schemas']['EventCountTimelineBucket']['properties']['filteredTimedEntityCount']
  • root['schemas']['ExifInfo']['description']
  • root['schemas']['ExifInfo']['properties']['company']['description']
  • root['schemas']['ExifInfo']['properties']['compilationTime']['description']
  • root['schemas']['ExifInfo']['properties']['entryPoint']['description']
  • root['schemas']['ExifInfo']['properties']['fileDescription']['description']
  • root['schemas']['ExifInfo']['properties']['originalFile']['description']
  • root['schemas']['ExifInfo']['properties']['product']['description']
  • root['schemas']['Extension']['description']
  • root['schemas']['Extension']['properties']['authorityKeyId']['description']
  • root['schemas']['Extension']['properties']['ca']['description']
  • root['schemas']['Extension']['properties']['caInfoAccess']['description']
  • root['schemas']['Extension']['properties']['certTemplateNameDc']['description']
  • root['schemas']['Extension']['properties']['certificatePolicies']['description']
  • root['schemas']['Extension']['properties']['crlDistributionPoints']['description']
  • root['schemas']['Extension']['properties']['extendedKeyUsage']['description']
  • root['schemas']['Extension']['properties']['keyUsage']['description']
  • root['schemas']['Extension']['properties']['netscapeCertComment']['description']
  • root['schemas']['Extension']['properties']['netscapeCertificate']['description']
  • root['schemas']['Extension']['properties']['oldAuthorityKeyId']['description']
  • root['schemas']['Extension']['properties']['peLogotype']['description']
  • root['schemas']['Extension']['properties']['subjectAlternativeName']['description']
  • root['schemas']['Extension']['properties']['subjectKeyId']['description']
  • root['schemas']['Extensions']['description']
  • root['schemas']['Extensions']['properties']['auth']['description']
  • root['schemas']['Extensions']['properties']['vulns']['description']
  • root['schemas']['Favicon']['description']
  • root['schemas']['Favicon']['properties']['dhash']['description']
  • root['schemas']['Favicon']['properties']['rawMd5']['description']
  • root['schemas']['FeedDetails']['properties']['azureBlobStoreV2Settings']
  • root['schemas']['FeedDetails']['properties']['trellixHxAlertsSettings']
  • root['schemas']['FeedDetails']['properties']['trellixHxHostsSettings']
  • root['schemas']['FileMetadata']['description']
  • root['schemas']['FileMetadata']['properties']['pe']['description']
  • root['schemas']['FileMetadataCodesign']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['compilationTime']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['format']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['id']['description']
  • root['schemas']['FileMetadataCodesign']['properties']['teamId']['description']
  • root['schemas']['FileMetadataImports']['description']
  • root['schemas']['FileMetadataImports']['properties']['functions']['description']
  • root['schemas']['FileMetadataImports']['properties']['library']['description']
  • root['schemas']['FileMetadataPE']['description']
  • root['schemas']['FileMetadataPE']['properties']['compilationExiftoolTime']['description']
  • root['schemas']['FileMetadataPE']['properties']['compilationTime']['description']
  • root['schemas']['FileMetadataPE']['properties']['entryPoint']['description']
  • root['schemas']['FileMetadataPE']['properties']['entryPointExiftool']['description']
  • root['schemas']['FileMetadataPE']['properties']['imphash']['description']
  • root['schemas']['FileMetadataPE']['properties']['imports']['description']
  • root['schemas']['FileMetadataPE']['properties']['resource']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesLanguageCount']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesLanguageCountStr']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesTypeCount']['description']
  • root['schemas']['FileMetadataPE']['properties']['resourcesTypeCountStr']['description']
  • root['schemas']['FileMetadataPE']['properties']['section']['description']
  • root['schemas']['FileMetadataPE']['properties']['signatureInfo']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['entropy']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['fileType']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['filetypeMagic']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['languageCode']['description']
  • root['schemas']['FileMetadataPeResourceInfo']['properties']['sha256Hex']['description']
  • root['schemas']['FileMetadataSection']['description']
  • root['schemas']['FileMetadataSection']['properties']['entropy']['description']
  • root['schemas']['FileMetadataSection']['properties']['md5Hex']['description']
  • root['schemas']['FileMetadataSection']['properties']['name']['description']
  • root['schemas']['FileMetadataSection']['properties']['rawSizeBytes']['description']
  • root['schemas']['FileMetadataSection']['properties']['virtualSizeBytes']['description']
  • root['schemas']['FileMetadataSignatureInfo']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['signer']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['signers']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['verificationMessage']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['verified']['description']
  • root['schemas']['FileMetadataSignatureInfo']['properties']['x509']['description']
  • root['schemas']['FindingVariable']['description']
  • root['schemas']['FindingVariable']['properties']['boolSeq']['description']
  • root['schemas']['FindingVariable']['properties']['boolVal']['description']
  • root['schemas']['FindingVariable']['properties']['bytesSeq']['description']
  • root['schemas']['FindingVariable']['properties']['bytesVal']['description']
  • root['schemas']['FindingVariable']['properties']['doubleSeq']['description']
  • root['schemas']['FindingVariable']['properties']['doubleVal']['description']
  • root['schemas']['FindingVariable']['properties']['int64Seq']['description']
  • root['schemas']['FindingVariable']['properties']['int64Val']['description']
  • root['schemas']['FindingVariable']['properties']['nullVal']['description']
  • root['schemas']['FindingVariable']['properties']['sourcePath']['description']
  • root['schemas']['FindingVariable']['properties']['stringSeq']['description']
  • root['schemas']['FindingVariable']['properties']['stringVal']['description']
  • root['schemas']['FindingVariable']['properties']['type']['description']
  • root['schemas']['FindingVariable']['properties']['uint64Seq']['description']
  • root['schemas']['FindingVariable']['properties']['uint64Val']['description']
  • root['schemas']['FindingVariable']['properties']['value']['description']
  • root['schemas']['Ftp']['description']
  • root['schemas']['Ftp']['properties']['command']['description']
  • root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStatsColumnData']['properties']['columnMetadata']
  • root['schemas']['Group']['description']
  • root['schemas']['Group']['properties']['attribute']['description']
  • root['schemas']['Group']['properties']['creationTime']['description']
  • root['schemas']['Group']['properties']['emailAddresses']['description']
  • root['schemas']['Group']['properties']['groupDisplayName']['description']
  • root['schemas']['Group']['properties']['productObjectId']['description']
  • root['schemas']['Group']['properties']['windowsSid']['description']
  • root['schemas']['Hardware']['description']
  • root['schemas']['Hardware']['properties']['cpuClockSpeed']['description']
  • root['schemas']['Hardware']['properties']['cpuMaxClockSpeed']['description']
  • root['schemas']['Hardware']['properties']['cpuModel']['description']
  • root['schemas']['Hardware']['properties']['cpuNumberCores']['description']
  • root['schemas']['Hardware']['properties']['cpuPlatform']['description']
  • root['schemas']['Hardware']['properties']['manufacturer']['description']
  • root['schemas']['Hardware']['properties']['model']['description']
  • root['schemas']['Hardware']['properties']['ram']['description']
  • root['schemas']['Hardware']['properties']['serialNumber']['description']
  • root['schemas']['Http']['description']
  • root['schemas']['Http']['properties']['method']['description']
  • root['schemas']['Http']['properties']['parsedUserAgent']['description']
  • root['schemas']['Http']['properties']['referralUrl']['description']
  • root['schemas']['Http']['properties']['responseCode']['description']
  • root['schemas']['Http']['properties']['userAgent']['description']
  • root['schemas']['IDM']['properties']['assetEnrichmentInfo']
  • root['schemas']['IDM']['properties']['geoipEnrichmentInfo']
  • root['schemas']['IDM']['properties']['processEnrichmentInfo']
  • root['schemas']['IDM']['properties']['userEnrichmentInfo']
  • root['schemas']['IDM']['properties']['vtFilemetadataEnrichmentInfo']
  • root['schemas']['Id']['description']
  • root['schemas']['Id']['properties']['id']['description']
  • root['schemas']['Id']['properties']['namespace']['description']
  • root['schemas']['Id']['properties']['stringId']['description']
  • root['schemas']['Int64Sequence']['description']
  • root['schemas']['Int64Sequence']['properties']['int64Vals']['description']
  • root['schemas']['Investigation']['description']
  • root['schemas']['Investigation']['properties']['comments']['description']
  • root['schemas']['Investigation']['properties']['priority']['description']
  • root['schemas']['Investigation']['properties']['reason']['description']
  • root['schemas']['Investigation']['properties']['reputation']['description']
  • root['schemas']['Investigation']['properties']['riskScore']['description']
  • root['schemas']['Investigation']['properties']['rootCause']['description']
  • root['schemas']['Investigation']['properties']['severityScore']['description']
  • root['schemas']['Investigation']['properties']['status']['description']
  • root['schemas']['Investigation']['properties']['verdict']['description']
  • root['schemas']['IoCStats']['description']
  • root['schemas']['IoCStats']['properties']['benignCount']['description']
  • root['schemas']['IoCStats']['properties']['firstLevelSource']['description']
  • root['schemas']['IoCStats']['properties']['iocStatsType']['description']
  • root['schemas']['IoCStats']['properties']['maliciousCount']['description']
  • root['schemas']['IoCStats']['properties']['quality']['description']
  • root['schemas']['IoCStats']['properties']['responseCount']['description']
  • root['schemas']['IoCStats']['properties']['secondLevelSource']['description']
  • root['schemas']['IoCStats']['properties']['sourceCount']['description']
  • root['schemas']['IocAssociation']['properties']['associatedActors']['deprecated']
  • root['schemas']['IocAssociation']['properties']['countryCode']['deprecated']
  • root['schemas']['Label']['description']
  • root['schemas']['Label']['properties']['key']['description']
  • root['schemas']['Label']['properties']['rbacEnabled']['description']
  • root['schemas']['Label']['properties']['source']['description']
  • root['schemas']['Label']['properties']['value']['description']
  • root['schemas']['LegacyFetchUdmSearchCsvRequest']['properties']['skipSafeDownload']
  • root['schemas']['LegacyFetchUdmSearchCsvResponse']['properties']['failureCsvFieldValidations']
  • root['schemas']['LegacyFetchUdmSearchViewRequest']['properties']['federationMetadata']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['pageToken']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageStartTime']
  • root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['nextPageToken']
  • root['schemas']['Location']['description']
  • root['schemas']['Location']['properties']['city']['description']
  • root['schemas']['Location']['properties']['countryOrRegion']['description']
  • root['schemas']['Location']['properties']['deskName']['description']
  • root['schemas']['Location']['properties']['floorName']['description']
  • root['schemas']['Location']['properties']['name']['description']
  • root['schemas']['Location']['properties']['regionCoordinates']['description']
  • root['schemas']['Location']['properties']['regionLatitude']['description']
  • root['schemas']['Location']['properties']['regionLongitude']['description']
  • root['schemas']['Location']['properties']['state']['description']
  • root['schemas']['LogType']['properties']['customLogTypeLabel']
  • root['schemas']['LogType']['properties']['isCustom']
  • root['schemas']['LogType']['properties']['productSource']
  • root['schemas']['Measure']['description']
  • root['schemas']['Measure']['properties']['aggregateFunction']['description']
  • root['schemas']['Measure']['properties']['value']['description']
  • root['schemas']['Metadata']['description']
  • root['schemas']['Metadata']['properties']['baseLabels']['description']
  • root['schemas']['Metadata']['properties']['collectedTimestamp']['description']
  • root['schemas']['Metadata']['properties']['description']['description']
  • root['schemas']['Metadata']['properties']['enrichmentLabels']['description']
  • root['schemas']['Metadata']['properties']['enrichmentState']['description']
  • root['schemas']['Metadata']['properties']['eventTimestamp']['description']
  • root['schemas']['Metadata']['properties']['eventType']['description']
  • root['schemas']['Metadata']['properties']['id']['description']
  • root['schemas']['Metadata']['properties']['ingestedTimestamp']['description']
  • root['schemas']['Metadata']['properties']['ingestionLabels']['description']
  • root['schemas']['Metadata']['properties']['logType']['description']
  • root['schemas']['Metadata']['properties']['productDeploymentId']['description']
  • root['schemas']['Metadata']['properties']['productEventType']['description']
  • root['schemas']['Metadata']['properties']['productLogId']['description']
  • root['schemas']['Metadata']['properties']['productName']['description']
  • root['schemas']['Metadata']['properties']['productVersion']['description']
  • root['schemas']['Metadata']['properties']['structuredFields']['description']
  • root['schemas']['Metadata']['properties']['tags']['description']
  • root['schemas']['Metadata']['properties']['urlBackToProduct']['description']
  • root['schemas']['Metadata']['properties']['vendorName']['description']
  • root['schemas']['Metric']['description']
  • root['schemas']['Metric']['properties']['dimensions']['description']
  • root['schemas']['Metric']['properties']['exportWindow']['description']
  • root['schemas']['Metric']['properties']['firstSeen']['description']
  • root['schemas']['Metric']['properties']['lastSeen']['description']
  • root['schemas']['Metric']['properties']['metricName']['description']
  • root['schemas']['Metric']['properties']['sumMeasure']['description']
  • root['schemas']['Metric']['properties']['totalEvents']['description']
  • root['schemas']['Network']['description']
  • root['schemas']['Network']['properties']['applicationProtocol']['description']
  • root['schemas']['Network']['properties']['applicationProtocolVersion']['description']
  • root['schemas']['Network']['properties']['asn']['description']
  • root['schemas']['Network']['properties']['carrierName']['description']
  • root['schemas']['Network']['properties']['communityId']['description']
  • root['schemas']['Network']['properties']['dhcp']['description']
  • root['schemas']['Network']['properties']['direction']['description']
  • root['schemas']['Network']['properties']['dns']['description']
  • root['schemas']['Network']['properties']['dnsDomain']['description']
  • root['schemas']['Network']['properties']['email']['description']
  • root['schemas']['Network']['properties']['ftp']['description']
  • root['schemas']['Network']['properties']['http']['description']
  • root['schemas']['Network']['properties']['ipProtocol']['description']
  • root['schemas']['Network']['properties']['ipSubnetRange']['description']
  • root['schemas']['Network']['properties']['organizationName']['description']
  • root['schemas']['Network']['properties']['parentSessionId']['description']
  • root['schemas']['Network']['properties']['receivedBytes']['description']
  • root['schemas']['Network']['properties']['receivedPackets']['description']
  • root['schemas']['Network']['properties']['sentBytes']['description']
  • root['schemas']['Network']['properties']['sentPackets']['description']
  • root['schemas']['Network']['properties']['sessionDuration']['description']
  • root['schemas']['Network']['properties']['sessionId']['description']
  • root['schemas']['Network']['properties']['smtp']['description']
  • root['schemas']['Network']['properties']['tls']['description']
  • root['schemas']['Noun']['description']
  • root['schemas']['Noun']['properties']['administrativeDomain']['description']
  • root['schemas']['Noun']['properties']['application']['description']
  • root['schemas']['Noun']['properties']['artifact']['description']
  • root['schemas']['Noun']['properties']['asset']['description']
  • root['schemas']['Noun']['properties']['assetId']['description']
  • root['schemas']['Noun']['properties']['cloud']['description']
  • root['schemas']['Noun']['properties']['domain']['description']
  • root['schemas']['Noun']['properties']['email']['description']
  • root['schemas']['Noun']['properties']['file']['description']
  • root['schemas']['Noun']['properties']['group']['description']
  • root['schemas']['Noun']['properties']['hostname']['description']
  • root['schemas']['Noun']['properties']['investigation']['description']
  • root['schemas']['Noun']['properties']['ip']['description']
  • root['schemas']['Noun']['properties']['ipGeoArtifact']['description']
  • root['schemas']['Noun']['properties']['ipLocation']['description']
  • root['schemas']['Noun']['properties']['labels']['description']
  • root['schemas']['Noun']['properties']['location']['description']
  • root['schemas']['Noun']['properties']['mac']['description']
  • root['schemas']['Noun']['properties']['namespace']['description']
  • root['schemas']['Noun']['properties']['natIp']['description']
  • root['schemas']['Noun']['properties']['natPort']['description']
  • root['schemas']['Noun']['properties']['network']['description']
  • root['schemas']['Noun']['properties']['objectReference']['description']
  • root['schemas']['Noun']['properties']['platform']['description']
  • root['schemas']['Noun']['properties']['platformPatchLevel']['description']
  • root['schemas']['Noun']['properties']['platformVersion']['description']
  • root['schemas']['Noun']['properties']['port']['description']
  • root['schemas']['Noun']['properties']['process']['description']
  • root['schemas']['Noun']['properties']['processAncestors']['description']
  • root['schemas']['Noun']['properties']['registry']['description']
  • root['schemas']['Noun']['properties']['resource']['description']
  • root['schemas']['Noun']['properties']['resourceAncestors']['description']
  • root['schemas']['Noun']['properties']['securityResult']['description']
  • root['schemas']['Noun']['properties']['url']['description']
  • root['schemas']['Noun']['properties']['urlMetadata']['description']
  • root['schemas']['Noun']['properties']['user']['description']
  • root['schemas']['Noun']['properties']['userManagementChain']['description']
  • root['schemas']['NtfsFileMetadata']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['changeTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameAccessTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameChangeTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameCreateTime']['description']
  • root['schemas']['NtfsFileMetadata']['properties']['filenameModifyTime']['description']
  • root['schemas']['Option']['description']
  • root['schemas']['Option']['properties']['code']['description']
  • root['schemas']['Option']['properties']['data']['description']
  • root['schemas']['PDFInfo']['description']
  • root['schemas']['PDFInfo']['properties']['acroform']['description']
  • root['schemas']['PDFInfo']['properties']['autoaction']['description']
  • root['schemas']['PDFInfo']['properties']['embeddedFile']['description']
  • root['schemas']['PDFInfo']['properties']['encrypted']['description']
  • root['schemas']['PDFInfo']['properties']['endobjCount']['description']
  • root['schemas']['PDFInfo']['properties']['endstreamCount']['description']
  • root['schemas']['PDFInfo']['properties']['flash']['description']
  • root['schemas']['PDFInfo']['properties']['header']['description']
  • root['schemas']['PDFInfo']['properties']['javascript']['description']
  • root['schemas']['PDFInfo']['properties']['jbig2Compression']['description']
  • root['schemas']['PDFInfo']['properties']['js']['description']
  • root['schemas']['PDFInfo']['properties']['launchActionCount']['description']
  • root['schemas']['PDFInfo']['properties']['objCount']['description']
  • root['schemas']['PDFInfo']['properties']['objectStreamCount']['description']
  • root['schemas']['PDFInfo']['properties']['openaction']['description']
  • root['schemas']['PDFInfo']['properties']['pageCount']['description']
  • root['schemas']['PDFInfo']['properties']['startxref']['description']
  • root['schemas']['PDFInfo']['properties']['streamCount']['description']
  • root['schemas']['PDFInfo']['properties']['suspiciousColors']['description']
  • root['schemas']['PDFInfo']['properties']['trailer']['description']
  • root['schemas']['PDFInfo']['properties']['xfa']['description']
  • root['schemas']['PDFInfo']['properties']['xref']['description']
  • root['schemas']['ParserExtension']['properties']['dynamicParsing']
  • root['schemas']['PeFileMetadata']['description']
  • root['schemas']['PeFileMetadata']['properties']['importHash']['description']
  • root['schemas']['Permission']['description']
  • root['schemas']['Permission']['properties']['description']['description']
  • root['schemas']['Permission']['properties']['name']['description']
  • root['schemas']['Permission']['properties']['type']['description']
  • root['schemas']['PlatformSoftware']['description']
  • root['schemas']['PlatformSoftware']['properties']['platform']['description']
  • root['schemas']['PlatformSoftware']['properties']['platformPatchLevel']['description']
  • root['schemas']['PlatformSoftware']['properties']['platformVersion']['description']
  • root['schemas']['PopularityRank']['description']
  • root['schemas']['PopularityRank']['properties']['giver']['description']
  • root['schemas']['PopularityRank']['properties']['ingestionTime']['description']
  • root['schemas']['PopularityRank']['properties']['rank']['description']
  • root['schemas']['Prevalence']['description']
  • root['schemas']['Prevalence']['properties']['dayCount']['description']
  • root['schemas']['Prevalence']['properties']['dayMax']['description']
  • root['schemas']['Prevalence']['properties']['dayMaxSubDomains']['description']
  • root['schemas']['Prevalence']['properties']['rollingMax']['description']
  • root['schemas']['Prevalence']['properties']['rollingMaxSubDomains']['description']
  • root['schemas']['Process']['description']
  • root['schemas']['Process']['properties']['accessMask']['description']
  • root['schemas']['Process']['properties']['commandLine']['description']
  • root['schemas']['Process']['properties']['commandLineHistory']['description']
  • root['schemas']['Process']['properties']['egid']['description']
  • root['schemas']['Process']['properties']['euid']['description']
  • root['schemas']['Process']['properties']['file']['description']
  • root['schemas']['Process']['properties']['integrityLevelRid']['description']
  • root['schemas']['Process']['properties']['parentPid']['description']
  • root['schemas']['Process']['properties']['parentProcess']['description']
  • root['schemas']['Process']['properties']['pgid']['description']
  • root['schemas']['Process']['properties']['pid']['description']
  • root['schemas']['Process']['properties']['productSpecificParentProcessId']['description']
  • root['schemas']['Process']['properties']['productSpecificProcessId']['description']
  • root['schemas']['Process']['properties']['rgid']['description']
  • root['schemas']['Process']['properties']['ruid']['description']
  • root['schemas']['Process']['properties']['sessionLeaderPid']['description']
  • root['schemas']['Process']['properties']['tokenElevationType']['description']
  • root['schemas']['Process']['properties']['tty']['description']
  • root['schemas']['ProviderMLVerdict']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['benignCount']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['confidenceScore']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['maliciousCount']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['mandiantSources']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['sourceProvider']['description']
  • root['schemas']['ProviderMLVerdict']['properties']['thirdPartySources']['description']
  • root['schemas']['PublicKey']['description']
  • root['schemas']['PublicKey']['properties']['algorithm']['description']
  • root['schemas']['PublicKey']['properties']['rsa']['description']
  • root['schemas']['Question']['description']
  • root['schemas']['Question']['properties']['class']['description']
  • root['schemas']['Question']['properties']['name']['description']
  • root['schemas']['Question']['properties']['prevalence']['description']
  • root['schemas']['Question']['properties']['type']['description']
  • root['schemas']['RSA']['description']
  • root['schemas']['RSA']['properties']['exponent']['description']
  • root['schemas']['RSA']['properties']['keySize']['description']
  • root['schemas']['RSA']['properties']['modulus']['description']
  • root['schemas']['Reference']['description']
  • root['schemas']['Reference']['properties']['entity']['description']
  • root['schemas']['Reference']['properties']['event']['description']
  • root['schemas']['Reference']['properties']['id']['description']
  • root['schemas']['Registry']['description']
  • root['schemas']['Registry']['properties']['registryKey']['description']
  • root['schemas']['Registry']['properties']['registryValueData']['description']
  • root['schemas']['Registry']['properties']['registryValueName']['description']
  • root['schemas']['Registry']['properties']['registryValueType']['description']
  • root['schemas']['Relation']['description']
  • root['schemas']['Relation']['properties']['direction']['description']
  • root['schemas']['Relation']['properties']['entity']['description']
  • root['schemas']['Relation']['properties']['entityLabel']['description']
  • root['schemas']['Relation']['properties']['entityType']['description']
  • root['schemas']['Relation']['properties']['relationship']['description']
  • root['schemas']['Relation']['properties']['uid']['description']
  • root['schemas']['Resource']['description']
  • root['schemas']['Resource']['properties']['attribute']['description']
  • root['schemas']['Resource']['properties']['id']['description']
  • root['schemas']['Resource']['properties']['name']['description']
  • root['schemas']['Resource']['properties']['parent']['description']
  • root['schemas']['Resource']['properties']['productObjectId']['description']
  • root['schemas']['Resource']['properties']['resourceSubtype']['description']
  • root['schemas']['Resource']['properties']['resourceType']['description']
  • root['schemas']['Resource']['properties']['type']['description']
  • root['schemas']['ResourceRecord']['description']
  • root['schemas']['ResourceRecord']['properties']['binaryData']['description']
  • root['schemas']['ResourceRecord']['properties']['class']['description']
  • root['schemas']['ResourceRecord']['properties']['data']['description']
  • root['schemas']['ResourceRecord']['properties']['name']['description']
  • root['schemas']['ResourceRecord']['properties']['ttl']['description']
  • root['schemas']['ResourceRecord']['properties']['type']['description']
  • root['schemas']['ResponsePlatformInfo']['description']
  • root['schemas']['ResponsePlatformInfo']['properties']['alertId']['description']
  • root['schemas']['ResponsePlatformInfo']['properties']['responsePlatformType']['description']
  • root['schemas']['RiskDelta']['description']
  • root['schemas']['RiskDelta']['properties']['previousRangeEndTime']['description']
  • root['schemas']['RiskDelta']['properties']['previousRiskScore']['description']
  • root['schemas']['RiskDelta']['properties']['riskScoreDelta']['description']
  • root['schemas']['RiskDelta']['properties']['riskScoreNumericDelta']['description']
  • root['schemas']['Role']['description']
  • root['schemas']['Role']['properties']['description']['description']
  • root['schemas']['Role']['properties']['name']['description']
  • root['schemas']['Role']['properties']['type']['description']
  • root['schemas']['SSLCertificate']['description']
  • root['schemas']['SSLCertificate']['properties']['certExtensions']['description']
  • root['schemas']['SSLCertificate']['properties']['certSignature']['description']
  • root['schemas']['SSLCertificate']['properties']['ec']['description']
  • root['schemas']['SSLCertificate']['properties']['extension']['description']
  • root['schemas']['SSLCertificate']['properties']['firstSeenTime']['description']
  • root['schemas']['SSLCertificate']['properties']['issuer']['description']
  • root['schemas']['SSLCertificate']['properties']['publicKey']['description']
  • root['schemas']['SSLCertificate']['properties']['serialNumber']['description']
  • root['schemas']['SSLCertificate']['properties']['signatureAlgorithm']['description']
  • root['schemas']['SSLCertificate']['properties']['size']['description']
  • root['schemas']['SSLCertificate']['properties']['subject']['description']
  • root['schemas']['SSLCertificate']['properties']['thumbprint']['description']
  • root['schemas']['SSLCertificate']['properties']['thumbprintSha256']['description']
  • root['schemas']['SSLCertificate']['properties']['validity']['description']
  • root['schemas']['SSLCertificate']['properties']['version']['description']
  • root['schemas']['SecurityResult']['description']
  • root['schemas']['SecurityResult']['properties']['detectionDepth']
  • root['schemas']['SecurityResult']['properties']['about']['description']
  • root['schemas']['SecurityResult']['properties']['action']['description']
  • root['schemas']['SecurityResult']['properties']['actionDetails']['description']
  • root['schemas']['SecurityResult']['properties']['alertState']['description']
  • root['schemas']['SecurityResult']['properties']['analyticsMetadata']['description']
  • root['schemas']['SecurityResult']['properties']['associations']['description']
  • root['schemas']['SecurityResult']['properties']['attackDetails']['description']
  • root['schemas']['SecurityResult']['properties']['campaigns']['description']
  • root['schemas']['SecurityResult']['properties']['category']['description']
  • root['schemas']['SecurityResult']['properties']['categoryDetails']['description']
  • root['schemas']['SecurityResult']['properties']['confidence']['description']
  • root['schemas']['SecurityResult']['properties']['confidenceDetails']['description']
  • root['schemas']['SecurityResult']['properties']['confidenceScore']['description']
  • root['schemas']['SecurityResult']['properties']['description']['description']
  • root['schemas']['SecurityResult']['properties']['detectionFields']['description']
  • root['schemas']['SecurityResult']['properties']['firstDiscoveredTime']['description']
  • root['schemas']['SecurityResult']['properties']['lastDiscoveredTime']['description']
  • root['schemas']['SecurityResult']['properties']['lastUpdatedTime']['description']
  • root['schemas']['SecurityResult']['properties']['outcomes']['description']
  • root['schemas']['SecurityResult']['properties']['priority']['description']
  • root['schemas']['SecurityResult']['properties']['priorityDetails']['description']
  • root['schemas']['SecurityResult']['properties']['reports']['description']
  • root['schemas']['SecurityResult']['properties']['riskScore']['description']
  • root['schemas']['SecurityResult']['properties']['ruleAuthor']['description']
  • root['schemas']['SecurityResult']['properties']['ruleId']['description']
  • root['schemas']['SecurityResult']['properties']['ruleLabels']['description']
  • root['schemas']['SecurityResult']['properties']['ruleName']['description']
  • root['schemas']['SecurityResult']['properties']['ruleSet']['description']
  • root['schemas']['SecurityResult']['properties']['ruleSetDisplayName']['description']
  • root['schemas']['SecurityResult']['properties']['ruleType']['description']
  • root['schemas']['SecurityResult']['properties']['ruleVersion']['description']
  • root['schemas']['SecurityResult']['properties']['rulesetCategoryDisplayName']['description']
  • root['schemas']['SecurityResult']['properties']['severity']['description']
  • root['schemas']['SecurityResult']['properties']['severityDetails']['description']
  • root['schemas']['SecurityResult']['properties']['summary']['description']
  • root['schemas']['SecurityResult']['properties']['threatFeedName']['description']
  • root['schemas']['SecurityResult']['properties']['threatId']['description']
  • root['schemas']['SecurityResult']['properties']['threatIdNamespace']['description']
  • root['schemas']['SecurityResult']['properties']['threatName']['description']
  • root['schemas']['SecurityResult']['properties']['threatStatus']['description']
  • root['schemas']['SecurityResult']['properties']['threatVerdict']['description']
  • root['schemas']['SecurityResult']['properties']['urlBackToProduct']['description']
  • root['schemas']['SecurityResult']['properties']['variables']['description']
  • root['schemas']['SecurityResult']['properties']['verdict']['description']
  • root['schemas']['SecurityResult']['properties']['verdictInfo']['description']
  • root['schemas']['Series']['properties']['metricTrendConfig']
  • root['schemas']['Server']['description']
  • root['schemas']['Server']['properties']['certificate']['description']
  • root['schemas']['Server']['properties']['ja3s']['description']
  • root['schemas']['SignatureInfo']['description']
  • root['schemas']['SignatureInfo']['properties']['codesign']['description']
  • root['schemas']['SignatureInfo']['properties']['sigcheck']['description']
  • root['schemas']['SignerInfo']['description']
  • root['schemas']['SignerInfo']['properties']['certIssuer']['description']
  • root['schemas']['SignerInfo']['properties']['name']['description']
  • root['schemas']['SignerInfo']['properties']['status']['description']
  • root['schemas']['SignerInfo']['properties']['validUsage']['description']
  • root['schemas']['Smtp']['description']
  • root['schemas']['Smtp']['properties']['helo']['description']
  • root['schemas']['Smtp']['properties']['isTls']['description']
  • root['schemas']['Smtp']['properties']['isWebmail']['description']
  • root['schemas']['Smtp']['properties']['mailFrom']['description']
  • root['schemas']['Smtp']['properties']['messagePath']['description']
  • root['schemas']['Smtp']['properties']['rcptTo']['description']
  • root['schemas']['Smtp']['properties']['serverResponse']['description']
  • root['schemas']['SoarAlertMetadata']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['alertId']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['product']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceRule']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceSystem']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceSystemTicketId']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['sourceSystemUri']['description']
  • root['schemas']['SoarAlertMetadata']['properties']['vendor']['description']
  • root['schemas']['Software']['description']
  • root['schemas']['Software']['properties']['description']['description']
  • root['schemas']['Software']['properties']['name']['description']
  • root['schemas']['Software']['properties']['permissions']['description']
  • root['schemas']['Software']['properties']['vendorName']['description']
  • root['schemas']['Software']['properties']['version']['description']
  • root['schemas']['Source']['description']
  • root['schemas']['Source']['properties']['benignCount']['description']
  • root['schemas']['Source']['properties']['maliciousCount']['description']
  • root['schemas']['Source']['properties']['name']['description']
  • root['schemas']['Source']['properties']['quality']['description']
  • root['schemas']['Source']['properties']['responseCount']['description']
  • root['schemas']['Source']['properties']['sourceCount']['description']
  • root['schemas']['Source']['properties']['threatIntelligenceSources']['description']
  • root['schemas']['StringSequence']['description']
  • root['schemas']['StringSequence']['properties']['stringVals']['description']
  • root['schemas']['StringToInt64MapEntry']['properties']['key']['description']
  • root['schemas']['StringToInt64MapEntry']['properties']['value']['description']
  • root['schemas']['Subject']['description']
  • root['schemas']['Subject']['properties']['commonName']['description']
  • root['schemas']['Subject']['properties']['countryName']['description']
  • root['schemas']['Subject']['properties']['locality']['description']
  • root['schemas']['Subject']['properties']['organization']['description']
  • root['schemas']['Subject']['properties']['organizationalUnit']['description']
  • root['schemas']['Subject']['properties']['stateOrProvinceName']['description']
  • root['schemas']['Tactic']['description']
  • root['schemas']['Tactic']['properties']['id']['description']
  • root['schemas']['Tactic']['properties']['name']['description']
  • root['schemas']['Tags']['description']
  • root['schemas']['Tags']['properties']['dataTapConfigName']['description']
  • root['schemas']['Tags']['properties']['tenantId']['description']
  • root['schemas']['Technique']['description']
  • root['schemas']['Technique']['properties']['id']['description']
  • root['schemas']['Technique']['properties']['name']['description']
  • root['schemas']['Technique']['properties']['subtechniqueId']['description']
  • root['schemas']['Technique']['properties']['subtechniqueName']['description']
  • root['schemas']['TimeOff']['description']
  • root['schemas']['TimeOff']['properties']['description']['description']
  • root['schemas']['TimeOff']['properties']['interval']['description']
  • root['schemas']['Tls']['description']
  • root['schemas']['Tls']['properties']['cipher']['description']
  • root['schemas']['Tls']['properties']['client']['description']
  • root['schemas']['Tls']['properties']['curve']['description']
  • root['schemas']['Tls']['properties']['established']['description']
  • root['schemas']['Tls']['properties']['nextProtocol']['description']
  • root['schemas']['Tls']['properties']['resumed']['description']
  • root['schemas']['Tls']['properties']['server']['description']
  • root['schemas']['Tls']['properties']['version']['description']
  • root['schemas']['Tls']['properties']['versionProtocol']['description']
  • root['schemas']['Tracker']['description']
  • root['schemas']['Tracker']['properties']['id']['description']
  • root['schemas']['Tracker']['properties']['timestamp']['description']
  • root['schemas']['Tracker']['properties']['tracker']['description']
  • root['schemas']['Tracker']['properties']['url']['description']
  • root['schemas']['Tunnels']['description']
  • root['schemas']['Tunnels']['properties']['provider']['description']
  • root['schemas']['Tunnels']['properties']['type']['description']
  • root['schemas']['UDM']['description']
  • root['schemas']['UDM']['properties']['about']['description']
  • root['schemas']['UDM']['properties']['additional']['description']
  • root['schemas']['UDM']['properties']['extensions']['description']
  • root['schemas']['UDM']['properties']['extracted']['description']
  • root['schemas']['UDM']['properties']['intermediary']['description']
  • root['schemas']['UDM']['properties']['metadata']['description']
  • root['schemas']['UDM']['properties']['network']['description']
  • root['schemas']['UDM']['properties']['observer']['description']
  • root['schemas']['UDM']['properties']['principal']['description']
  • root['schemas']['UDM']['properties']['securityResult']['description']
  • root['schemas']['UDM']['properties']['src']['description']
  • root['schemas']['UDM']['properties']['target']['description']
  • root['schemas']['UdmEventInfo']['properties']['connectedComponentLabel']
  • root['schemas']['UdmEventInfo']['properties']['datatableRowInfo']
  • root['schemas']['UdmEventInfo']['properties']['tenantId']
  • root['schemas']['UdmEventList']['properties']['datatableInfo']
  • root['schemas']['Uint64Sequence']['description']
  • root['schemas']['Uint64Sequence']['properties']['uint64Vals']['description']
  • root['schemas']['Url']['description']
  • root['schemas']['Url']['properties']['categories']['description']
  • root['schemas']['Url']['properties']['favicon']['description']
  • root['schemas']['Url']['properties']['htmlMeta']['description']
  • root['schemas']['Url']['properties']['lastFinalUrl']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseCode']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseContentLength']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseContentSha256']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseCookies']['description']
  • root['schemas']['Url']['properties']['lastHttpResponseHeaders']['description']
  • root['schemas']['Url']['properties']['tags']['description']
  • root['schemas']['Url']['properties']['title']['description']
  • root['schemas']['Url']['properties']['trackers']['description']
  • root['schemas']['Url']['properties']['url']['description']
  • root['schemas']['User']['description']
  • root['schemas']['User']['properties']['accountExpirationTime']['description']
  • root['schemas']['User']['properties']['accountLockoutTime']['description']
  • root['schemas']['User']['properties']['accountType']['description']
  • root['schemas']['User']['properties']['attribute']['description']
  • root['schemas']['User']['properties']['companyName']['description']
  • root['schemas']['User']['properties']['department']['description']
  • root['schemas']['User']['properties']['emailAddresses']['description']
  • root['schemas']['User']['properties']['employeeId']['description']
  • root['schemas']['User']['properties']['firstName']['description']
  • root['schemas']['User']['properties']['firstSeenTime']['description']
  • root['schemas']['User']['properties']['groupIdentifiers']['description']
  • root['schemas']['User']['properties']['groupid']['description']
  • root['schemas']['User']['properties']['hireDate']['description']
  • root['schemas']['User']['properties']['lastBadPasswordAttemptTime']['description']
  • root['schemas']['User']['properties']['lastLoginTime']['description']
  • root['schemas']['User']['properties']['lastName']['description']
  • root['schemas']['User']['properties']['lastPasswordChangeTime']['description']
  • root['schemas']['User']['properties']['managers']['description']
  • root['schemas']['User']['properties']['middleName']['description']
  • root['schemas']['User']['properties']['officeAddress']['description']
  • root['schemas']['User']['properties']['passwordExpirationTime']['description']
  • root['schemas']['User']['properties']['personalAddress']['description']
  • root['schemas']['User']['properties']['phoneNumbers']['description']
  • root['schemas']['User']['properties']['productObjectId']['description']
  • root['schemas']['User']['properties']['roleDescription']['description']
  • root['schemas']['User']['properties']['roleName']['description']
  • root['schemas']['User']['properties']['terminationDate']['description']
  • root['schemas']['User']['properties']['timeOff']['description']
  • root['schemas']['User']['properties']['title']['description']
  • root['schemas']['User']['properties']['userAuthenticationStatus']['description']
  • root['schemas']['User']['properties']['userDisplayName']['description']
  • root['schemas']['User']['properties']['userRole']['description']
  • root['schemas']['User']['properties']['userid']['description']
  • root['schemas']['User']['properties']['windowsSid']['description']
  • root['schemas']['Validity']['description']
  • root['schemas']['Validity']['properties']['expiryTime']['description']
  • root['schemas']['Validity']['properties']['issueTime']['description']
  • root['schemas']['Verdict']['description']
  • root['schemas']['Verdict']['properties']['analystVerdict']['description']
  • root['schemas']['Verdict']['properties']['neighbourInfluence']['description']
  • root['schemas']['Verdict']['properties']['responseCount']['description']
  • root['schemas']['Verdict']['properties']['sourceCount']['description']
  • root['schemas']['Verdict']['properties']['verdict']['description']
  • root['schemas']['VerdictInfo']['description']
  • root['schemas']['VerdictInfo']['properties']['benignCount']['description']
  • root['schemas']['VerdictInfo']['properties']['categoryDetails']['description']
  • root['schemas']['VerdictInfo']['properties']['confidenceScore']['description']
  • root['schemas']['VerdictInfo']['properties']['globalCustomerCount']['description']
  • root['schemas']['VerdictInfo']['properties']['globalHitsCount']['description']
  • root['schemas']['VerdictInfo']['properties']['iocStats']['description']
  • root['schemas']['VerdictInfo']['properties']['maliciousCount']['description']
  • root['schemas']['VerdictInfo']['properties']['neighbourInfluence']['description']
  • root['schemas']['VerdictInfo']['properties']['pwn']['description']
  • root['schemas']['VerdictInfo']['properties']['pwnFirstTaggedTime']['description']
  • root['schemas']['VerdictInfo']['properties']['responseCount']['description']
  • root['schemas']['VerdictInfo']['properties']['sourceCount']['description']
  • root['schemas']['VerdictInfo']['properties']['sourceProvider']['description']
  • root['schemas']['VerdictInfo']['properties']['verdictResponse']['description']
  • root['schemas']['VerdictInfo']['properties']['verdictTime']['description']
  • root['schemas']['VerdictInfo']['properties']['verdictType']['description']
  • root['schemas']['Vulnerabilities']['description']
  • root['schemas']['Vulnerabilities']['properties']['vulnerabilities']['description']
  • root['schemas']['Vulnerability']['description']
  • root['schemas']['Vulnerability']['properties']['about']['description']
  • root['schemas']['Vulnerability']['properties']['cveDescription']['description']
  • root['schemas']['Vulnerability']['properties']['cveId']['description']
  • root['schemas']['Vulnerability']['properties']['cvssBaseScore']['description']
  • root['schemas']['Vulnerability']['properties']['cvssVector']['description']
  • root['schemas']['Vulnerability']['properties']['cvssVersion']['description']
  • root['schemas']['Vulnerability']['properties']['description']['description']
  • root['schemas']['Vulnerability']['properties']['firstFound']['description']
  • root['schemas']['Vulnerability']['properties']['lastFound']['description']
  • root['schemas']['Vulnerability']['properties']['name']['description']
  • root['schemas']['Vulnerability']['properties']['scanEndTime']['description']
  • root['schemas']['Vulnerability']['properties']['scanStartTime']['description']
  • root['schemas']['Vulnerability']['properties']['severity']['description']
  • root['schemas']['Vulnerability']['properties']['severityDetails']['description']
  • root['schemas']['Vulnerability']['properties']['vendor']['description']
  • root['schemas']['Vulnerability']['properties']['vendorKnowledgeBaseArticleId']['description']
  • root['schemas']['Vulnerability']['properties']['vendorVulnerabilityId']['description']
  • root['schemas']['X509']['description']
  • root['schemas']['X509']['properties']['algorithm']['description']
  • root['schemas']['X509']['properties']['certIssuer']['description']
  • root['schemas']['X509']['properties']['name']['description']
  • root['schemas']['X509']['properties']['serialNumber']['description']
  • root['schemas']['X509']['properties']['thumbprint']['description']
dictionary_item_removed
  • root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['delete']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['undelete']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardCharts']['methods']['list']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dashboardQueries']['methods']['list']
  • root['schemas']['ListDashboardChartsResponse']
  • root['schemas']['ListDashboardQueriesResponse']
  • root['schemas']['UndeleteInstanceRequest']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['description']
new_valueQueries the instance for EntityRiskScores. The API returns Risk Scores for entities including users and assets.
old_valueQueries the instance for EntityRiskScores. The API returns Risk Scores for entities which could be users, assets, resources etc in a system given the following filters: Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['entityRiskScores']['methods']['query']['parameters']['filter']['description']
new_valueFilter expression to be applied to the list of Entity Risk Scores. Timestamps use RFC 3339. Read more [here](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp) - **risk_window**: Filter field which represents the time window over which an Entity Risk Score is computed. This could be 24 hours or 7 days. Example: `filter=risk_window.start_time >= "2023-08-10T14:20:59.950218416Z" AND risk_window.end_time <= "2023-08-17T14:20:59.950219626Z"` - **risk_score**: Filter by risk_score in the current risk window and time window. Example: `filter=risk_score<20` - **risk_delta**: Filter by risk_delta in the risk window and time window. Example: `filter=risk_delta>=12 AND risk_delta<=850` Risk_delta is a percentage representation of change. There are multiple cases of risk_delta calculation: 1. Previous risk_score was 0 (either truly 0 or non-existent) and current risk score is a non 0 number. This is a 100 percent positive delta. 2. Previous risk score and current risk score are equal (eg. both 0): delta is 0 since there was no change. 3. Previous risk score is higher than current score: delta is negative. 4. Previous risk score is lower than current score: delta is positive. 5. If risk_delta calculation yields a value > 200%, the delta is instead set to a constant value of 200%. - **raw_risk_score**: Filter by raw_risk_score in the current risk window and time window. Example: `filter=raw_risk_score<100` - **raw_risk_delta**: Filter by raw_risk_delta in the risk window and time window. Example: `filter=raw_risk_delta>=5 AND raw_risk_delta<=100` - **detections_count**: Filter by number of detections for the entity in the risk window and time window. Example: `filter=detections_count < 10` - **entity**: Filter by details of the entity. Example: `filter=entity.metadata.entity_type="ASSET"` - **entity_indicator**: Filter by entity indicator. The sub fields need to be explicitly requested. Examples: - `filter=entity_indicator.email: "test@example.com"` - `filter=entity_indicator.hostname="test_hostname"` Supported entity_indicator subfields: - entity_indicator.windows_sid - entity_indicator.email - entity_indicator.user_name - entity_indicator.employee_id - entity_indicator.hostname - entity_indicator.mac - entity_indicator.product_id - entity_indicator.asset_ip_address - entity_indicator.product_object_id - entity_indicator.Namespace This can be used in conjunction with an entity_indicator for an asset (hostname, mac, product_id, asset_ip_address). - **risk_score_version**: Filter results by risk score version. Example: `filter=risk_score_version = "RISK_SCORE_VERSION_V0_01"` - **lookback_interval**: Filter by the lookback interval. Example: `filter=lookback_interval.start_time >= "2023-08-10T14:20:59.950218416Z" AND lookback_interval.end_time <= "2023-08-17T14:20:59.950219626Z"`
old_valueFilter to be applied over multiple Entity Risk Score fields. Please see API definition for usage
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchEnterpriseWideIoCs']['parameters']['fetchPrioritizedIocsOnly']['description']
new_valueOptional. Indicates if only prioritized iocs should be fetched. If threat collection id is set, this must be not be set.
old_valueOptional. Indicates if only prioritized iocs should be fetched.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchRulesAlerts']['parameters']['maxNumAlertsToReturn']['description']
new_valueOptional. The maximum number of alerts to return. The default and maximum value is 10,000; values above that will be coerced to 10,000. When the number of available alerts is greater than this value, the response will contain a too_many_alerts field set to true.
old_valueOptional. Maximum number of alerts to return.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['nativeDashboards']['methods']['patch']['parameters']['updateMask']['description']
new_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned
old_valueRequired. LINT.IfChange(update_mask_values) The list of fields to update. Supported paths are - display_name description definition.filters definition.charts type access dashboard_user_data.is_pinned LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_native_dashboard)
root['revision']
new_value20250213
old_value20241212
root['schemas']['DashboardChart']['description']
new_valueDashboardChart resource. NEXT TAG: 10
old_valueDashboardChart resource. NEXT TAG: 9
root['schemas']['DataAccessScope']['properties']['allowedDataAccessLabels']['description']
new_valueOptional. The allowed labels for the scope. Either allow_all or allowed_data_access_labels needs to be provided. When provided, there has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
old_valueRequired. The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allow_all or allowed_data_access_labels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
root['schemas']['EditChartRequest']['properties']['editMask']['description']
new_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input
old_valueRequired. LINT.IfChange(edit_mask_values) The list of fields to edit for chart and query. Supported paths in chart are - dashboard_chart.display_name dashboard_chart.description dashboard_chart.chart_datasource.data_sources dashboard_chart.visualization dashboard_chart.visualization.button Supported paths in query are - dashboard_query.query dashboard_query.input LINT.ThenChange(//depot/google3/googlex/security/malachite/dataplane/common/nativedashboardsconv.go:field_path_mapping_edit_chart)
root['schemas']['EntityIndicator']['description']
new_valueIdentifying information for an Entity at a given point in time. This encapsulates the indicator type (in the field name) and value, as well as the namespace when relevant (for internal Asset indicators).
old_valueEnacpsulates the Entity Indicator Value and Type
root['schemas']['EntityIndicator']['properties']['assetIpAddress']['description']
new_valueThe IP address to identify an asset.
old_valueThe IP address.
root['schemas']['EntityIndicator']['properties']['destinationIpAddress']['description']
new_valueThe resolved ip address. This corresponds to the `ip` field in the UDM `Artifact`.
old_valueArtifact types. The resolved ip address in internal KValueType from udm artifact.ip.
root['schemas']['EntityIndicator']['properties']['domainname']['description']
new_valueThe domain name. This corresponds to the `name` field in the UDM `Domain` and to the `domain_name` field when specified as a entityRiskScores.query entity_idicator filter.
old_valueThe domain name.
root['schemas']['EntityIndicator']['properties']['email']['description']
new_valueThe email address to identify a user. This corresponds to the `email_addresses` field in the UDM `User`.
old_valueThe email.
root['schemas']['EntityIndicator']['properties']['employeeId']['description']
new_valueThe employee id to identify a user.
old_valueThe employee id.
root['schemas']['EntityIndicator']['properties']['filePath']['description']
new_valueThe file path. This corresponds to the `full_path` field in the UDM `File`.
old_valueThe file path,
root['schemas']['EntityIndicator']['properties']['fullCommandLine']['description']
new_valueThe full command line. This corresponds to the `command_line` field in the UDM `Process`.
old_valueThe full command line.
root['schemas']['EntityIndicator']['properties']['hashMd5']['description']
new_valueThe hash md5.
old_valueFile types. The hash md5.
root['schemas']['EntityIndicator']['properties']['hostname']['description']
new_valueThe hostname to identify an asset.
old_valueAsset types. The hostname.
root['schemas']['EntityIndicator']['properties']['indicatorNamespace']['description']
new_valueNamespace value of the indicator. Namespaces are supported for Asset indicators - hostname, mac, asset_ip_address, product_id, and project_object_id.
old_valueNamespace value of the indicator. An unknown namespace will be stored as 'malachite_null_namespace' specifically. Searching globally across all namespaces for an unknown namespace.
root['schemas']['EntityIndicator']['properties']['mac']['description']
new_valueThe MAC address to identify an asset.
old_valueThe MAC address.
root['schemas']['EntityIndicator']['properties']['parentProcessId']['description']
new_valueThe parent process id. This corresponds to the `parent_process.pid` field in the UDM `Process`.
old_valueThe parent process id.
root['schemas']['EntityIndicator']['properties']['processId']['description']
new_valueThe process id. This corresponds to the `pid` field in the UDM `Process`.
old_valueThe process id.
root['schemas']['EntityIndicator']['properties']['productId']['description']
new_valueSome ID that uniquely identifies an asset. This corresponds to the `asset_id` field in the UDM `Asset` and `Noun`.
old_valueThe product specific id.
root['schemas']['EntityIndicator']['properties']['productObjectId']['description']
new_valueThe product object id which can be used to identify an asset, user, group, or resource. This corresponds to the `product_object_id` field in the UDM `Resource`, `User`, `Asset`, and `Group`.
old_valueThe product object id.
root['schemas']['EntityIndicator']['properties']['projectObjectId']['description']
new_valueDeprecated. Some vendor-specific ID to identify a user. This corresponds to the `product_object_id` field in the UDM `User`.
old_valueThe project object id.
root['schemas']['EntityIndicator']['properties']['rawPid']['description']
new_valueThe raw pid.
old_valueProcess types. The raw pid.
root['schemas']['EntityIndicator']['properties']['resource']['description']
new_valueSystem unique resource name. This corresponds to the `name` field in the UDM `Resource` and to the `resource_name` field when specified as a entityRiskScores.query entity_idicator filter.
old_valueSystem unique resource name.
root['schemas']['EntityIndicator']['properties']['resourceProjectObjectId']['description']
new_valueLDAP Object Id or generic product object identifier that creates a unique user entity identifier. This corresponds to the `product_object_id` field in the UDM `Resource`.
old_valueResource types. LDAP Object Id or generic product object identifier that creates a unique user entity identifier.
root['schemas']['EntityIndicator']['properties']['username']['description']
new_valueThe user name or user ID to identify a user. This corresponds to the `userid` field in the UDM `User` and the `user_name` field when specified as a entityRiskScores.query entity_idicator filter.
old_valueUser types. The username.
root['schemas']['EntityIndicator']['properties']['windowsSid']['description']
new_valueThe windows SID to identify a user.
old_valueThe windows sid.
root['schemas']['GoogleCloudChronicleV1alphaLegacyFetchUdmSearchViewResponseStats']['description']
new_valueLINT.IfChange(stats_data) Stats results when the query is for statistics NEXT TAG = 6;
old_valueLINT.IfChange (stats_data) Stats results when the query is for statistics NEXT TAG = 6;
root['schemas']['Instance']['properties']
new_value
customerCode
descriptionAn acronym related to the company name.
typestring
displayName
descriptionThe display name of the instance.
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
secopsUrls
descriptionURL of the SecOps instance for the instance. https://.backstory.chronicle.security
items
typestring
typearray
state
descriptionOutput only. The state of the instance.
enum
  • STATE_UNSPECIFIED
  • ACTIVE
  • SOFT_DELETED
  • SOFT_DELETE_INITIATED
  • UNDELETE_INITIATED
enumDescriptions
  • The default value.
  • The instance is active.
  • The instance is soft-deleted.
  • The instance is in the process of being soft-deleted.
  • The instance is in the process of being undeleted.
readOnlyTrue
typestring
old_value
deleteTime
descriptionOutput only. The time at which the instance was soft-deleted.
formatgoogle-datetime
readOnlyTrue
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
purgeTime
descriptionOutput only. The earliest time that soft-deleted tenants will be permanently deleted and will no longer be able to be undeleted.
formatgoogle-datetime
readOnlyTrue
typestring
state
descriptionOutput only. The state of the instance.
enum
  • STATE_UNSPECIFIED
  • ACTIVE
  • SOFT_DELETED
  • SOFT_DELETE_INITIATED
  • UNDELETE_INITIATED
enumDescriptions
  • The default value.
  • The instance is active.
  • The instance is soft-deleted.
  • The instance is in the process of being soft-deleted.
  • The instance is in the process of being undeleted.
readOnlyTrue
typestring
wipeoutStatus
descriptionOutput only. The wipeout status of the instance.
enum
  • WIPEOUT_STATE_UNSPECIFIED
  • DELETE_REQUESTED
  • SOFT_DELETE_IN_PROGRESS
  • SOFT_DELETE_COMPLETED
  • UNDELETE_REQUESTED
  • DATA_DELETION_IN_PROGRESS
  • ERROR
  • WIPED_OUT
  • UNDELETE_COMPLETED
enumDescriptions
  • The default value.
  • The instance has requested deletion.
  • The instance is in the process of being soft-deleted.
  • The instance has been soft-deleted.
  • The instance has requested undeletion.
  • The instance is in the process of being data deleted.
  • The instance has an error during wipeout.
  • The instance has been wiped out.
  • The instance has been undeleted.
readOnlyTrue
typestring
root['schemas']['IocAssociation']['properties']['countryCode']['description']
new_valueOutput only. Deprecated. Use region_code instead. Country from which the threat actor originated.
old_valueOutput only. Country from which the threat actor/ malware is originated.
root['schemas']['IocAssociation']['properties']['regionCode']['description']
new_valueOutput only. Name of the country the threat is originating from.
old_valueOutput only. Name of the country, the threat is originating from.
root['schemas']['LegacySearchRulesAlertsResponse']['properties']['tooManyAlerts']['description']
new_valueIndicates that more data was available but not sent due to more hits than max_num_alerts_to_return.
old_valueIndicates that more data was available but not sent due to more hits than max_matches_to_return.
root['schemas']['LegacyStreamDetectionAlertsRequest']['properties']['continuationTime']['description']
new_valueOptional. DEPRECATED: Prefer using `page_token` or `page_start_time` instead. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. All detection alerts discovered after `continuation_time` will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
old_valueOptional. A continuation timestamp, from a previous `LegacyStreamDetectionAlerts` connection. When reconnecting, clients should provide the maximum continuation_time they have received. When initiating the very first connection, clients should leave this unspecified. If unspecified, this defaults to the time of the connection. All detection alerts discovered after continuation_time will be streamed to the client. If the value is older than 1 week, the connection request will be rejected; other RPCs should be used to get older detections.
root['schemas']['LegacyStreamDetectionAlertsResponse']['properties']['continuationTime']['description']
new_valueDEPRECATED: Prefer using `page_token` instead by specifying either `page_start_time` or `page_token` in the request. A continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
old_valueA continuation timestamp that can be sent as `continuation_time` when reconnecting to this streaming RPC.
root['schemas']['LogType']['properties']['displayName']['description']
new_valueRequired. The display name of this log type. This is the tag used in YARA-l rules and search queries.
old_valueRequired. The display name of this log type.
root['schemas']['StatusProto']['properties']['canonicalCode']['description']
new_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 canonical_code = 6;
old_valueThe canonical error code (see codes.proto) that most closely corresponds to this status. This may be missing, and in the common case of the generic space, it definitely will be.
root['schemas']['StatusProto']['properties']['code']['description']
new_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional int32 code = 1;
old_valueNumeric code drawn from the space specified below. Often, this is the canonical error space, and code is drawn from google3/util/task/codes.proto
root['schemas']['StatusProto']['properties']['message']['description']
new_valueDetail message copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string message = 3;
old_valueDetail message
root['schemas']['StatusProto']['properties']['messageSet']['description']
new_valuemessage_set associates an arbitrary proto message with the status. copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional proto2.bridge.MessageSet message_set = 5;
old_valuemessage_set associates an arbitrary proto message with the status.
root['schemas']['StatusProto']['properties']['space']['description']
new_valueThe following are usually only present when code != 0 Space to which this status belongs copybara:strip_begin(b/383363683) copybara:strip_end_and_replace optional string space = 2;
old_valueThe following are usually only present when code != 0 Space to which this status belongs
root['schemas']['Visualization']['description']
new_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 16
old_valueVisualization config for a chart. https://echarts.apache.org/en/option.html#series NEXT TAG: 15
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][0]
new_valueDefault threat status
old_value
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][0]
new_valueThe default action.
old_value
root['schemas']['Metadata']['properties']['enrichmentState']['enumDescriptions'][0]
new_valueUnspecified.
old_value
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['User']['properties']['accountType']['enumDescriptions'][0]
new_valueDefault user account type.
old_value
root['schemas']['VerdictInfo']['properties']['verdictResponse']['enumDescriptions'][0]
new_valueThe default verdict response type.
old_value
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['schemas']['Association']['properties']['type']['enumDescriptions'][0]
new_valueThe default Association Type.
old_value
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][0]
new_valueDefault source type
old_value
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchCuratedDetections']['parameters']['alertState']['enumDescriptions'][0]
new_valueThe security result type is not known.
old_value
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][0]
new_valueThe default mechanism.
old_value
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['Dhcp']['properties']['opcode']['enumDescriptions'][0]
new_valueDefault opcode.
old_value
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][0]
new_value@hide_from_doc
old_value
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][0]
new_valueThe default severity level.
old_value
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][0]
new_valueDefault
old_value
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][0]
new_valueThe default action.
old_value
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][0]
new_valueDefault type.
old_value
root['schemas']['VerdictInfo']['properties']['verdictType']['enumDescriptions'][0]
new_valueVerdict category not specified.
old_value
root['schemas']['Role']['properties']['type']['enumDescriptions'][0]
new_valueDefault user role.
old_value
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][0]
new_valueDefault registry value type used when the type is unknown.
old_value
root['schemas']['Feedback']['properties']['reputation']['enumDescriptions'][0]
new_valueAn unspecified reputation.
old_value
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][0]
new_valueThe default category.
old_value
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][0]
new_valueDefault.
old_value
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][0]
new_valueIoCStat source is unidentified.
old_value
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][0]
new_valueThe default authentication status.
old_value
root['schemas']['Asset']['properties']['type']['enumDescriptions'][0]
new_valueUnspecified asset role.
old_value
root['schemas']['Feedback']['properties']['verdict']['enumDescriptions'][0]
new_valueAn unspecified verdict.
old_value
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][0]
new_valueThe default confidence level.
old_value
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][0]
new_valueThe default confidence level.
old_value
root['schemas']['Relation']['properties']['direction']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][0]
new_valueThe default protocol.
old_value
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['SecurityResult']['properties']['alertState']['enumDescriptions'][0]
new_valueThe security result type is not known.
old_value
root['schemas']['Investigation']['properties']['reputation']['enumDescriptions'][0]
new_valueAn unspecified reputation.
old_value
root['schemas']['Network']['properties']['direction']['enumDescriptions'][0]
new_valueThe default direction.
old_value
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][0]
new_valueDefault reason.
old_value
root['schemas']['ResponsePlatformInfo']['properties']['responsePlatformType']['enumDescriptions'][0]
new_valueResponse platform not specified.
old_value
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][0]
new_valueDefault
old_value
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][0]
new_valueDefault message type.
old_value
root['schemas']['User']['properties']['userRole']['enumDescriptions'][0]
new_valueDefault user role.
old_value
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][0]
new_valueThe default application protocol.
old_value
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][0]
new_valueDefault event type
old_value
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][0]
new_valueDefault reason.
old_value
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['LegacyFeedback']['properties']['verdict']['enumDescriptions'][0]
new_valueAn unspecified verdict.
old_value
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][0]
new_valueDefault
old_value
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][0]
new_valueAn undetermined token type.
old_value
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][0]
new_valueUnspecified deployment status.
old_value
root['schemas']['Source']['properties']['quality']['enumDescriptions'][0]
new_valueThe default confidence level.
old_value
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][0]
new_valueUnspecified finding status.
old_value
root['schemas']['Investigation']['properties']['verdict']['enumDescriptions'][0]
new_valueAn unspecified verdict.
old_value
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][0]
new_valueDefault value
old_value
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][0]
new_valueThe default action.
old_value
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][0]
new_valueDefault priority level.
old_value
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][0]
new_valueFile type is UNSPECIFIED.
old_value
root['schemas']['FindingVariable']['properties']['type']['enumDescriptions'][0]
new_valueAn unspecified variable type.
old_value
root['schemas']['AssociationIdentity']['properties']['associationType']['enumDescriptions'][0]
new_valueThe default Association Type.
old_value
root['schemas']['Permission']['properties']['type']['enumDescriptions'][0]
new_valueDefault permission type.
old_value
root['schemas']['LegacyFeedback']['properties']['reputation']['enumDescriptions'][0]
new_valueAn unspecified reputation.
old_value
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][0]
new_valueDefault reason.
old_value
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][0]
new_valueThe default type.
old_value
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][0]
new_valueThe default severity level.
old_value
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][0]
new_valueUnspecified threat verdict level.
old_value
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][0]
new_valueDefault value.
old_value
root['schemas']['AnalystVerdict']['properties']['verdictResponse']['enumDescriptions'][0]
new_valueThe default verdict response type.
old_value
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchDetections']['parameters']['alertState']['enumDescriptions'][0]
new_valueThe security result type is not known.
old_value
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][0]
new_valueIngested and Normalized telemetry events
old_value
iterable_item_added
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][2]User.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][3]Group.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][4]Resource.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][5]An external IP address.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][6]A file.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][7]A domain.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][8]A url.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][9]A mutex.
root['resources']['projects']['resources']['locations']['resources']['instances']['methods']['findRelatedEntities']['parameters']['entityTypes']['enumDescriptions'][10]A metric.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchCuratedDetections']['parameters']['alertState']['enumDescriptions'][1]The security result is not an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchCuratedDetections']['parameters']['alertState']['enumDescriptions'][2]The security result is an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchDetections']['parameters']['alertState']['enumDescriptions'][1]The security result is not an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchDetections']['parameters']['alertState']['enumDescriptions'][2]The security result is an alert.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][0]An unspecified collection type.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][1]An alert reported in customer telemetry.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][2]A finding from the Uppercase team.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][4]A detection found by applying a rule.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][5]An alert generated by Chronicle machine learning models.
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['legacy']['methods']['legacySearchFindings']['parameters']['findingType']['enumDescriptions'][6]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['AnalystVerdict']['properties']['verdictResponse']['enumDescriptions'][1]VerdictResponse resulted a threat as malicious.
root['schemas']['AnalystVerdict']['properties']['verdictResponse']['enumDescriptions'][2]VerdictResponse resulted a threat as benign.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][1]Minimum.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][2]Maximum.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][3]Count.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][4]Sum.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][5]Average.
root['schemas']['AnalyticValue']['properties']['aggregateFunction']['enumDescriptions'][6]Standard Deviation.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][1]Principal Device
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][2]Target User
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][3]Target Device
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][4]Principal User
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][5]Target IP
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][6]Principal File Hash
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][7]Principal Country
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][8]Security Category
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][9]Network ASN
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][10]Client Certificate Hash
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][11]DNS Query Type
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][12]DNS Domain
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][13]HTTP User Agent
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][14]Event Type
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][15]Product Name
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][16]Product Event Type
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][17]Parent Folder Path
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][18]Target resource Name
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][19]Principal Application.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][20]Target Application.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][21]Email To Address.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][22]Email From Address.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][23]Mail Id.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][24]Principal IP.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][25]Security Action.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][26]Security Rule Id.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][27]Target Network Organization name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][28]Principal Network Organization name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][29]Principal Process File Path.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][30]Principal Process File SHA256 Hash.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][31]Security Result rule name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][32]Target Resource label key.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][33]Vendor name.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][34]Target Resource type.
root['schemas']['AnalyticValue']['properties']['dimensions']['items']['enumDescriptions'][35]Target Location name.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['AnalyticValue']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][1]Asset is active, functional and deployed.
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][2]Asset is pending decommission and no longer deployed.
root['schemas']['Asset']['properties']['deploymentStatus']['enumDescriptions'][3]Asset is decommissioned.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][1]A workstation or desktop.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][2]A laptop computer.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][3]An IOT asset.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][4]A network attached storage device.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][5]A printer.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][6]A scanner.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][7]A server.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][8]A tape library device.
root['schemas']['Asset']['properties']['type']['enumDescriptions'][9]A mobile device such as a mobile phone or PDA.
root['schemas']['Association']['properties']['type']['enumDescriptions'][1]Association type Threat actor.
root['schemas']['Association']['properties']['type']['enumDescriptions'][2]Association type Malware.
root['schemas']['AssociationIdentity']['properties']['associationType']['enumDescriptions'][1]Association type Threat actor.
root['schemas']['AssociationIdentity']['properties']['associationType']['enumDescriptions'][2]Association type Malware.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][1]Username + password authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][2]OTP authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][3]Hardware key authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][4]Local authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][5]Remote authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][6]RDP, Terminal Services, or VNC.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][7]Some other mechanism that is not defined here.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][8]Badge reader authentication
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][9]Network authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][10]Batch authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][11]Service authentication
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][12]Direct human-interactive unlock authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][13]Network clear text authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][14]Authentication with new credentials.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][15]Interactive authentication.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][16]Interactive authentication using cached credentials.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][17]Cached Remote Interactive authentication using cached credentials.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][19]Biometric device such as a fingerprint reader.
root['schemas']['Authentication']['properties']['mechanism']['items']['enumDescriptions'][20]Wearable such as an Apple Watch.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][1]A machine authentication.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][2]An SSO authentication.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][3]A VPN authentication.
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][4]A Physical authentication (e.g. "Badge reader").
root['schemas']['Authentication']['properties']['type']['enumDescriptions'][5]A TACACS family protocol for networked systems authentication (e.g. TACACS, TACACS+).
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][20]FILE_TYPE_DESKTOP_ENTRY
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][82]FILE_TYPE_SLK
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][111]FILE_TYPE_MSIX
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][143]FILE_TYPE_RDP
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][160]FILE_TYPE_HTA
root['schemas']['BackstoryFile']['properties']['fileType']['enum'][161]FILE_TYPE_INTERNET_SHORTCUT
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][1]File type is PE_EXE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][2]Although DLLs are actually portable executables, this value enables the file type to be identified separately. File type is PE_DLL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][3]File type is MSI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][4]File type is NE_EXE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][5]File type is NE_DLL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][6]File type is DOS_EXE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][7]File type is DOS_COM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][8]File type is COFF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][9]File type is ELF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][10]File type is LINUX_KERNEL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][11]File type is RPM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][12]File type is LINUX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][13]File type is MACH_O.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][14]File type is JAVA_BYTECODE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][15]File type is DMG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][16]File type is DEB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][17]File type is PKG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][18]File type is PYC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][19]File type is LNK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][20]File type is DESKTOP_ENTRY.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][21]File type is JPEG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][22]File type is TIFF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][23]File type is GIF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][24]File type is PNG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][25]File type is BMP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][26]File type is GIMP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][27]File type is Adobe InDesign.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][28]File type is PSD. Adobe Photoshop.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][29]File type is TARGA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][30]File type is XWD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][31]File type is DIB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][32]File type is JNG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][33]File type is ICO.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][34]File type is FPX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][35]File type is EPS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][36]File type is SVG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][37]File type is EMF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][38]File type is WEBP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][39]File type is DWG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][40]File type is DXF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][41]File type is 3DS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][42]File type is OGG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][43]File type is FLC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][44]File type is FLI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][45]File type is MP3.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][46]File type is FLAC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][47]File type is WAV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][48]File type is MIDI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][49]File type is AVI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][50]File type is MPEG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][51]File type is QUICKTIME.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][52]File type is ASF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][53]File type is DIVX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][54]File type is FLV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][55]File type is WMA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][56]File type is WMV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][57]File type is RM. RealMedia type.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][58]File type is MOV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][59]File type is MP4.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][60]File type is T3GP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][61]File type is WEBM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][62]File type is MKV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][63]File type is PDF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][64]File type is PS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][65]File type is DOC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][66]File type is DOCX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][67]File type is PPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][68]File type is PPTX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][69]File type is XLS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][70]File type is XLSX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][71]File type is RTF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][72]File type is PPSX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][73]File type is ODP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][74]File type is ODS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][75]File type is ODT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][76]File type is HWP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][77]File type is GUL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][78]File type is ODF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][79]File type is ODG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][80]File type is ONE_NOTE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][81]File type is OOXML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][82]File type is SLK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][83]File type is EBOOK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][84]File type is LATEX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][85]File type is TTF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][86]File type is EOT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][87]File type is WOFF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][88]File type is CHM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][89]File type is ZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][90]File type is GZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][91]File type is BZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][92]File type is RZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][93]File type is DZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][94]File type is SEVENZIP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][95]File type is CAB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][96]File type is JAR.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][97]File type is RAR.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][98]File type is MSCOMPRESS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][99]File type is ACE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][100]File type is ARC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][101]File type is ARJ.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][102]File type is ASD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][103]File type is BLACKHOLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][104]File type is KGB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][105]File type is ZLIB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][106]File type is TAR.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][107]File type is ZST.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][108]File type is LZFSE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][109]File type is PYTHON_WHL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][110]File type is PYTHON_PKG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][111]File type is MSIX, new Windows app package format.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][112]File type is TEXT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][113]File type is SCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][114]File type is PHP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][115]File type is PYTHON.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][116]File type is PERL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][117]File type is RUBY.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][118]File type is C.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][119]File type is CPP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][120]File type is JAVA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][121]File type is SHELLSCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][122]File type is PASCAL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][123]File type is AWK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][124]File type is DYALOG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][125]File type is FORTRAN.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][126]File type is JAVASCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][127]File type is POWERSHELL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][128]File type is VBA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][129]File type is M4.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][130]File type is OBJETIVEC.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][131]File type is JMOD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][132]File type is MAKEFILE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][133]File type is INI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][134]File type is CLJ.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][135]File type is PDB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][136]File type is SQL.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][137]File type is NEKO.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][138]File type is WER.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][139]File type is GOLANG.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][140]File type is M3U.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][141]File type is BAT, Windows .bat/.cmd (old files are tagged as SHELLSCRIPT).
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][142]File type is MSC, Microsoft Management Console (MMC).
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][143]File type is RDP, Microsoft Remote Desktop Protocol (RDP) file.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][144]File type is SYMBIAN.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][145]File type is PALMOS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][146]File type is WINCE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][147]File type is ANDROID.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][148]File type is IPHONE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][149]File type is HTML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][150]File type is XML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][151]File type is SWF.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][152]File type is FLA.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][153]File type is COOKIE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][154]File type is TORRENT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][155]File type is EMAIL_TYPE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][156]File type is OUTLOOK.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][157]File type is SGML.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][158]File type is JSON.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][159]File type is CSV.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][160]File type is HTA (HTML Application).
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][161]File type is MSHTML .url.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][162]File type is CAP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][163]File type is ISOIMAGE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][164]File type is SQUASHFS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][165]File type is VHD.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][166]File type is APPLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][167]File type is MACINTOSH.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][168]File type is APPLESINGLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][169]File type is APPLEDOUBLE.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][170]File type is MACINTOSH_HFS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][171]File type is APPLE_PLIST.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][172]File type is MACINTOSH_LIB.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][173]File type is APPLESCRIPT.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][174]File type is APPLESCRIPT_COMPILED .
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][175]File type is CRX.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][176]File type is XPI.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][177]File type is ROM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][178]File type is IPS.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][179]File type is PEM.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][180]File type is PGP.
root['schemas']['BackstoryFile']['properties']['fileType']['enumDescriptions'][181]File type is CRT.
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ChartDatasource']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][1]Google Cloud Platform.
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][2]Amazon Web Services.
root['schemas']['Cloud']['properties']['environment']['enumDescriptions'][3]Microsoft Azure.
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][3]Uppercase
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['Collection']['properties']['idNamespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][0]An unspecified collection type.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][1]An alert reported in customer telemetry.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][2]A finding from the Uppercase team.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][4]A detection found by applying a rule.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][5]An alert generated by Chronicle machine learning models.
root['schemas']['Collection']['properties']['type']['enumDescriptions'][6]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['ColumnMetadata']['properties']['dataSource']['enum'][8]RULES
root['schemas']['ColumnMetadata']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['DashboardFilter']['properties']['dataSource']['enum'][8]RULES
root['schemas']['DashboardFilter']['properties']['dataSource']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['Dhcp']['properties']['opcode']['enumDescriptions'][1]Request.
root['schemas']['Dhcp']['properties']['opcode']['enumDescriptions'][2]Reply.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][1]DHCPDISCOVER.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][2]DHCPOFFER.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][3]DHCPREQUEST.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][4]DHCPDECLINE.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][5]DHCPACK.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][6]DHCPNAK.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][7]DHCPRELEASE.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][8]DHCPINFORM.
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][9]Microsoft Windows DHCP "lease deleted".
root['schemas']['Dhcp']['properties']['type']['enumDescriptions'][10]Microsoft Windows DHCP "lease expired".
root['schemas']['EdrEvent']['properties']['dataSource']['enum'][23]TRELLIX
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['EnrichmentDisablementTarget']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][2]User.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][3]Group.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][4]Resource.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][5]An external IP address.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][6]A file.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][7]A domain.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][8]A url.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][9]A mutex.
root['schemas']['EntityGroupMetadata']['properties']['entityType']['enumDescriptions'][10]A metric.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][2]User.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][3]Group.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][4]Resource.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][5]An external IP address.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][6]A file.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][7]A domain.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][8]A url.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][9]A mutex.
root['schemas']['EntityMetadata']['properties']['entityType']['enumDescriptions'][10]A metric.
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][1]Entities ingested from customers (e.g. AD_CONTEXT, DLP_CONTEXT)
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][2]Entities derived from customer data such as prevalence, artifact first/last seen, or asset/user first seen stats.
root['schemas']['EntityMetadata']['properties']['sourceType']['enumDescriptions'][3]Global contextual entities such as WHOIS or Safe Browsing.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['EventTypesSuggestion']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enum'][8]RULES
root['schemas']['ExecuteDashboardQueryResponse']['properties']['dataSources']['items']['enumDescriptions'][8]RULES is used for rules datasource.
root['schemas']['FeedDetails']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedDetails']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enum'][21]AZURE_BLOBSTORE_V2
root['schemas']['FeedSourceTypeSchema']['properties']['feedSourceType']['enumDescriptions'][21]Azure Blobstore Feed backed by Omniflow STS.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['Feedback']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][1]Case or Alert not malicious.
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][2]Case or Alert is malicious.
root['schemas']['Feedback']['properties']['reason']['enumDescriptions'][3]Case or Alert is under maintenance.
root['schemas']['Feedback']['properties']['reputation']['enumDescriptions'][1]A categorization of the finding as useful.
root['schemas']['Feedback']['properties']['reputation']['enumDescriptions'][2]A categorization of the finding as not useful.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['Feedback']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['Feedback']['properties']['verdict']['enumDescriptions'][1]A categorization of the finding as a "true positive".
root['schemas']['Feedback']['properties']['verdict']['enumDescriptions'][2]A categorization of the finding as a "false positive".
root['schemas']['FindingVariable']['properties']['type']['enumDescriptions'][1]A variable coming from the match conditions.
root['schemas']['FindingVariable']['properties']['type']['enumDescriptions'][2]A variable representing significant data that was found in the detection logic.
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][3]Uppercase
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['Id']['properties']['namespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['Investigation']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][1]Case or Alert not malicious.
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][2]Case or Alert is malicious.
root['schemas']['Investigation']['properties']['reason']['enumDescriptions'][3]Case or Alert is under maintenance.
root['schemas']['Investigation']['properties']['reputation']['enumDescriptions'][1]A categorization of the finding as useful.
root['schemas']['Investigation']['properties']['reputation']['enumDescriptions'][2]A categorization of the finding as not useful.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['Investigation']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['Investigation']['properties']['verdict']['enumDescriptions'][1]A categorization of the finding as a "true positive".
root['schemas']['Investigation']['properties']['verdict']['enumDescriptions'][2]A categorization of the finding as a "false positive".
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][91]FRONT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][94]VUHL_SO_IDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][221]TEHTRIS_EDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][222]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][223]GCLDW_CLODWAVE_HIDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][243]CYNERIO_NDR_H
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][282]WIREGUARD_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][290]CLAVISTER_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][427]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][467]VICARIUS_VRX_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][603]FORTINET_ADC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][622]HUAWEI_WIRELESS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][627]AZURE_VNET_FLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][629]CISCO_NETFLOW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][641]BELDEN_SWITCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][666]HP_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][681]VELOCLOUD_SDWAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][708]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][709]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][710]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][745]TRELLIX_HX_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][807]RAVEN_DB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][827]AZURE_RISKY_USERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][828]AZURE_RISK_EVENTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][829]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][859]D_OPENPATH_CONTEXT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][873]CIP_FASTWEB_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][947]SOLIDSERVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][990]HLX_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][991]CMB_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1013]WFA_FASTWEB_LOG
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1020]PINGONE_AIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1021]PINGONE_PROTECT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1129]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1130]FOXPASS_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1131]DRAYTEK_ROUTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1132]CHROMEOS_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1133]VECTRA_XDR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1134]METABASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1135]HUAWEI_FUSIONSPHERE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1136]HUAWEI_FIREWALL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1281]MY_SAILPOINT_LIFECYCLE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1366]ONEIDENTITY_SAFEGUARD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1399]CLICKHOUSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1422]JOBLOGIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1461]ZOHO_ASSIST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1483]OPENTEXT_CORDY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1526]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1556]CROWDSTRIKE_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1625]JAMF_TELEMETRY_V2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1820]IBM_SENSE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1829]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1830]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1839]ACN_SIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1840]ARCON_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1843]ARCDA_COREWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1844]IBM_SVA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1848]AUTODESK_CAD_CAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1850]FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1857]BLUE_VOYANT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1858]BBVA_MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1864]CAMEYO_ACTIVITY_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1872]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1874]CMMRZ_FORTI_DECEPTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1875]CSG_CITRIX_RX
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1876]EQIX_CONFIGURATION_BUILDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1879]D_STORMBREAKER_ALERTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1880]D_STORMBREAKER_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1891]FA_SOLUTIONS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1892]FILES_DOT_COM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1893]FINCOMUN_ORACLE_SPEI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1900]GHANGOR_DLP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1905]NETLIFY_LOGDRAINS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1916]GDLP_ATLAS_USER_ELEVATION
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1922]HSCR_ACCOUNTS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1923]HILLSTONE_NGFW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1924]HOXHUNT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1926]MC001_ELASTIC_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1933]INTEL_EMA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1939]INDUSFACE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1950]MLL001_MOL_AGYIEUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1951]MLL001_MOL_SFTPGO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1952]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1953]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1954]MLL001_MOL_PCI_DC_SAD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1955]MLL001_MOL_PCI_DB_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1956]MLL001_MOL_PCI_GKE_FIM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1957]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1958]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1959]MLL001_MOL_PCI_TOKENISER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1974]PINGCAP_TIDB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1975]PLUMFINTECH_PLUM_SCA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1979]PRIVACY_I
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1984]JIRANSECURITY_MAILSCREEN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1985]MY_RESOLVER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1986]REVIVESEC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1989]BRDCM_IMS_PAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1990]BBVA_BANKTRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1991]BBVA_CONSORES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1992]RQTI0LIH_VERVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1993]RQTI0LIH_ONEHUB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1994]RQTI0LIH_EPI_MES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1995]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1996]SAP_LEASING
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1997]BBVA_SIRE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1998]BBVA_POWER_CURVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1999]BBVA_SMARTSTREAM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2000]BBVA_SOLUCIONES
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2001]BBVA_TEXSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2002]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2003]BBVA_SIIBE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2004]BBVA_MBOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2005]BBVA_SINBA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2006]BBVA_MSDP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2007]BBVA_PLUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2008]BBVA_CAIRO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2009]BBVA_SICOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2010]BBVA_FUMER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2011]BBVA_MCOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2012]BBVA_MCWN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2013]BBVA_ZEIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2014]BBVA_CYGE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2015]BBVA_SISP_NET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2016]BBVA_CLAIM_CENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2017]BBVA_SAIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2018]BBVA_SPWEB
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2019]BBVA_VALIDADOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2020]BBVA_GUIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2021]BBVA_HECO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2022]GL_TRADE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2023]ORACLE_AVDF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2024]REBLAZE_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2025]VZ_MAXMIND_GEOIP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2026]TT002_EXASOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2027]CORERO_SMARTWALL_ONE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2028]AVEPOINT_ENPOWER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2029]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2030]GITHUB_DEPENDABOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2031]AWS_EKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2032]THALES_PS10K_HSM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2033]F5_DCS_WAF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2034]CLOUDWAVE_HONEYPOT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2035]PAN_PRISMA_CWP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2036]FORTINET_FORTISASE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2037]MICROSTRATEGY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2038]AWS_DASHA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2039]ONETRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2040]NETWRIX_PRIVILEGE_SECURE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2041]SANGFOR_PROXY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2044]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2047]SNF_SDH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2052]SOFTETHER_VPN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2055]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2065]UNICO_IDCLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2066]UNICO_IDTRUST
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2085]WING_SECURITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2087]WSGC_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2088]ZERO_NETWORKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2101]JUNIPER_SSR_CONDUCTOR
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2102]INFORMATICA_POWERCENTER
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2113]EXTERRO_FTK_CENTRAL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2114]CROWDSTRIKE_RECON
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2115]CLOUDFLARE_PAGESHIELD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2116]FORTRA_VM
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2117]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2118]RAPID_IDENTITY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2119]SLSFR_VERTEX_IOC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2120]ARCDA_VISTA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2121]PRMTH_WSO2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2122]MC001_CLICKS_ENTERPAT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2123]MC001_CLICKS_CLIUSERS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2124]MC001_ROSHTOV_CLICKS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2125]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2126]MC001_MACCABI_PHARMACY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2127]SPACELIFT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2128]PAVE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2129]MC001_MACCABI_NEW_APP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2130]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2131]MC001_OFEK_EITAN
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2132]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2133]MC001_MACCABI_ONLINE_LOGS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2134]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2135]CPS_JED_JCD_METRIC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2136]H_ISAC
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2137]IIJ_LANSCOPE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2138]ML009_MENLO
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2429]BBVA_CUSTODIA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2430]BBVA_CREDIT_VW
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2431]BBVA_CREDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2494]BBVA_WALLSTREET
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2496]INFORMATICA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2737]MT_APPLIED_PRINT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2756]HANNA_KASEYA_IT_GLUE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2757]KNRTH_COMMONFATE
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2759]PARXL_MERAKI_CLOUD
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2763]PRMTH_FIRSTIQ
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2764]PRMTH_PWSS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2783]RENAULT_IRN_74898
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2784]RENAULT_IRN_73882
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2785]RENAULT_IRN_72284
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2786]RENAULT_IRN_74143
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2787]RENAULT_IRN_70132
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2788]RENAULT_IRN_50567
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2789]RENAULT_IRN_8185
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2790]RENAULT_IRN_77153
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2791]RENAULT_IRN_67551
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2792]RENAULT_IRN_73940
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2793]RENAULT_IRN_75039
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2794]RENAULT_IRN_69293
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2795]RENAULT_IRN_74601
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2799]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2812]SML_SITEMINDER_PP
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2824]SNF_FORENSIC_PREFETCH
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2825]SNF_FORENSIC_HAYABUSA
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2864]SHOPIFY_APV
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2882]SHOPIFY_SVC_INT_2
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2913]VCTR727_AURUS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2946]WMT_GENAI
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2968]WSGC_ECOM
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][1]IoCStat is from a Mandiant Source.
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][2]IoCStat is from a third-party source.
root['schemas']['IoCStats']['properties']['iocStatsType']['enumDescriptions'][3]IoCStat is from a threat intelligence feed.
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][1]Low confidence.
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][2]Medium confidence.
root['schemas']['IoCStats']['properties']['quality']['enumDescriptions'][3]High confidence.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['LegacyCase']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['LegacyCase']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['LegacyFeedback']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][1]Case or Alert not malicious.
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][2]Case or Alert is malicious.
root['schemas']['LegacyFeedback']['properties']['reason']['enumDescriptions'][3]Case or Alert is under maintenance.
root['schemas']['LegacyFeedback']['properties']['reputation']['enumDescriptions'][1]A categorization of the finding as useful.
root['schemas']['LegacyFeedback']['properties']['reputation']['enumDescriptions'][2]A categorization of the finding as not useful.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][1]New finding.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][2]When a finding has feedback.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][3]When an analyst closes an finding.
root['schemas']['LegacyFeedback']['properties']['status']['enumDescriptions'][4]Open. Used to indicate that a Case / Alert is open.
root['schemas']['LegacyFeedback']['properties']['verdict']['enumDescriptions'][1]A categorization of the finding as a "true positive".
root['schemas']['LegacyFeedback']['properties']['verdict']['enumDescriptions'][2]A categorization of the finding as a "false positive".
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][1]Allowed.
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][2]Blocked.
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][3]Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][4]Put somewhere for later analysis (does NOT imply block).
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][5]Failed (e.g. the event was allowed but failed).
root['schemas']['LegacyIocCuratedDetection']['properties']['deviceAction']['enumDescriptions'][6]Challenged (e.g. the user was challenged by a Captcha, 2FA).
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][0]An unspecified collection type.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][1]An alert reported in customer telemetry.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][2]A finding from the Uppercase team.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][4]A detection found by applying a rule.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][5]An alert generated by Chronicle machine learning models.
root['schemas']['MalachiteFinding']['properties']['findingType']['enumDescriptions'][6]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][3]Uppercase
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['MalachiteFinding']['properties']['uidNamespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][1]Minimum.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][2]Maximum.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][3]Count.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][4]Sum.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][5]Average.
root['schemas']['Measure']['properties']['aggregateFunction']['enumDescriptions'][6]Standard Deviation.
root['schemas']['Metadata']['properties']['enrichmentState']['enumDescriptions'][1]The event has been enriched by Chronicle.
root['schemas']['Metadata']['properties']['enrichmentState']['enumDescriptions'][2]The event has not been enriched by Chronicle.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['Metadata']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][1]Principal Device
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][2]Target User
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][3]Target Device
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][4]Principal User
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][5]Target IP
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][6]Principal File Hash
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][7]Principal Country
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][8]Security Category
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][9]Network ASN
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][10]Client Certificate Hash
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][11]DNS Query Type
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][12]DNS Domain
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][13]HTTP User Agent
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][14]Event Type
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][15]Product Name
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][16]Product Event Type
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][17]Parent Folder Path
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][18]Target resource Name
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][19]Principal Application.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][20]Target Application.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][21]Email To Address.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][22]Email From Address.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][23]Mail Id.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][24]Principal IP.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][25]Security Action.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][26]Security Rule Id.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][27]Target Network Organization name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][28]Principal Network Organization name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][29]Principal Process File Path.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][30]Principal Process File SHA256 Hash.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][31]Security Result rule name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][32]Target Resource label key.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][33]Vendor name.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][34]Target Resource type.
root['schemas']['Metric']['properties']['dimensions']['items']['enumDescriptions'][35]Target Location name.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][1]Total received network bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][2]Total network sent bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][3]Total network sent bytes and received bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][4]Successful authentication attempts.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][5]Failed authentication attempts.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][6]Total authentication attempts.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][7]Total number of sent bytes for DNS events.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][8]Total number of events having non-null received bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][9]Total number of events having non-null sent bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][10]Total events having non-null sent or received bytes.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][11]DNS query success count - Number of events with response_code = 0.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][12]Number of events with response_code != 0.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][13]Total number of DNS queries made.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][14]Number of successfule file executions.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][15]Number of failed file executions.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][16]Total number file executions.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][17]Number of successful HTTP queries.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][18]Number of failed HTTP queries.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][19]Total number of HTTP queries.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][20]Total number of emails sent in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][21]Total number of download actions in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][22]Total number of change actions in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][23]Total number of authentication attempts in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][24]Number of outbound network bytes (total sent) in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][25]Total number of network bytes (both sent and received) in Google Workspace.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][26]Track number of alerts fired by EDR/SENTINEL/MICROSOFT_GRAPH.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][27]First-time analytic tracking successful resource creations.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][28]Volume-based analytic tracking successful resource creations.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][29]Volume-based analytic tracking successful resource reads.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][30]Volume-based analytic tracking failed resource reads.
root['schemas']['Metric']['properties']['metricName']['enumDescriptions'][31]Volume-based analytic tracking successful resource deletions.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][1]Apple Filing Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][2]Advanced Program-to-Program Communication.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][3]Advanced Message Queuing Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][4]Publishing Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][5]Block Extensible Exchange Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][6]Crypto currency protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][7]Peer-to-peer file sharing.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][8]Coherent File Distribution Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][9]Common Industrial Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][10]Constrained Application Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][11]Connection Oriented Transport Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][12]DCE/RPC.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][13]Data Distribution Service.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][14]Automation industry protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][15]DHCP.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][16]Digital Imaging and Communications in Medicine Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][17]Distributed Network Protocol 3 (DNP3)
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][18]DNS.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][19]Classic file sharing protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][20]Endpoint Handlespace Redundancy Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][21]Filesharing peer-to-peer protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][22]User Information Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][23]Censorship resistant peer-to-peer network.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][24]File Transfer Access and Management.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][25]GOOSE Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][26]Gopher protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][27]gRPC Remote Procedure Call.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][28]Health Level Seven.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][29]Packet-based multimedia communications system.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][30]HTTP.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][31]HTTPS.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][32]IEC 60870-5-104 (IEC 104) Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][33]Internet Relay Chat Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][34]Peer-to-peer hashtables.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][35]Kerberos 5.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][36]Lightweight Directory Access Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][37]Line Printer Daemon Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][38]Multipurpose Internet Mail Extensions and Secure MIME.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][39]Multimedia Messaging Service.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][40]Serial communications protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][41]Message Queuing Telemetry Transport.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][42]Network Configuration.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][43]Network File System.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][44]Network Information Service.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][45]Network News Transfer Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][46]National Transportation Communications for Intelligent Transportation System.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][47]Network Time Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][48]AOL Instant Messenger Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][49]Peer Name Resolution Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][50]Precision Time Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][51]QUIC.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][52]Remote Desktop Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][53]Reliable Event Logging Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][54]Routing Information Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][55]Remote Login in UNIX Systems.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][56]Remote Procedure Call.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][57]Real Time Messaging Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][58]Real-time Transport Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][59]Real Time Publish Subscribe.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][60]Real Time Streaming Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][61]Session Announcement Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][62]Session Description Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][63]Session Initiation Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][64]Service Location Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][65]Server Message Block.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][66]Simple Mail Transfer Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][67]Simple Network Management Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][68]Simple Network Time Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][69]Secure Shell.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][70]Secure SMS Messaging Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][71]Styx/9P - Plan 9 from Bell Labs distributed file system protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][72]Sampled Values Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][73]Transaction Capabilities Application Part.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][74]Tabular Data Stream.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][75]Anonymity network.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][76]Time Stamp Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][77]Virtual Terminal Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][78]Remote Directory Access Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][79]Web Distributed Authoring and Versioning.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][80]Message Handling Service Protocol.
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][81]Directory Access Protocol (DAP).
root['schemas']['Network']['properties']['applicationProtocol']['enumDescriptions'][82]Extensible Messaging and Presence Protocol.
root['schemas']['Network']['properties']['direction']['enumDescriptions'][1]An inbound request.
root['schemas']['Network']['properties']['direction']['enumDescriptions'][2]An outbound request.
root['schemas']['Network']['properties']['direction']['enumDescriptions'][3]A broadcast.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][1]ICMP.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][2]IGMP
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][3]TCP.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][4]UDP.
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][5]IPv6 Encapsulation
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][6]Generic Routing Encapsulation
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][7]Encapsulating Security Payload
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][8]ICMPv6
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][9]Enhanced Interior Gateway Routing
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][10]Ethernet-within-IP Encapsulation
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][11]Protocol Independent Multicast
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][12]Virtual Router Redundancy Protocol
root['schemas']['Network']['properties']['ipProtocol']['enumDescriptions'][13]Stream Control Transmission Protocol
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][1]Microsoft Windows.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][2]macOS.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][3]Linux.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][4]Deprecated: see cloud.environment.
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][7]IOS
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][8]Android
root['schemas']['Noun']['properties']['platform']['enumDescriptions'][9]Chrome OS
root['schemas']['Permission']['properties']['type']['enumDescriptions'][1]Administrator write permission.
root['schemas']['Permission']['properties']['type']['enumDescriptions'][2]Administrator read permission.
root['schemas']['Permission']['properties']['type']['enumDescriptions'][3]Data resource access write permission.
root['schemas']['Permission']['properties']['type']['enumDescriptions'][4]Data resource access read permission.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][1]Microsoft Windows.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][2]macOS.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][3]Linux.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][4]Deprecated: see cloud.environment.
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][7]IOS
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][8]Android
root['schemas']['PlatformSoftware']['properties']['platform']['enumDescriptions'][9]Chrome OS
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][1]Informational priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][2]Low priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][3]Medium priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][4]High priority.
root['schemas']['PriorityCount']['properties']['priority']['enumDescriptions'][5]Critical priority.
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][1]A full token with no privileges removed or groups disabled.
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][2]An elevated token with no privileges removed or groups disabled. Used when running as administrator.
root['schemas']['Process']['properties']['tokenElevationType']['enumDescriptions'][3]A limited token with administrative privileges removed and administrative groups disabled.
root['schemas']['RawLog']['properties']['type']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['RawLog']['properties']['type']['enum'][91]FRONT
root['schemas']['RawLog']['properties']['type']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][94]VUHL_SO_IDH
root['schemas']['RawLog']['properties']['type']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['RawLog']['properties']['type']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['RawLog']['properties']['type']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['RawLog']['properties']['type']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['RawLog']['properties']['type']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['RawLog']['properties']['type']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['RawLog']['properties']['type']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['RawLog']['properties']['type']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['RawLog']['properties']['type']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['RawLog']['properties']['type']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['RawLog']['properties']['type']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['RawLog']['properties']['type']['enum'][221]TEHTRIS_EDR
root['schemas']['RawLog']['properties']['type']['enum'][222]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['RawLog']['properties']['type']['enum'][223]GCLDW_CLODWAVE_HIDS
root['schemas']['RawLog']['properties']['type']['enum'][243]CYNERIO_NDR_H
root['schemas']['RawLog']['properties']['type']['enum'][282]WIREGUARD_VPN
root['schemas']['RawLog']['properties']['type']['enum'][290]CLAVISTER_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][427]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][467]VICARIUS_VRX_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][603]FORTINET_ADC
root['schemas']['RawLog']['properties']['type']['enum'][622]HUAWEI_WIRELESS
root['schemas']['RawLog']['properties']['type']['enum'][627]AZURE_VNET_FLOW
root['schemas']['RawLog']['properties']['type']['enum'][629]CISCO_NETFLOW
root['schemas']['RawLog']['properties']['type']['enum'][641]BELDEN_SWITCH
root['schemas']['RawLog']['properties']['type']['enum'][666]HP_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][681]VELOCLOUD_SDWAN
root['schemas']['RawLog']['properties']['type']['enum'][708]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['RawLog']['properties']['type']['enum'][709]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['RawLog']['properties']['type']['enum'][710]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['RawLog']['properties']['type']['enum'][745]TRELLIX_HX_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][807]RAVEN_DB
root['schemas']['RawLog']['properties']['type']['enum'][827]AZURE_RISKY_USERS
root['schemas']['RawLog']['properties']['type']['enum'][828]AZURE_RISK_EVENTS
root['schemas']['RawLog']['properties']['type']['enum'][829]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['RawLog']['properties']['type']['enum'][859]D_OPENPATH_CONTEXT
root['schemas']['RawLog']['properties']['type']['enum'][873]CIP_FASTWEB_IOC
root['schemas']['RawLog']['properties']['type']['enum'][947]SOLIDSERVER
root['schemas']['RawLog']['properties']['type']['enum'][990]HLX_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][991]CMB_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1013]WFA_FASTWEB_LOG
root['schemas']['RawLog']['properties']['type']['enum'][1020]PINGONE_AIC
root['schemas']['RawLog']['properties']['type']['enum'][1021]PINGONE_PROTECT
root['schemas']['RawLog']['properties']['type']['enum'][1129]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['RawLog']['properties']['type']['enum'][1130]FOXPASS_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1131]DRAYTEK_ROUTER
root['schemas']['RawLog']['properties']['type']['enum'][1132]CHROMEOS_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1133]VECTRA_XDR
root['schemas']['RawLog']['properties']['type']['enum'][1134]METABASE
root['schemas']['RawLog']['properties']['type']['enum'][1135]HUAWEI_FUSIONSPHERE
root['schemas']['RawLog']['properties']['type']['enum'][1136]HUAWEI_FIREWALL
root['schemas']['RawLog']['properties']['type']['enum'][1281]MY_SAILPOINT_LIFECYCLE
root['schemas']['RawLog']['properties']['type']['enum'][1366]ONEIDENTITY_SAFEGUARD
root['schemas']['RawLog']['properties']['type']['enum'][1399]CLICKHOUSE
root['schemas']['RawLog']['properties']['type']['enum'][1422]JOBLOGIC
root['schemas']['RawLog']['properties']['type']['enum'][1461]ZOHO_ASSIST
root['schemas']['RawLog']['properties']['type']['enum'][1483]OPENTEXT_CORDY
root['schemas']['RawLog']['properties']['type']['enum'][1526]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['RawLog']['properties']['type']['enum'][1556]CROWDSTRIKE_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1625]JAMF_TELEMETRY_V2
root['schemas']['RawLog']['properties']['type']['enum'][1820]IBM_SENSE
root['schemas']['RawLog']['properties']['type']['enum'][1829]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1830]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1839]ACN_SIA
root['schemas']['RawLog']['properties']['type']['enum'][1840]ARCON_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1843]ARCDA_COREWEB
root['schemas']['RawLog']['properties']['type']['enum'][1844]IBM_SVA
root['schemas']['RawLog']['properties']['type']['enum'][1848]AUTODESK_CAD_CAM
root['schemas']['RawLog']['properties']['type']['enum'][1850]FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1857]BLUE_VOYANT
root['schemas']['RawLog']['properties']['type']['enum'][1858]BBVA_MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][1864]CAMEYO_ACTIVITY_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][1872]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['RawLog']['properties']['type']['enum'][1874]CMMRZ_FORTI_DECEPTOR
root['schemas']['RawLog']['properties']['type']['enum'][1875]CSG_CITRIX_RX
root['schemas']['RawLog']['properties']['type']['enum'][1876]EQIX_CONFIGURATION_BUILDER
root['schemas']['RawLog']['properties']['type']['enum'][1879]D_STORMBREAKER_ALERTS
root['schemas']['RawLog']['properties']['type']['enum'][1880]D_STORMBREAKER_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][1891]FA_SOLUTIONS
root['schemas']['RawLog']['properties']['type']['enum'][1892]FILES_DOT_COM
root['schemas']['RawLog']['properties']['type']['enum'][1893]FINCOMUN_ORACLE_SPEI
root['schemas']['RawLog']['properties']['type']['enum'][1900]GHANGOR_DLP
root['schemas']['RawLog']['properties']['type']['enum'][1905]NETLIFY_LOGDRAINS
root['schemas']['RawLog']['properties']['type']['enum'][1916]GDLP_ATLAS_USER_ELEVATION
root['schemas']['RawLog']['properties']['type']['enum'][1922]HSCR_ACCOUNTS
root['schemas']['RawLog']['properties']['type']['enum'][1923]HILLSTONE_NGFW
root['schemas']['RawLog']['properties']['type']['enum'][1924]HOXHUNT
root['schemas']['RawLog']['properties']['type']['enum'][1926]MC001_ELASTIC_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][1933]INTEL_EMA
root['schemas']['RawLog']['properties']['type']['enum'][1939]INDUSFACE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][1950]MLL001_MOL_AGYIEUS
root['schemas']['RawLog']['properties']['type']['enum'][1951]MLL001_MOL_SFTPGO
root['schemas']['RawLog']['properties']['type']['enum'][1952]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['RawLog']['properties']['type']['enum'][1953]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['RawLog']['properties']['type']['enum'][1954]MLL001_MOL_PCI_DC_SAD
root['schemas']['RawLog']['properties']['type']['enum'][1955]MLL001_MOL_PCI_DB_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1956]MLL001_MOL_PCI_GKE_FIM
root['schemas']['RawLog']['properties']['type']['enum'][1957]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['RawLog']['properties']['type']['enum'][1958]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][1959]MLL001_MOL_PCI_TOKENISER
root['schemas']['RawLog']['properties']['type']['enum'][1974]PINGCAP_TIDB
root['schemas']['RawLog']['properties']['type']['enum'][1975]PLUMFINTECH_PLUM_SCA
root['schemas']['RawLog']['properties']['type']['enum'][1979]PRIVACY_I
root['schemas']['RawLog']['properties']['type']['enum'][1984]JIRANSECURITY_MAILSCREEN
root['schemas']['RawLog']['properties']['type']['enum'][1985]MY_RESOLVER
root['schemas']['RawLog']['properties']['type']['enum'][1986]REVIVESEC
root['schemas']['RawLog']['properties']['type']['enum'][1989]BRDCM_IMS_PAM
root['schemas']['RawLog']['properties']['type']['enum'][1990]BBVA_BANKTRADE
root['schemas']['RawLog']['properties']['type']['enum'][1991]BBVA_CONSORES
root['schemas']['RawLog']['properties']['type']['enum'][1992]RQTI0LIH_VERVE
root['schemas']['RawLog']['properties']['type']['enum'][1993]RQTI0LIH_ONEHUB
root['schemas']['RawLog']['properties']['type']['enum'][1994]RQTI0LIH_EPI_MES
root['schemas']['RawLog']['properties']['type']['enum'][1995]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['RawLog']['properties']['type']['enum'][1996]SAP_LEASING
root['schemas']['RawLog']['properties']['type']['enum'][1997]BBVA_SIRE
root['schemas']['RawLog']['properties']['type']['enum'][1998]BBVA_POWER_CURVE
root['schemas']['RawLog']['properties']['type']['enum'][1999]BBVA_SMARTSTREAM
root['schemas']['RawLog']['properties']['type']['enum'][2000]BBVA_SOLUCIONES
root['schemas']['RawLog']['properties']['type']['enum'][2001]BBVA_TEXSA
root['schemas']['RawLog']['properties']['type']['enum'][2002]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['RawLog']['properties']['type']['enum'][2003]BBVA_SIIBE
root['schemas']['RawLog']['properties']['type']['enum'][2004]BBVA_MBOT
root['schemas']['RawLog']['properties']['type']['enum'][2005]BBVA_SINBA
root['schemas']['RawLog']['properties']['type']['enum'][2006]BBVA_MSDP
root['schemas']['RawLog']['properties']['type']['enum'][2007]BBVA_PLUS
root['schemas']['RawLog']['properties']['type']['enum'][2008]BBVA_CAIRO
root['schemas']['RawLog']['properties']['type']['enum'][2009]BBVA_SICOR
root['schemas']['RawLog']['properties']['type']['enum'][2010]BBVA_FUMER
root['schemas']['RawLog']['properties']['type']['enum'][2011]BBVA_MCOR
root['schemas']['RawLog']['properties']['type']['enum'][2012]BBVA_MCWN
root['schemas']['RawLog']['properties']['type']['enum'][2013]BBVA_ZEIT
root['schemas']['RawLog']['properties']['type']['enum'][2014]BBVA_CYGE
root['schemas']['RawLog']['properties']['type']['enum'][2015]BBVA_SISP_NET
root['schemas']['RawLog']['properties']['type']['enum'][2016]BBVA_CLAIM_CENTER
root['schemas']['RawLog']['properties']['type']['enum'][2017]BBVA_SAIT
root['schemas']['RawLog']['properties']['type']['enum'][2018]BBVA_SPWEB
root['schemas']['RawLog']['properties']['type']['enum'][2019]BBVA_VALIDADOR
root['schemas']['RawLog']['properties']['type']['enum'][2020]BBVA_GUIA
root['schemas']['RawLog']['properties']['type']['enum'][2021]BBVA_HECO
root['schemas']['RawLog']['properties']['type']['enum'][2022]GL_TRADE
root['schemas']['RawLog']['properties']['type']['enum'][2023]ORACLE_AVDF
root['schemas']['RawLog']['properties']['type']['enum'][2024]REBLAZE_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2025]VZ_MAXMIND_GEOIP
root['schemas']['RawLog']['properties']['type']['enum'][2026]TT002_EXASOL
root['schemas']['RawLog']['properties']['type']['enum'][2027]CORERO_SMARTWALL_ONE
root['schemas']['RawLog']['properties']['type']['enum'][2028]AVEPOINT_ENPOWER
root['schemas']['RawLog']['properties']['type']['enum'][2029]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['RawLog']['properties']['type']['enum'][2030]GITHUB_DEPENDABOT
root['schemas']['RawLog']['properties']['type']['enum'][2031]AWS_EKS
root['schemas']['RawLog']['properties']['type']['enum'][2032]THALES_PS10K_HSM
root['schemas']['RawLog']['properties']['type']['enum'][2033]F5_DCS_WAF
root['schemas']['RawLog']['properties']['type']['enum'][2034]CLOUDWAVE_HONEYPOT
root['schemas']['RawLog']['properties']['type']['enum'][2035]PAN_PRISMA_CWP
root['schemas']['RawLog']['properties']['type']['enum'][2036]FORTINET_FORTISASE
root['schemas']['RawLog']['properties']['type']['enum'][2037]MICROSTRATEGY
root['schemas']['RawLog']['properties']['type']['enum'][2038]AWS_DASHA
root['schemas']['RawLog']['properties']['type']['enum'][2039]ONETRUST
root['schemas']['RawLog']['properties']['type']['enum'][2040]NETWRIX_PRIVILEGE_SECURE
root['schemas']['RawLog']['properties']['type']['enum'][2041]SANGFOR_PROXY
root['schemas']['RawLog']['properties']['type']['enum'][2044]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['RawLog']['properties']['type']['enum'][2047]SNF_SDH
root['schemas']['RawLog']['properties']['type']['enum'][2052]SOFTETHER_VPN
root['schemas']['RawLog']['properties']['type']['enum'][2055]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2065]UNICO_IDCLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2066]UNICO_IDTRUST
root['schemas']['RawLog']['properties']['type']['enum'][2085]WING_SECURITY
root['schemas']['RawLog']['properties']['type']['enum'][2087]WSGC_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2088]ZERO_NETWORKS
root['schemas']['RawLog']['properties']['type']['enum'][2101]JUNIPER_SSR_CONDUCTOR
root['schemas']['RawLog']['properties']['type']['enum'][2102]INFORMATICA_POWERCENTER
root['schemas']['RawLog']['properties']['type']['enum'][2113]EXTERRO_FTK_CENTRAL
root['schemas']['RawLog']['properties']['type']['enum'][2114]CROWDSTRIKE_RECON
root['schemas']['RawLog']['properties']['type']['enum'][2115]CLOUDFLARE_PAGESHIELD
root['schemas']['RawLog']['properties']['type']['enum'][2116]FORTRA_VM
root['schemas']['RawLog']['properties']['type']['enum'][2117]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['RawLog']['properties']['type']['enum'][2118]RAPID_IDENTITY
root['schemas']['RawLog']['properties']['type']['enum'][2119]SLSFR_VERTEX_IOC
root['schemas']['RawLog']['properties']['type']['enum'][2120]ARCDA_VISTA
root['schemas']['RawLog']['properties']['type']['enum'][2121]PRMTH_WSO2
root['schemas']['RawLog']['properties']['type']['enum'][2122]MC001_CLICKS_ENTERPAT
root['schemas']['RawLog']['properties']['type']['enum'][2123]MC001_CLICKS_CLIUSERS
root['schemas']['RawLog']['properties']['type']['enum'][2124]MC001_ROSHTOV_CLICKS
root['schemas']['RawLog']['properties']['type']['enum'][2125]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['RawLog']['properties']['type']['enum'][2126]MC001_MACCABI_PHARMACY
root['schemas']['RawLog']['properties']['type']['enum'][2127]SPACELIFT
root['schemas']['RawLog']['properties']['type']['enum'][2128]PAVE
root['schemas']['RawLog']['properties']['type']['enum'][2129]MC001_MACCABI_NEW_APP
root['schemas']['RawLog']['properties']['type']['enum'][2130]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2131]MC001_OFEK_EITAN
root['schemas']['RawLog']['properties']['type']['enum'][2132]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2133]MC001_MACCABI_ONLINE_LOGS
root['schemas']['RawLog']['properties']['type']['enum'][2134]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['RawLog']['properties']['type']['enum'][2135]CPS_JED_JCD_METRIC
root['schemas']['RawLog']['properties']['type']['enum'][2136]H_ISAC
root['schemas']['RawLog']['properties']['type']['enum'][2137]IIJ_LANSCOPE
root['schemas']['RawLog']['properties']['type']['enum'][2138]ML009_MENLO
root['schemas']['RawLog']['properties']['type']['enum'][2429]BBVA_CUSTODIA
root['schemas']['RawLog']['properties']['type']['enum'][2430]BBVA_CREDIT_VW
root['schemas']['RawLog']['properties']['type']['enum'][2431]BBVA_CREDIT
root['schemas']['RawLog']['properties']['type']['enum'][2494]BBVA_WALLSTREET
root['schemas']['RawLog']['properties']['type']['enum'][2496]INFORMATICA
root['schemas']['RawLog']['properties']['type']['enum'][2737]MT_APPLIED_PRINT
root['schemas']['RawLog']['properties']['type']['enum'][2756]HANNA_KASEYA_IT_GLUE
root['schemas']['RawLog']['properties']['type']['enum'][2757]KNRTH_COMMONFATE
root['schemas']['RawLog']['properties']['type']['enum'][2759]PARXL_MERAKI_CLOUD
root['schemas']['RawLog']['properties']['type']['enum'][2763]PRMTH_FIRSTIQ
root['schemas']['RawLog']['properties']['type']['enum'][2764]PRMTH_PWSS
root['schemas']['RawLog']['properties']['type']['enum'][2783]RENAULT_IRN_74898
root['schemas']['RawLog']['properties']['type']['enum'][2784]RENAULT_IRN_73882
root['schemas']['RawLog']['properties']['type']['enum'][2785]RENAULT_IRN_72284
root['schemas']['RawLog']['properties']['type']['enum'][2786]RENAULT_IRN_74143
root['schemas']['RawLog']['properties']['type']['enum'][2787]RENAULT_IRN_70132
root['schemas']['RawLog']['properties']['type']['enum'][2788]RENAULT_IRN_50567
root['schemas']['RawLog']['properties']['type']['enum'][2789]RENAULT_IRN_8185
root['schemas']['RawLog']['properties']['type']['enum'][2790]RENAULT_IRN_77153
root['schemas']['RawLog']['properties']['type']['enum'][2791]RENAULT_IRN_67551
root['schemas']['RawLog']['properties']['type']['enum'][2792]RENAULT_IRN_73940
root['schemas']['RawLog']['properties']['type']['enum'][2793]RENAULT_IRN_75039
root['schemas']['RawLog']['properties']['type']['enum'][2794]RENAULT_IRN_69293
root['schemas']['RawLog']['properties']['type']['enum'][2795]RENAULT_IRN_74601
root['schemas']['RawLog']['properties']['type']['enum'][2799]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['RawLog']['properties']['type']['enum'][2812]SML_SITEMINDER_PP
root['schemas']['RawLog']['properties']['type']['enum'][2824]SNF_FORENSIC_PREFETCH
root['schemas']['RawLog']['properties']['type']['enum'][2825]SNF_FORENSIC_HAYABUSA
root['schemas']['RawLog']['properties']['type']['enum'][2864]SHOPIFY_APV
root['schemas']['RawLog']['properties']['type']['enum'][2882]SHOPIFY_SVC_INT_2
root['schemas']['RawLog']['properties']['type']['enum'][2913]VCTR727_AURUS
root['schemas']['RawLog']['properties']['type']['enum'][2946]WMT_GENAI
root['schemas']['RawLog']['properties']['type']['enum'][2968]WSGC_ECOM
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][1]Activity related to a process which does not match any other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][2]Process launch.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][3]Process injecting into another process.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][4]Process privilege escalation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][5]Process termination.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][6]Process being opened.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][7]Process loading a module.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][8]Registry event which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][9]Registry creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][10]Registry modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][11]Registry deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][12]Settings-related event which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][13]Setting creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][14]Setting modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][15]Setting deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][16]Any mutex event other than creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][17]Mutex creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][18]File event which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][19]File created.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][20]File deleted.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][21]File modified.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][22]File read.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][23]File copied. Used for file copies, for example, to a thumb drive.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][24]File opened.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][25]File moved or renamed.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][26]File synced (for example, Google Drive, Dropbox, backup).
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][27]User activity which does not match any of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][28]User login.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][29]User logout.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][30]User creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][31]User password change event.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][32]Change in user permissions.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][33]Deprecated. Used to update user info for an LDAP dump.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][34]User physically badging into a location.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][35]User deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][36]User creating a virtual resource. This is equivalent to RESOURCE_CREATION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][37]User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][38]User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][39]User initiating communication through a medium (for example, video).
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][40]User accessing a virtual resource. This is equivalent to RESOURCE_READ.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][41]User deleting a virtual resource. This is equivalent to RESOURCE_DELETION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][42]A group activity that does not fall into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][43]A group creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][44]A group deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][45]A group modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][46]Email messages
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][47]An email transaction.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][48]Deprecated: use NETWORK_HTTP instead. An email URL click event.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][49]A network event that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][50]Aggregated flow stats like netflow.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][51]Network connection details like from a FW.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][52]FTP telemetry.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][53]DHCP payload.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][54]DNS payload.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][55]HTTP telemetry.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][56]SMTP telemetry.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][57]A status message that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][58]Heartbeat indicating product is alive.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][59]An agent startup.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][60]An agent shutdown.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][61]A software or fingerprint update.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][62]Scan item that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][63]A file scan.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][64]Scan process behaviors. Please use SCAN_PROCESS instead.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][65]Scan process.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][66]Scan results from scanning an entire host device for threats/sensitive documents.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][67]Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan).
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][68]Vulnerability scan logs about network vulnerabilities.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][69]Scan network for suspicious activity
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][70]Scheduled task event that does not fall into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][71]Scheduled task creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][72]Scheduled task deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][73]Scheduled task being enabled.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][74]Scheduled task being disabled.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][75]Scheduled task being modified.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][76]A system audit log event that is not a wipe.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][77]A system audit log wipe.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][78]Service event that does not fit into one of the other event types.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][79]A service creation.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][80]A service deletion.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][81]A service start.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][82]A service stop.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][83]A service modification.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][84]Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][85]The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][86]The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][87]The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][88]The resource was read. This is equivalent to USER_RESOURCE_ACCESS.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][89]The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][90]Firmware update.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][91]Configuration update.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][92]A program or application uploaded to a device.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][93]A program or application downloaded to a device.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][94]Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][95]Analyst update about the Reputation (such as useful or not useful) of a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][96]Analyst update about the Severity score (0-100) of a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][97]Analyst update about the finding status.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][98]Analyst addition of a comment for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][99]Analyst update about the priority (such as low, medium, or high) for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][100]Analyst update about the root cause for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][101]Analyst update about the reason (such as malicious or not malicious) for a finding.
root['schemas']['RawLogEventInformation']['properties']['eventType']['enumDescriptions'][102]Analyst update about the risk score (0-100) of a finding.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][1]The registry value is not set and only the key exists.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][2]A null-terminated string.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][3]A null-terminated string that contains unexpanded references to environment variables
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][4]Binary data in any form.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][5]A 32-bit number.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][6]A 32-bit number in little-endian format.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][7]A 32-bit number in big-endian format.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][8]A null-terminated Unicode string that contains the target path of a symbolic link.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][9]A sequence of null-terminated strings, terminated by an empty string
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][10]A device driver resource list.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][11]A 64-bit number.
root['schemas']['Registry']['properties']['registryValueType']['enumDescriptions'][12]A 64-bit number in little-endian format.
root['schemas']['Relation']['properties']['direction']['enumDescriptions'][1]Modeled in both directions. Primary entity (a) to related entity (b) and related entity (b) to primary entity (a).
root['schemas']['Relation']['properties']['direction']['enumDescriptions'][2]Modeled in a single direction. Primary entity (a) to related entity (b).
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][1]The Noun represents a principal type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][2]The Noun represents a target type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][3]The Noun represents an observer type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][4]The Noun represents src type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][5]The Noun represents a network type object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][6]The Noun represents a SecurityResult object.
root['schemas']['Relation']['properties']['entityLabel']['enumDescriptions'][7]The Noun represents an intermediary type object.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][1]An asset, such as workstation, laptop, phone, virtual machine, etc.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][2]User.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][3]Group.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][4]Resource.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][5]An external IP address.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][6]A file.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][7]A domain.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][8]A url.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][9]A mutex.
root['schemas']['Relation']['properties']['entityType']['enumDescriptions'][10]A metric.
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][1]Related entity is owned by the primary entity (e.g. user owns device asset).
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][2]Related entity is administered by the primary entity (e.g. user administers a group).
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][3]Primary entity is a member of the related entity (e.g. user is a member of a group).
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][4]Primary entity may have executed the related entity.
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][5]Primary entity may have been downloaded from the related entity.
root['schemas']['Relation']['properties']['relationship']['enumDescriptions'][6]Primary entity contacts the related entity.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][1]Mutex.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][2]Task.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][3]Named pipe.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][4]Device.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][5]Firewall rule.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][6]Mailbox folder.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][7]VPC Network.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][8]Virtual machine.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][9]Storage bucket.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][10]Storage object.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][11]Database.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][12]Data table.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][13]Cloud project.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][14]Cloud organization.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][15]Service account.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][16]Access policy.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][17]Cluster.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][18]Settings.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][19]Dataset.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][20]Endpoint that receive traffic from a load balancer or proxy.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][21]Pod, which is a collection of containers. Often used in Kubernetes.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][22]Container.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][23]Cloud function.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][24]Runtime.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][25]IP address.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][26]Disk.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][27]Volume.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][28]Machine image.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][29]Snapshot.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][30]Repository.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][31]Credential, e.g. access keys, ssh keys, tokens, certificates.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][32]Load balancer.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][33]Gateway.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][34]Subnet.
root['schemas']['Resource']['properties']['resourceType']['enumDescriptions'][35]User.
root['schemas']['ResponsePlatformInfo']['properties']['responsePlatformType']['enumDescriptions'][1]Siemplify
root['schemas']['Role']['properties']['type']['enumDescriptions'][1]Product administrator with elevated privileges.
root['schemas']['Role']['properties']['type']['enumDescriptions'][2]System service account for automated privilege access.
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][90]TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][91]FRONT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][92]DBDEV_ZOOM_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][94]VUHL_SO_IDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][95]AWS_LAMBDA_FUNCTION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][96]MASMOVIL_GENERIC_CSV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][97]MASMOVIL_GENERIC_JSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][98]MASMOVIL_GENERIC_SYSLOG_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][99]MASMOVIL_GENERIC_KV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][100]MASMOVIL_GENERIC_XML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][101]MASMOVIL_GENERIC_SYSLOGKV_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][102]MASMOVIL_GENERIC_SYSLOGJSON_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][103]MASMOVIL_GENERIC_SYSLOGXML_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][104]MASMOVIL_GENERIC_LEEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][105]MASMOVIL_GENERIC_CEF_1
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][221]TEHTRIS_EDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][222]PLUMFINTECH_PLUM_BACKOFFICE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][223]GCLDW_CLODWAVE_HIDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][243]CYNERIO_NDR_H
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][282]WIREGUARD_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][290]CLAVISTER_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][427]PROOFPOINT_IDENTITY_THREAT_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][467]VICARIUS_VRX_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][603]FORTINET_ADC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][622]HUAWEI_WIRELESS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][627]AZURE_VNET_FLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][629]CISCO_NETFLOW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][641]BELDEN_SWITCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][666]HP_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][681]VELOCLOUD_SDWAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][708]TRENDMICRO_VISION_ONE_ACTIVITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][709]TRENDMICRO_VISION_ONE_DETECTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][710]TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][745]TRELLIX_HX_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][807]RAVEN_DB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][827]AZURE_RISKY_USERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][828]AZURE_RISK_EVENTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][829]AZURE_SERVICE_PRINCIPAL_LOGINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][859]D_OPENPATH_CONTEXT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][873]CIP_FASTWEB_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][947]SOLIDSERVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][990]HLX_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][991]CMB_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1013]WFA_FASTWEB_LOG
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1020]PINGONE_AIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1021]PINGONE_PROTECT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1129]FRCPT_FORCEPOINT_MAILCONTROL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1130]FOXPASS_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1131]DRAYTEK_ROUTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1132]CHROMEOS_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1133]VECTRA_XDR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1134]METABASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1135]HUAWEI_FUSIONSPHERE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1136]HUAWEI_FIREWALL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1281]MY_SAILPOINT_LIFECYCLE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1366]ONEIDENTITY_SAFEGUARD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1399]CLICKHOUSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1422]JOBLOGIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1461]ZOHO_ASSIST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1483]OPENTEXT_CORDY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1526]CLOUDFLARE_NETWORK_ANALYTICS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1556]CROWDSTRIKE_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1625]JAMF_TELEMETRY_V2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1820]IBM_SENSE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1829]RQOVBLQO_JITTERBIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1830]RQIHENBY_AIC_JIT_AUDIT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1839]ACN_SIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1840]ARCON_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1843]ARCDA_COREWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1844]IBM_SVA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1848]AUTODESK_CAD_CAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1850]FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1857]BLUE_VOYANT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1858]BBVA_MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1864]CAMEYO_ACTIVITY_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1872]CISCO_VULNERABILITY_MANAGEMENT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1874]CMMRZ_FORTI_DECEPTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1875]CSG_CITRIX_RX
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1876]EQIX_CONFIGURATION_BUILDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1879]D_STORMBREAKER_ALERTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1880]D_STORMBREAKER_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1891]FA_SOLUTIONS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1892]FILES_DOT_COM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1893]FINCOMUN_ORACLE_SPEI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1900]GHANGOR_DLP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1905]NETLIFY_LOGDRAINS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1916]GDLP_ATLAS_USER_ELEVATION
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1922]HSCR_ACCOUNTS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1923]HILLSTONE_NGFW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1924]HOXHUNT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1926]MC001_ELASTIC_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1933]INTEL_EMA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1939]INDUSFACE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1950]MLL001_MOL_AGYIEUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1951]MLL001_MOL_SFTPGO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1952]MLL001_MOL_PCI_DC_CARDHOLDER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1953]MLL001_MOL_PCI_DC_MANDATES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1954]MLL001_MOL_PCI_DC_SAD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1955]MLL001_MOL_PCI_DB_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1956]MLL001_MOL_PCI_GKE_FIM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1957]MLL001_MOL_PCI_IIN_LOOKUP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1958]MLL001_MOL_PCI_PCI_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1959]MLL001_MOL_PCI_TOKENISER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1974]PINGCAP_TIDB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1975]PLUMFINTECH_PLUM_SCA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1979]PRIVACY_I
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1984]JIRANSECURITY_MAILSCREEN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1985]MY_RESOLVER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1986]REVIVESEC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1989]BRDCM_IMS_PAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1990]BBVA_BANKTRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1991]BBVA_CONSORES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1992]RQTI0LIH_VERVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1993]RQTI0LIH_ONEHUB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1994]RQTI0LIH_EPI_MES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1995]WIZ_RUNTIME_EXECUTION_DATA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1996]SAP_LEASING
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1997]BBVA_SIRE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1998]BBVA_POWER_CURVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1999]BBVA_SMARTSTREAM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2000]BBVA_SOLUCIONES
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2001]BBVA_TEXSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2002]PAN_PRISMA_DIG_CLOUD_DSPM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2003]BBVA_SIIBE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2004]BBVA_MBOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2005]BBVA_SINBA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2006]BBVA_MSDP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2007]BBVA_PLUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2008]BBVA_CAIRO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2009]BBVA_SICOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2010]BBVA_FUMER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2011]BBVA_MCOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2012]BBVA_MCWN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2013]BBVA_ZEIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2014]BBVA_CYGE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2015]BBVA_SISP_NET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2016]BBVA_CLAIM_CENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2017]BBVA_SAIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2018]BBVA_SPWEB
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2019]BBVA_VALIDADOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2020]BBVA_GUIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2021]BBVA_HECO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2022]GL_TRADE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2023]ORACLE_AVDF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2024]REBLAZE_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2025]VZ_MAXMIND_GEOIP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2026]TT002_EXASOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2027]CORERO_SMARTWALL_ONE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2028]AVEPOINT_ENPOWER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2029]AVIGILON_AVA_SECURITY_CAMERA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2030]GITHUB_DEPENDABOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2031]AWS_EKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2032]THALES_PS10K_HSM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2033]F5_DCS_WAF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2034]CLOUDWAVE_HONEYPOT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2035]PAN_PRISMA_CWP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2036]FORTINET_FORTISASE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2037]MICROSTRATEGY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2038]AWS_DASHA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2039]ONETRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2040]NETWRIX_PRIVILEGE_SECURE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2041]SANGFOR_PROXY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2044]SLSFR001_CSOC_SIEM_PLATFORM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2047]SNF_SDH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2052]SOFTETHER_VPN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2055]TLFNC003_TE_IDENTITY_ENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2065]UNICO_IDCLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2066]UNICO_IDTRUST
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2085]WING_SECURITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2087]WSGC_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2088]ZERO_NETWORKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2101]JUNIPER_SSR_CONDUCTOR
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2102]INFORMATICA_POWERCENTER
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2113]EXTERRO_FTK_CENTRAL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2114]CROWDSTRIKE_RECON
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2115]CLOUDFLARE_PAGESHIELD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2116]FORTRA_VM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2117]GCP_CLOUD_ASSET_INVENTORY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2118]RAPID_IDENTITY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2119]SLSFR_VERTEX_IOC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2120]ARCDA_VISTA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2121]PRMTH_WSO2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2122]MC001_CLICKS_ENTERPAT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2123]MC001_CLICKS_CLIUSERS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2124]MC001_ROSHTOV_CLICKS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2125]MC001_INFOSEC_BLOCK_TOOL
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2126]MC001_MACCABI_PHARMACY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2127]SPACELIFT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2128]PAVE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2129]MC001_MACCABI_NEW_APP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2130]MC001_PORTAL_APPLICATION_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2131]MC001_OFEK_EITAN
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2132]MC001_MACCABI_ONLINE_SUPPORT_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2133]MC001_MACCABI_ONLINE_LOGS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2134]MC001_MACCABI_ONLINE_FAMILY
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2135]CPS_JED_JCD_METRIC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2136]H_ISAC
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2137]IIJ_LANSCOPE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2138]ML009_MENLO
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2429]BBVA_CUSTODIA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2430]BBVA_CREDIT_VW
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2431]BBVA_CREDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2494]BBVA_WALLSTREET
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2496]INFORMATICA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2737]MT_APPLIED_PRINT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2756]HANNA_KASEYA_IT_GLUE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2757]KNRTH_COMMONFATE
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2759]PARXL_MERAKI_CLOUD
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2763]PRMTH_FIRSTIQ
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2764]PRMTH_PWSS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2783]RENAULT_IRN_74898
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2784]RENAULT_IRN_73882
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2785]RENAULT_IRN_72284
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2786]RENAULT_IRN_74143
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2787]RENAULT_IRN_70132
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2788]RENAULT_IRN_50567
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2789]RENAULT_IRN_8185
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2790]RENAULT_IRN_77153
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2791]RENAULT_IRN_67551
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2792]RENAULT_IRN_73940
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2793]RENAULT_IRN_75039
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2794]RENAULT_IRN_69293
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2795]RENAULT_IRN_74601
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2799]RQ5XB66T_PINGCAP_TIDB_DB_AUDIT
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2812]SML_SITEMINDER_PP
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2824]SNF_FORENSIC_PREFETCH
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2825]SNF_FORENSIC_HAYABUSA
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2864]SHOPIFY_APV
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2882]SHOPIFY_SVC_INT_2
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2913]VCTR727_AURUS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2946]WMT_GENAI
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2968]WSGC_ECOM
root['schemas']['SearchHistory']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchHistory']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SearchQuery']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['SearchQuery']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][1]Allowed.
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][2]Blocked.
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][3]Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][4]Put somewhere for later analysis (does NOT imply block).
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][5]Failed (e.g. the event was allowed but failed).
root['schemas']['SecurityResult']['properties']['action']['items']['enumDescriptions'][6]Challenged (e.g. the user was challenged by a Captcha, 2FA).
root['schemas']['SecurityResult']['properties']['alertState']['enumDescriptions'][1]The security result is not an alert.
root['schemas']['SecurityResult']['properties']['alertState']['enumDescriptions'][2]The security result is an alert.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][1]Malware, spyware, rootkit.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][2]Below the conviction threshold; probably bad.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][3]Potentially Unwanted App (such as adware).
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][4]Includes C&C or network exploit.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][5]Suspicious activity, such as potential reverse tunnel.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][6]Non-security related: URL has category like gambling or porn.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][7]DoS, DDoS.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][8]Port scan detected by an IDS, probing of web app.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][9]If we know this is a C&C channel.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][10]Unauthorized access attempted, including attempted access to files, web services, processes, web objects, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][11]Authentication failed (e.g. bad password or bad 2-factor authentication).
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][12]Exploit: For all manner of exploits including attempted overflows, bad protocol encodings, ROP, SQL injection, etc. For both network and host- based exploits.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][13]DLP: Sensitive data transmission, copy to thumb drive.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][14]DLP: Sensitive data found at rest in a scan.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][15]Attempt to destroy/delete data.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][16]TOR Exit Nodes.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][17]Spam email, message, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][18]Phishing email, chat messages, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][19]Spoofed source email address, etc.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][20]Security-related policy violation (e.g. firewall/proxy/HIPS rule violated, NAC block action).
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][21]Threats which manipulate to break normal security procedures.
root['schemas']['SecurityResult']['properties']['category']['items']['enumDescriptions'][22]Phishing pages, pops, https phishing etc.
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][1]Low confidence.
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][2]Medium confidence.
root['schemas']['SecurityResult']['properties']['confidence']['enumDescriptions'][3]High confidence.
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][1]Low priority.
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][2]Medium priority.
root['schemas']['SecurityResult']['properties']['priority']['enumDescriptions'][3]High priority.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][1]Info severity.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][2]An error.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][3]No malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][4]Low-severity malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][5]Medium-severity malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][6]High-severity malicious result.
root['schemas']['SecurityResult']['properties']['severity']['enumDescriptions'][7]Critical-severity malicious result.
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][1]Ingested Raw telemetry
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][2]Chronicle Rules engine
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][3]Uppercase
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][4]DSML - Machine Intelligence
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][5]A normalized telemetry event from Google Security Command Center.
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][6]Unspecified Namespace
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][7]An alert coming from other SIEMs via Chronicle SOAR.
root['schemas']['SecurityResult']['properties']['threatIdNamespace']['enumDescriptions'][8]VirusTotal.
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][1]Active threat.
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][2]Cleared threat.
root['schemas']['SecurityResult']['properties']['threatStatus']['enumDescriptions'][3]False positive.
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][1]Undetected threat verdict level.
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][2]Suspicious threat verdict level.
root['schemas']['SecurityResult']['properties']['threatVerdict']['enumDescriptions'][3]Malicious threat verdict level.
root['schemas']['Source']['properties']['quality']['enumDescriptions'][1]Low confidence.
root['schemas']['Source']['properties']['quality']['enumDescriptions'][2]Medium confidence.
root['schemas']['Source']['properties']['quality']['enumDescriptions'][3]High confidence.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][1]A human account part of some domain in directory services.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][2]A local machine account.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][3]A SaaS service account type (such as Slack or GitHub).
root['schemas']['User']['properties']['accountType']['enumDescriptions'][4]A non-human account for data access.
root['schemas']['User']['properties']['accountType']['enumDescriptions'][5]A system built in default account.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][1]The authentication method is in active state.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][2]The authentication method is in suspended/disabled state.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][3]The authentication method has no active credentials.
root['schemas']['User']['properties']['userAuthenticationStatus']['enumDescriptions'][4]The authentication method has been deleted.
root['schemas']['User']['properties']['userRole']['enumDescriptions'][1]Product administrator with elevated privileges.
root['schemas']['User']['properties']['userRole']['enumDescriptions'][2]System service account for automated privilege access. Deprecated: not a role, instead set User.account_type.
root['schemas']['UserError']['properties']['reason']['enum'][15]INVALID_CONFIG_FOR_DASHBOARD_IMPORT
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][15]Invalid config for dashboard import. Example ErrorInfo: { "reason": "INVALID_CONFIG_FOR_DASHBOARD_IMPORT", "domain": "chronicle.googleapis.com", }
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][1]Allowed.
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][2]Blocked.
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][3]Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][4]Put somewhere for later analysis (does NOT imply block).
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][5]Failed (e.g. the event was allowed but failed).
root['schemas']['UserEvent']['properties']['eventOutcome']['enumDescriptions'][6]Challenged (e.g. the user was challenged by a Captcha, 2FA).
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enum'][5]QUERY_TYPE_DATA_TABLE_QUERY
root['schemas']['ValidateQueryResponse']['properties']['queryType']['enumDescriptions'][5]DataTable Query.
root['schemas']['VerdictInfo']['properties']['verdictResponse']['enumDescriptions'][1]VerdictResponse resulted a threat as malicious.
root['schemas']['VerdictInfo']['properties']['verdictResponse']['enumDescriptions'][2]VerdictResponse resulted a threat as benign.
root['schemas']['VerdictInfo']['properties']['verdictType']['enumDescriptions'][1]MLVerdict result provided from threat providers, like Mandiant. These fields are used to model Mandiant sources.
root['schemas']['VerdictInfo']['properties']['verdictType']['enumDescriptions'][2]Verdict provided by the human analyst. These fields are used to model Mandiant sources.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][1]Low severity.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][2]Medium severity.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][3]High severity.
root['schemas']['Vulnerability']['properties']['severity']['enumDescriptions'][4]Critical severity.
iterable_item_removed
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][1919]WSGC_WSI_EGIFT_CARDS
root['schemas']['IoCDiscoveryInfo']['properties']['logType']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['RawLog']['properties']['type']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['RawLog']['properties']['type']['enum'][1919]WSGC_WSI_EGIFT_CARDS
root['schemas']['RawLog']['properties']['type']['enum'][2739]WSGC_WSI_ECOM
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1779]ALGBRA_FORM3_SARIF
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][1919]WSGC_WSI_EGIFT_CARDS
root['schemas']['SIEventData']['properties']['rawLogType']['enum'][2739]WSGC_WSI_ECOM
prod/us-chronicle-v1beta
dictionary_item_added
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['operations']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['referenceLists']
  • root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['rules']
  • root['schemas']['CancelOperationRequest']
  • root['schemas']['CompilationDiagnostic']
  • root['schemas']['CompilationPosition']
  • root['schemas']['ListOperationsResponse']
  • root['schemas']['ListReferenceListsResponse']
  • root['schemas']['ListRetrohuntsResponse']
  • root['schemas']['ListRuleDeploymentsResponse']
  • root['schemas']['ListRuleRevisionsResponse']
  • root['schemas']['ListRulesResponse']
  • root['schemas']['Operation']
  • root['schemas']['ReferenceList']
  • root['schemas']['ReferenceListEntry']
  • root['schemas']['ReferenceListScope']
  • root['schemas']['Retrohunt']
  • root['schemas']['Rule']
  • root['schemas']['RuleDeployment']
  • root['schemas']['ScopeInfo']
  • root['schemas']['Severity']
  • root['schemas']['Status']
values_changed
root['resources']['projects']['resources']['locations']['resources']['instances']['resources']['dataAccessLabels']['methods']['create']['parameters']['dataAccessLabelId']['description']
new_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments
old_valueRequired. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.
root['revision']
new_value20250213
old_value20241212
root['schemas']['DataAccessScope']['properties']['allowedDataAccessLabels']['description']
new_valueOptional. The allowed labels for the scope. Either allow_all or allowed_data_access_labels needs to be provided. When provided, there has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
old_valueRequired. The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allow_all or allowed_data_access_labels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B).
root['schemas']['Instance']['properties']
new_value
customerCode
descriptionAn acronym related to the company name.
typestring
displayName
descriptionThe display name of the instance.
typestring
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
secopsUrls
descriptionURL of the SecOps instance for the instance. https://.backstory.chronicle.security
items
typestring
typearray
old_value
name
descriptionOutput only. The resource name of this instance. Format: projects/{project}/locations/{region}/instances/{instance}
readOnlyTrue
typestring
wipeoutStatus
descriptionOutput only. The wipeout status of the instance.
enum
  • WIPEOUT_STATE_UNSPECIFIED
  • DELETE_REQUESTED
  • SOFT_DELETE_IN_PROGRESS
  • SOFT_DELETE_COMPLETED
  • UNDELETE_REQUESTED
  • DATA_DELETION_IN_PROGRESS
  • ERROR
  • WIPED_OUT
  • UNDELETE_COMPLETED
enumDescriptions
  • The default value.
  • The instance has requested deletion.
  • The instance is in the process of being soft-deleted.
  • The instance has been soft-deleted.
  • The instance has requested undeletion.
  • The instance is in the process of being data deleted.
  • The instance has an error during wipeout.
  • The instance has been wiped out.
  • The instance has been undeleted.
readOnlyTrue
typestring
iterable_item_added
root['schemas']['UserError']['properties']['reason']['enum'][15]INVALID_CONFIG_FOR_DASHBOARD_IMPORT
root['schemas']['UserError']['properties']['reason']['enum'][16]RETROHUNT_LIMIT_REACHED
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][15]Invalid config for dashboard import. Example ErrorInfo: { "reason": "INVALID_CONFIG_FOR_DASHBOARD_IMPORT", "domain": "chronicle.googleapis.com", }
root['schemas']['UserError']['properties']['reason']['enumDescriptions'][16]The user has reached the limit of retrohunts that can be run. Returns the retrohunt limit as metadata labeled `retrohunt_limit`. Example ErrorInfo: { "reason": "RETROHUNT_LIMIT_REACHED", "domain": "chronicle.googleapis.com", "metadata": { "retrohunt_limit": "10", } }
prod/us-rbmopenmaap-
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/us-rbmopenmaap-v1
values_changed
root['revision']
new_value20250224
old_value20250220
iterable_item_added
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enum'][11]PDF_IN_RICH_CARDS
root['schemas']['GoogleCommunicationsRbmopenmaapV1Capabilities']['properties']['features']['items']['enumDescriptions'][11]PDF support in rich cards.
prod/us-west2-connectgateway-
values_changed
root['revision']
new_value20250221
old_value20250210
prod/us-west2-connectgateway-v1
values_changed
root['revision']
new_value20250221
old_value20250210
prod/us-west2-connectgateway-v1beta1
values_changed
root['revision']
new_value20250221
old_value20250210
prod/us-west2-containerfilesystem-
values_changed
root['revision']
new_value20250221
old_value20250214
prod/us-west2-containerfilesystem-v1
values_changed
root['revision']
new_value20250221
old_value20250214
prod/vectortile-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/vectortile-v1
values_changed
root['revision']
new_value20250223
old_value20250219
prod/workloadcertificate-v1alpha1
values_changed
root['revision']
new_value20240103
old_value20240117
prod/workspaceui-pa-
values_changed
root['revision']
new_value20250219
old_value20250217
prod/workspaceui-pa-v1
values_changed
root['revision']
new_value20250219
old_value20250217
prod/workspacevideo-pa-
values_changed
root['revision']
new_value20250223
old_value20250219
prod/workspacevideo-pa-v1
values_changed
root['revision']
new_value20250223
old_value20250219