Stay organized with collections
Save and categorize content based on your preferences.
Change log for CHECKPOINT_EDR
Date
Changes
2024-05-09
Enhancement- Parsed logs with "event_type" as "empty".
- Added support for the MEPP, Compliance, Anti-Malware, and Threat Emulation
logs.
2022-09-07
Enhancement- Parsed logs with event_type as "empty".
- mapped "client_ip" to "event.edr.network.target_ip".
- mapped "origin" to "event.edr.network.target_ip" if client_ip empty.
- mapped "subject" to "event.edr.task.task_name".
- mapped "host_name" to "event.edr.client.hostname".
- mapped "ifdir" to "event.edr.network.direction".
