Nodes (1370)
Edges (4757)
| Kind | Label | ID |
|---|---|---|
| session | SESSION-3e3c709edf1079fc | SESSION-3e3c709edf1079fc |
| protocol_event | pe:rst:SESSION-a0fbe20e4ac0f4d3 | pe:rst:SESSION-a0fbe20e4ac0f |
| protocol_event | pe:syn:SESSION-7797a29b89b8d249 | pe:syn:SESSION-7797a29b89b8d |
| protocol_event | pe:syn:SESSION-81b2810f60d2281e | pe:syn:SESSION-81b2810f60d22 |
| session | SESSION-1a93562b893b2626 | SESSION-1a93562b893b2626 |
| flow | flow:d2816298a0eb | flow:d2816298a0eb |
| session | SESSION-77e243320ed4d165 | SESSION-77e243320ed4d165 |
| session | SESSION-47402bb96fc62638 | SESSION-47402bb96fc62638 |
| protocol_event | pe:tls:SESSION-33e31c033c3d8716 | pe:tls:SESSION-33e31c033c3d8 |
| flow | flow:605de78c6497 | flow:605de78c6497 |
| flow | flow:3f2071544a79 | flow:3f2071544a79 |
| protocol_event | pe:tls:SESSION-dd4506c768916d68 | pe:tls:SESSION-dd4506c768916 |
| flow | flow:627e34ff0947 | flow:627e34ff0947 |
| flow | flow:f51badec7be3 | flow:f51badec7be3 |
| flow | flow:9fdfaded69a5 | flow:9fdfaded69a5 |
| flow | flow:db23f1875747 | flow:db23f1875747 |
| flow | flow:72681455babf | flow:72681455babf |
| session | SESSION-d2d05b4562ccfa42 | SESSION-d2d05b4562ccfa42 |
| protocol_event | pe:syn:SESSION-77e243320ed4d165 | pe:syn:SESSION-77e243320ed4d |
| session | SESSION-541f21aa08f1c433 | SESSION-541f21aa08f1c433 |
| flow | flow:ab25b9939fa5 | flow:ab25b9939fa5 |
| flow | flow:39938e8d6af2 | flow:39938e8d6af2 |
| flow | flow:344346126f18 | flow:344346126f18 |
| protocol_event | pe:rst:SESSION-f3d95aa1d308c418 | pe:rst:SESSION-f3d95aa1d308c |
| session | SESSION-643df6603ba5b3da | SESSION-643df6603ba5b3da |
| flow | flow:e7b90dbf34ad | flow:e7b90dbf34ad |
| protocol_event | pe:syn:SESSION-b8b120bd53397054 | pe:syn:SESSION-b8b120bd53397 |
| session | SESSION-852d5c5ce93e7e5b | SESSION-852d5c5ce93e7e5b |
| dns_name | dns:registry.npmjs.org | dns:registry.npmjs.org |
| flow | flow:87c4d335680e | flow:87c4d335680e |
| session | SESSION-253cc6bf7aec9a0f | SESSION-253cc6bf7aec9a0f |
| asn | asn:63949 | asn:63949 |
| session | SESSION-e9bdc124ee62a19d | SESSION-e9bdc124ee62a19d |
| session | SESSION-5fd8b300cf7b5469 | SESSION-5fd8b300cf7b5469 |
| session | SESSION-2d80fc95e43b1d97 | SESSION-2d80fc95e43b1d97 |
| flow | flow:6a4c410abfd4 | flow:6a4c410abfd4 |
| flow | flow:2d9f35556d52 | flow:2d9f35556d52 |
| session | SESSION-e237c937eb5442d5 | SESSION-e237c937eb5442d5 |
| flow | flow:223d1813eff9 | flow:223d1813eff9 |
| session | SESSION-f3144b0216dc32bc | SESSION-f3144b0216dc32bc |
| flow | flow:07a022cda258 | flow:07a022cda258 |
| flow | flow:ec6cd53479c4 | flow:ec6cd53479c4 |
| session | SESSION-ceafe1cd4a4862ac | SESSION-ceafe1cd4a4862ac |
| protocol_event | pe:tls:SESSION-d2d05b4562ccfa42 | pe:tls:SESSION-d2d05b4562ccf |
| session | SESSION-5a050de7c4739ca8 | SESSION-5a050de7c4739ca8 |
| flow | flow:236d7db32acc | flow:236d7db32acc |
| session | SESSION-a19bb3d3c0c92e28 | SESSION-a19bb3d3c0c92e28 |
| protocol_event | pe:syn:SESSION-5fd8b300cf7b5469 | pe:syn:SESSION-5fd8b300cf7b5 |
| protocol_event | pe:tls:SESSION-69cda01d55c81516 | pe:tls:SESSION-69cda01d55c81 |
| session | SESSION-a2c976a45bf1d73c | SESSION-a2c976a45bf1d73c |
| session | SESSION-b489fae0b0e232f4 | SESSION-b489fae0b0e232f4 |
| session | SESSION-a16534aafb8f2dda | SESSION-a16534aafb8f2dda |
| session | SESSION-bf1f54f07fcdaf92 | SESSION-bf1f54f07fcdaf92 |
| session | SESSION-cfa8fa920121a620 | SESSION-cfa8fa920121a620 |
| session | SESSION-e3aa5aaf996f7e23 | SESSION-e3aa5aaf996f7e23 |
| host | 151.101.114.49 | host:151.101.114.49 |
| session | SESSION-f6a3c154353f22c7 | SESSION-f6a3c154353f22c7 |
| session | SESSION-84e95c448ec91d4e | SESSION-84e95c448ec91d4e |
| protocol_event | pe:tls:SESSION-31dd02f438570b2c | pe:tls:SESSION-31dd02f438570 |
| session | SESSION-7d3ce1442bd64608 | SESSION-7d3ce1442bd64608 |
| session | SESSION-15343069d83ab736 | SESSION-15343069d83ab736 |
| flow | flow:16668066f25c | flow:16668066f25c |
| host | 192.200.0.112 | host:192.200.0.112 |
| flow | flow:7f4041470b2f | flow:7f4041470b2f |
| protocol_event | pe:syn:SESSION-a78a6b784715a578 | pe:syn:SESSION-a78a6b784715a |
| session | SESSION-c4468fb3ff6eb8d7 | SESSION-c4468fb3ff6eb8d7 |
| protocol_event | pe:syn:SESSION-d9a9efb4c9de80c9 | pe:syn:SESSION-d9a9efb4c9de8 |
| protocol_event | pe:syn:SESSION-80db58924ce452e6 | pe:syn:SESSION-80db58924ce45 |
| flow | flow:4a1d8db80cc9 | flow:4a1d8db80cc9 |
| flow | flow:016f56d199e1 | flow:016f56d199e1 |
| flow | flow:573c4ec36fb2 | flow:573c4ec36fb2 |
| flow | flow:b80b7c4037c1 | flow:b80b7c4037c1 |
| protocol_event | pe:tls:SESSION-2a28fc9acd0444ed | pe:tls:SESSION-2a28fc9acd044 |
| session | SESSION-94e1b9064e953280 | SESSION-94e1b9064e953280 |
| dns_name | dns:Mommabear._airplay._tcp.local | dns:Mommabear._airplay._tcp. |
| behavior_group | BSG-BEACON-1c3d2db9fdff | BSG-BEACON-1c3d2db9fdff |
| protocol_event | pe:syn:SESSION-386fc5c4a8940d8a | pe:syn:SESSION-386fc5c4a8940 |
| flow | flow:e1119a97345a | flow:e1119a97345a |
| session | SESSION-aad0caf4f84bb929 | SESSION-aad0caf4f84bb929 |
| flow | flow:0d26eea38130 | flow:0d26eea38130 |
| session | SESSION-e7b324350b03da71 | SESSION-e7b324350b03da71 |
| protocol_event | pe:syn:SESSION-f743391fa64e6dda | pe:syn:SESSION-f743391fa64e6 |
| session | SESSION-be0c5d3c1ba55da3 | SESSION-be0c5d3c1ba55da3 |
| session | SESSION-f0e4afeb157b2485 | SESSION-f0e4afeb157b2485 |
| protocol_event | pe:syn:SESSION-c4468fb3ff6eb8d7 | pe:syn:SESSION-c4468fb3ff6eb |
| session | SESSION-c97601da71bc3113 | SESSION-c97601da71bc3113 |
| session | SESSION-e1b217a1b3c4fb86 | SESSION-e1b217a1b3c4fb86 |
| flow | flow:1b935369ad22 | flow:1b935369ad22 |
| session | SESSION-6e4a7f33ed2606fc | SESSION-6e4a7f33ed2606fc |
| session | SESSION-aa258edb0b97196c | SESSION-aa258edb0b97196c |
| host | 172.64.155.209 | host:172.64.155.209 |
| port_hub | 9200 | port:tcp:9200 |
| session | SESSION-089fb128a9024399 | SESSION-089fb128a9024399 |
| flow | flow:00953a8200dd | flow:00953a8200dd |
| flow | flow:43141c9c99a6 | flow:43141c9c99a6 |
| session | SESSION-5b2a2983c55e711f | SESSION-5b2a2983c55e711f |
| flow | flow:61986fbcf11d | flow:61986fbcf11d |
| flow | flow:077b6946d118 | flow:077b6946d118 |
| flow | flow:0d4004704816 | flow:0d4004704816 |
| host | 100.99.242.6 | host:100.99.242.6 |
| session | SESSION-630ef8ef2c5fe4d9 | SESSION-630ef8ef2c5fe4d9 |
| flow | flow:a55ecb337f64 | flow:a55ecb337f64 |
| flow | flow:9583ba021d14 | flow:9583ba021d14 |
| protocol_event | pe:syn:SESSION-3f98c500bc23b332 | pe:syn:SESSION-3f98c500bc23b |
| session | SESSION-31733c26636d009f | SESSION-31733c26636d009f |
| session | SESSION-9b28800928e44902 | SESSION-9b28800928e44902 |
| session | SESSION-1577d7a6fde62cd5 | SESSION-1577d7a6fde62cd5 |
| flow | flow:1cb9ac892fcd | flow:1cb9ac892fcd |
| flow | flow:70c0c0ebc87e | flow:70c0c0ebc87e |
| flow | flow:cdbc83a96d5a | flow:cdbc83a96d5a |
| protocol_event | pe:rst:SESSION-bca4ecacf65640da | pe:rst:SESSION-bca4ecacf6564 |
| org | Google LLC | org:Google LLC |
| protocol_event | pe:syn:SESSION-84e95c448ec91d4e | pe:syn:SESSION-84e95c448ec91 |
| protocol_event | pe:syn:SESSION-bca4ecacf65640da | pe:syn:SESSION-bca4ecacf6564 |
| flow | flow:fa3e831a93e7 | flow:fa3e831a93e7 |
| dns_name | dns:_rdlink._tcp.local | dns:_rdlink._tcp.local |
| flow | flow:65c80baf5fd0 | flow:65c80baf5fd0 |
| flow | flow:727b28f6d3df | flow:727b28f6d3df |
| flow | flow:f34ec7b981f2 | flow:f34ec7b981f2 |
| session | SESSION-d6b8c6556a103636 | SESSION-d6b8c6556a103636 |
| dns_name | dns:chatgpt.com | dns:chatgpt.com |
| session | SESSION-18e6d9b75d333359 | SESSION-18e6d9b75d333359 |
| protocol_event | pe:syn:SESSION-5cf0a55c90f3167b | pe:syn:SESSION-5cf0a55c90f31 |
| flow | flow:17106d94134d | flow:17106d94134d |
| session | SESSION-641eca54923250bf | SESSION-641eca54923250bf |
| protocol_event | pe:rst:SESSION-d619fec0a49995fc | pe:rst:SESSION-d619fec0a4999 |
| flow | flow:b79a89fb9f59 | flow:b79a89fb9f59 |
| protocol_event | pe:syn:SESSION-9b28800928e44902 | pe:syn:SESSION-9b28800928e44 |
| host | 127.0.0.1 | host:127.0.0.1 |
| session | SESSION-fa1354d2d519225e | SESSION-fa1354d2d519225e |
| protocol_event | pe:dns:SESSION-8cb7dc59d2fd7bda | pe:dns:SESSION-8cb7dc59d2fd7 |
| session | SESSION-d6955a3ff162af47 | SESSION-d6955a3ff162af47 |
| session | SESSION-86acb59dd9a6072c | SESSION-86acb59dd9a6072c |
| flow | flow:1ec8ec6b7173 | flow:1ec8ec6b7173 |
| flow | flow:6d24b2135aaa | flow:6d24b2135aaa |
| session | SESSION-b5973b80bf4a82ef | SESSION-b5973b80bf4a82ef |
| protocol_event | pe:syn:SESSION-dc4350ab7f4cc10f | pe:syn:SESSION-dc4350ab7f4cc |
| session | SESSION-63748f8b685687c8 | SESSION-63748f8b685687c8 |
| flow | flow:b0ecb83355c0 | flow:b0ecb83355c0 |
| flow | flow:2264f347a36f | flow:2264f347a36f |
| flow | flow:fa1edbfaff7c | flow:fa1edbfaff7c |
| flow | flow:a6f680c4e709 | flow:a6f680c4e709 |
| protocol_event | pe:tls:SESSION-47d9fb49c9aa85c3 | pe:tls:SESSION-47d9fb49c9aa8 |
| protocol_event | pe:rst:SESSION-0ddb798aa6541b6a | pe:rst:SESSION-0ddb798aa6541 |
| protocol_event | pe:syn:SESSION-5e5d64143f61ee6d | pe:syn:SESSION-5e5d64143f61e |
| session | SESSION-76ce08859bdf3348 | SESSION-76ce08859bdf3348 |
| protocol_event | pe:syn:SESSION-a5b322a05ae36ffa | pe:syn:SESSION-a5b322a05ae36 |
| session | SESSION-ed28a8cd564f78db | SESSION-ed28a8cd564f78db |
| protocol_event | pe:syn:SESSION-1d99eae64a5ae91c | pe:syn:SESSION-1d99eae64a5ae |
| flow | flow:39d38f344182 | flow:39d38f344182 |
| flow | flow:3785075b0fbb | flow:3785075b0fbb |
| dns_name | dns:license.fusionauth.io | dns:license.fusionauth.io |
| protocol_event | pe:rst:SESSION-d8a39d719091e9b7 | pe:rst:SESSION-d8a39d719091e |
| flow | flow:a0ceb85bb6e9 | flow:a0ceb85bb6e9 |
| flow | flow:2427081a90c5 | flow:2427081a90c5 |
| session | SESSION-0787ba78d2951264 | SESSION-0787ba78d2951264 |
| flow | flow:137f4097de90 | flow:137f4097de90 |
| flow | flow:2ce1c6435618 | flow:2ce1c6435618 |
| session | SESSION-3149632fd02a3bd4 | SESSION-3149632fd02a3bd4 |
| flow | flow:8698c6a721ef | flow:8698c6a721ef |
| flow | flow:031727ec8505 | flow:031727ec8505 |
| protocol_event | pe:syn:SESSION-bbeefb17db37e982 | pe:syn:SESSION-bbeefb17db37e |
| flow | flow:20a94b2eb426 | flow:20a94b2eb426 |
| protocol_event | pe:syn:SESSION-8bc9961984b1cd0d | pe:syn:SESSION-8bc9961984b1c |
| session | SESSION-47a0eb1fbca7572e | SESSION-47a0eb1fbca7572e |
| session | SESSION-073d084e46f38cd3 | SESSION-073d084e46f38cd3 |
| session | SESSION-67c7d633b864cad8 | SESSION-67c7d633b864cad8 |
| protocol_event | pe:syn:SESSION-5516be27696bf7e5 | pe:syn:SESSION-5516be27696bf |
| protocol_event | pe:dns:SESSION-ec75037cbaf1f9e3 | pe:dns:SESSION-ec75037cbaf1f |
| flow | flow:087d8fe36142 | flow:087d8fe36142 |
| port_hub | 5432 | port:tcp:5432 |
| protocol_event | pe:syn:SESSION-c780578a4585f135 | pe:syn:SESSION-c780578a4585f |
| protocol_event | pe:tls:SESSION-0886b7e28133f479 | pe:tls:SESSION-0886b7e28133f |
| flow | flow:aa31da2f9642 | flow:aa31da2f9642 |
| protocol_event | pe:syn:SESSION-0ac17da205ba992e | pe:syn:SESSION-0ac17da205ba9 |
| session | SESSION-69c63e4b731bf6f3 | SESSION-69c63e4b731bf6f3 |
| session | SESSION-fb99e81c109520c4 | SESSION-fb99e81c109520c4 |
| protocol_event | pe:syn:SESSION-342b731da1e7e954 | pe:syn:SESSION-342b731da1e7e |
| flow | flow:1ad363423fd6 | flow:1ad363423fd6 |
| flow | flow:317416d75971 | flow:317416d75971 |
| protocol_event | pe:syn:SESSION-641eca54923250bf | pe:syn:SESSION-641eca5492325 |
| flow | flow:829acee5ef09 | flow:829acee5ef09 |
| flow | flow:60b21fb08f1d | flow:60b21fb08f1d |
| flow | flow:6449ba3a3d04 | flow:6449ba3a3d04 |
| session | SESSION-63ddef0b57db8c7a | SESSION-63ddef0b57db8c7a |
| session | SESSION-03d868a8c094ba7f | SESSION-03d868a8c094ba7f |
| session | SESSION-9f1fad2d78ad45a7 | SESSION-9f1fad2d78ad45a7 |
| flow | flow:f75b9cd0a738 | flow:f75b9cd0a738 |
| protocol_event | pe:syn:SESSION-2784f7b2ab64e719 | pe:syn:SESSION-2784f7b2ab64e |
| session | SESSION-977b43f50d1ad72d | SESSION-977b43f50d1ad72d |
| protocol_event | pe:dns:SESSION-99c1c8593a932d53 | pe:dns:SESSION-99c1c8593a932 |
| flow | flow:6f3c6448c773 | flow:6f3c6448c773 |
| session | SESSION-e00ded900e72031a | SESSION-e00ded900e72031a |
| protocol_event | pe:syn:SESSION-aeb8d7e30bb3fb80 | pe:syn:SESSION-aeb8d7e30bb3f |
| flow | flow:ef2758f1a6e7 | flow:ef2758f1a6e7 |
| flow | flow:ed1125082c6e | flow:ed1125082c6e |
| host | 100.49.100.184 | host:100.49.100.184 |
| session | SESSION-c37133abfa09d10f | SESSION-c37133abfa09d10f |
| session | SESSION-9eabe58bb0d81d13 | SESSION-9eabe58bb0d81d13 |
| session | SESSION-d9fd6df486a37792 | SESSION-d9fd6df486a37792 |
| protocol_event | pe:syn:SESSION-d9fd6df486a37792 | pe:syn:SESSION-d9fd6df486a37 |
| session | SESSION-0ac17da205ba992e | SESSION-0ac17da205ba992e |
| session | SESSION-fc3b85f784077bc7 | SESSION-fc3b85f784077bc7 |
| protocol_event | pe:syn:SESSION-9fa012fbb0354fd7 | pe:syn:SESSION-9fa012fbb0354 |
| flow | flow:275824ec93a0 | flow:275824ec93a0 |
| protocol_event | pe:tls:SESSION-d752b703412feb8e | pe:tls:SESSION-d752b703412fe |
| flow | flow:5e4ff5eae054 | flow:5e4ff5eae054 |
| protocol_event | pe:tls:SESSION-d4d32e88a7e6a512 | pe:tls:SESSION-d4d32e88a7e6a |
| session | SESSION-9b629d94c71ad646 | SESSION-9b629d94c71ad646 |
| session | SESSION-2781fdb15bc986d6 | SESSION-2781fdb15bc986d6 |
| flow | flow:8f9c1670b484 | flow:8f9c1670b484 |
| dns_name | dns:metrics.fusionauth.io | dns:metrics.fusionauth.io |
| session | SESSION-5e5d64143f61ee6d | SESSION-5e5d64143f61ee6d |
| protocol_event | pe:syn:SESSION-8cb18c771a483b74 | pe:syn:SESSION-8cb18c771a483 |
| flow | flow:0bff1854c1ac | flow:0bff1854c1ac |
| session | SESSION-6cf553d2b91b85c9 | SESSION-6cf553d2b91b85c9 |
| flow | flow:39b740bb6ad7 | flow:39b740bb6ad7 |
| session | SESSION-68541645eb054778 | SESSION-68541645eb054778 |
| flow | flow:87eacb04644d | flow:87eacb04644d |
| session | SESSION-a13a23d4ae00df74 | SESSION-a13a23d4ae00df74 |
| session | SESSION-64aeb07268d33526 | SESSION-64aeb07268d33526 |
| flow | flow:94f89804c27d | flow:94f89804c27d |
| flow | flow:3a454bb8d055 | flow:3a454bb8d055 |
| protocol_event | pe:syn:SESSION-eca4c2a3e5fd196f | pe:syn:SESSION-eca4c2a3e5fd1 |
| flow | flow:cf376f92b81b | flow:cf376f92b81b |
| protocol_event | pe:dns:SESSION-9a53c05670838fd4 | pe:dns:SESSION-9a53c05670838 |
| protocol_event | pe:tls:SESSION-9eabe58bb0d81d13 | pe:tls:SESSION-9eabe58bb0d81 |
| session | SESSION-1925c59e3dac3e6c | SESSION-1925c59e3dac3e6c |
| session | SESSION-24e2258a1469fa10 | SESSION-24e2258a1469fa10 |
| host | 169.254.169.254 | host:169.254.169.254 |
| flow | flow:d1f128be8664 | flow:d1f128be8664 |
| session | SESSION-e465471aefdda74f | SESSION-e465471aefdda74f |
| session | SESSION-d8f3c3da2e93310b | SESSION-d8f3c3da2e93310b |
| geo_point | geo_41.60150_-93.61270 | geo_41.60150_-93.61270 |
| session | SESSION-f86b477d91478daf | SESSION-f86b477d91478daf |
| host | 10.255.255.254 | host:10.255.255.254 |
| flow | flow:e390738afcc4 | flow:e390738afcc4 |
| protocol_event | pe:syn:SESSION-d7b4e1a1544ea8f4 | pe:syn:SESSION-d7b4e1a1544ea |
| protocol_event | pe:syn:SESSION-ca686dc45978e778 | pe:syn:SESSION-ca686dc45978e |
| session | SESSION-8fe403b4baf9ce32 | SESSION-8fe403b4baf9ce32 |
| session | SESSION-67ab8ed4e4e1a8ac | SESSION-67ab8ed4e4e1a8ac |
| flow | flow:f11f2ffafb02 | flow:f11f2ffafb02 |
| protocol_event | pe:syn:SESSION-5a050de7c4739ca8 | pe:syn:SESSION-5a050de7c4739 |
| flow | flow:6d2d30043cb4 | flow:6d2d30043cb4 |
| flow | flow:21236897f3ae | flow:21236897f3ae |
| flow | flow:cd2a00e570b9 | flow:cd2a00e570b9 |
| flow | flow:8d409ad46632 | flow:8d409ad46632 |
| asn | asn:8075 | asn:8075 |
| flow | flow:5e87a78613f2 | flow:5e87a78613f2 |
| session | SESSION-85b127aefd541903 | SESSION-85b127aefd541903 |
| protocol_event | pe:tls:SESSION-86acb59dd9a6072c | pe:tls:SESSION-86acb59dd9a60 |
| flow | flow:ab7d7cf3dc29 | flow:ab7d7cf3dc29 |
| tls_sni | tls_sni:license.fusionauth.io | tls_sni:license.fusionauth.i |
| flow | flow:c3b9ab9633e2 | flow:c3b9ab9633e2 |
| session | SESSION-faca149a347aae6b | SESSION-faca149a347aae6b |
| flow | flow:a52c9326f8f5 | flow:a52c9326f8f5 |
| session | SESSION-c106328cb17851b6 | SESSION-c106328cb17851b6 |
| session | SESSION-bf0254facf8e8be7 | SESSION-bf0254facf8e8be7 |
| protocol_event | pe:tls:SESSION-7264815ae0d54f9c | pe:tls:SESSION-7264815ae0d54 |
| session | SESSION-14a05880f5c927d2 | SESSION-14a05880f5c927d2 |
| session | SESSION-d8a39d719091e9b7 | SESSION-d8a39d719091e9b7 |
| behavior_group | BSG-DATA_EXFIL-129be8cff1a6 | BSG-DATA_EXFIL-129be8cff1a6 |
| flow | flow:6677bb5bb5d1 | flow:6677bb5bb5d1 |
| protocol_event | pe:syn:SESSION-1a93562b893b2626 | pe:syn:SESSION-1a93562b893b2 |
| flow | flow:68d115fb165d | flow:68d115fb165d |
| session | SESSION-2f198eb5522d6de0 | SESSION-2f198eb5522d6de0 |
| port_hub | 45884 | port:tcp:45884 |
| protocol_event | pe:tls:SESSION-35d97fff847429a2 | pe:tls:SESSION-35d97fff84742 |
| flow | flow:3fba37ce3f6a | flow:3fba37ce3f6a |
| session | SESSION-a4725472dd4dbc49 | SESSION-a4725472dd4dbc49 |
| flow | flow:aeb0d6d33fb3 | flow:aeb0d6d33fb3 |
| protocol_event | pe:syn:SESSION-65e8a579c92f3e2a | pe:syn:SESSION-65e8a579c92f3 |
| flow | flow:4c3b9031eb7c | flow:4c3b9031eb7c |
| session | SESSION-d619fec0a49995fc | SESSION-d619fec0a49995fc |
| tls_sni | tls_sni:play.googleapis.com | tls_sni:play.googleapis.com |
| protocol_event | pe:syn:SESSION-674701e7b74ac3e3 | pe:syn:SESSION-674701e7b74ac |
| flow | flow:e3f1d7bdbb88 | flow:e3f1d7bdbb88 |
| protocol_event | pe:tls:SESSION-b23557e9444c5b57 | pe:tls:SESSION-b23557e9444c5 |
| flow | flow:56ace1551844 | flow:56ace1551844 |
| flow | flow:2617769fd68f | flow:2617769fd68f |
| protocol_event | pe:syn:SESSION-28a48b034dafced4 | pe:syn:SESSION-28a48b034dafc |
| session | SESSION-35d97fff847429a2 | SESSION-35d97fff847429a2 |
| host | 172.237.150.22 | host:172.237.150.22 |
| protocol_event | pe:syn:SESSION-9f9234811b4ce934 | pe:syn:SESSION-9f9234811b4ce |
| flow | flow:6170a57c6400 | flow:6170a57c6400 |
| protocol_event | pe:syn:SESSION-3657f119813fd4f3 | pe:syn:SESSION-3657f119813fd |
| protocol_event | pe:syn:SESSION-3ba9dc5a92e3c2f0 | pe:syn:SESSION-3ba9dc5a92e3c |
| session | SESSION-d9e0e0417ed1497d | SESSION-d9e0e0417ed1497d |
| session | SESSION-bcc7e230ccb027f4 | SESSION-bcc7e230ccb027f4 |
| session | SESSION-af3f3527de441c86 | SESSION-af3f3527de441c86 |
| session | SESSION-71ef3eb03fc36b15 | SESSION-71ef3eb03fc36b15 |
| flow | flow:fe7fe9cc96af | flow:fe7fe9cc96af |
| session | SESSION-35eff5efb5e43c5c | SESSION-35eff5efb5e43c5c |
| flow | flow:8c8df38f3e9d | flow:8c8df38f3e9d |
| session | SESSION-6eb67ecd61626e1e | SESSION-6eb67ecd61626e1e |
| host | 224.0.0.251 | host:224.0.0.251 |
| protocol_event | pe:syn:SESSION-d619fec0a49995fc | pe:syn:SESSION-d619fec0a4999 |
| protocol_event | pe:rst:SESSION-aa258edb0b97196c | pe:rst:SESSION-aa258edb0b971 |
| session | SESSION-889982a12cbda1be | SESSION-889982a12cbda1be |
| session | SESSION-baabbf7e2b22c5e8 | SESSION-baabbf7e2b22c5e8 |
| protocol_event | pe:tls:SESSION-6c981eff5fbd227c | pe:tls:SESSION-6c981eff5fbd2 |
| session | SESSION-01519d7a137238e9 | SESSION-01519d7a137238e9 |
| session | SESSION-fe8664115773d05f | SESSION-fe8664115773d05f |
| flow | flow:2cd7781aa2ea | flow:2cd7781aa2ea |
| session | SESSION-ddefbe9028034f40 | SESSION-ddefbe9028034f40 |
| flow | flow:942b8b5eb9b4 | flow:942b8b5eb9b4 |
| flow | flow:770abebd7763 | flow:770abebd7763 |
| protocol_event | pe:tls:SESSION-1d3c15d6f6f0a5f7 | pe:tls:SESSION-1d3c15d6f6f0a |
| session | SESSION-61868b849ef1198a | SESSION-61868b849ef1198a |
| session | SESSION-31dd02f438570b2c | SESSION-31dd02f438570b2c |
| session | SESSION-f6dcd7ec8862c0ad | SESSION-f6dcd7ec8862c0ad |
| protocol_event | pe:rst:SESSION-641eca54923250bf | pe:rst:SESSION-641eca5492325 |
| flow | flow:7bcd3576a860 | flow:7bcd3576a860 |
| session | SESSION-951e2412fc57f4ac | SESSION-951e2412fc57f4ac |
| flow | flow:da8efc30b44e | flow:da8efc30b44e |
| host | 104.18.32.47 | host:104.18.32.47 |
| geo_point | geo_43.63190_-79.37160 | geo_43.63190_-79.37160 |
| session | SESSION-2f468189286dff48 | SESSION-2f468189286dff48 |
| protocol_event | pe:syn:SESSION-47a0eb1fbca7572e | pe:syn:SESSION-47a0eb1fbca75 |
| flow | flow:7cf2483a0f42 | flow:7cf2483a0f42 |
| session | SESSION-b6eff0d3dd371d16 | SESSION-b6eff0d3dd371d16 |
| session | SESSION-f950f242ee46f8a2 | SESSION-f950f242ee46f8a2 |
| session | SESSION-d60847885d5e042d | SESSION-d60847885d5e042d |
| protocol_event | pe:syn:SESSION-2c24503ab40a1d16 | pe:syn:SESSION-2c24503ab40a1 |
| flow | flow:2d643b58477b | flow:2d643b58477b |
| protocol_event | pe:tls:SESSION-9f1fad2d78ad45a7 | pe:tls:SESSION-9f1fad2d78ad4 |
| protocol_event | pe:dns:SESSION-566f5e93bf363acb | pe:dns:SESSION-566f5e93bf363 |
| protocol_event | pe:syn:SESSION-7028b4ee01591a8c | pe:syn:SESSION-7028b4ee01591 |
| protocol_event | pe:tls:SESSION-bdead9e51e23d9a9 | pe:tls:SESSION-bdead9e51e23d |
| flow | flow:4175f88f0769 | flow:4175f88f0769 |
| protocol_event | pe:syn:SESSION-e5496581ae7ea611 | pe:syn:SESSION-e5496581ae7ea |
| session | SESSION-fce7a71363893398 | SESSION-fce7a71363893398 |
| dns_name | dns:_scythe._tcp.local | dns:_scythe._tcp.local |
| protocol_event | pe:syn:SESSION-03d868a8c094ba7f | pe:syn:SESSION-03d868a8c094b |
| flow | flow:0f892e02cbc7 | flow:0f892e02cbc7 |
| flow | flow:5883231a9458 | flow:5883231a9458 |
| session | SESSION-fa34d349ad96d0b2 | SESSION-fa34d349ad96d0b2 |
| flow | flow:e5b2f476e34f | flow:e5b2f476e34f |
| session | SESSION-dadca3d6ac8ad6e7 | SESSION-dadca3d6ac8ad6e7 |
| session | SESSION-43cfeab39c6cc207 | SESSION-43cfeab39c6cc207 |
| protocol_event | pe:tls:SESSION-e237c937eb5442d5 | pe:tls:SESSION-e237c937eb544 |
| protocol_event | pe:syn:SESSION-6ebb91595915c79d | pe:syn:SESSION-6ebb91595915c |
| session | SESSION-2b0c9d4f73db72ab | SESSION-2b0c9d4f73db72ab |
| session | SESSION-c81f09363c528434 | SESSION-c81f09363c528434 |
| protocol_event | pe:rst:SESSION-302dd204572b69d1 | pe:rst:SESSION-302dd204572b6 |
| port_hub | 45912 | port:tcp:45912 |
| protocol_event | pe:syn:SESSION-ceafe1cd4a4862ac | pe:syn:SESSION-ceafe1cd4a486 |
| session | SESSION-7d42a55e9e04fe10 | SESSION-7d42a55e9e04fe10 |
| session | SESSION-100d977dcd765ffd | SESSION-100d977dcd765ffd |
| flow | flow:97e5aaabdd58 | flow:97e5aaabdd58 |
| flow | flow:73fb5a356ac7 | flow:73fb5a356ac7 |
| flow | flow:03e2f2ac95fe | flow:03e2f2ac95fe |
| flow | flow:b903280ea0b8 | flow:b903280ea0b8 |
| protocol_event | pe:tls:SESSION-349ea8b8b7448a84 | pe:tls:SESSION-349ea8b8b7448 |
| protocol_event | pe:syn:SESSION-a926b62d79584690 | pe:syn:SESSION-a926b62d79584 |
| port_hub | 8080 | port:tcp:8080 |
| protocol_event | pe:syn:SESSION-dce84d9707bfabcb | pe:syn:SESSION-dce84d9707bfa |
| flow | flow:2f0d75d601ed | flow:2f0d75d601ed |
| session | SESSION-f3d95aa1d308c418 | SESSION-f3d95aa1d308c418 |
| flow | flow:de262b223d5a | flow:de262b223d5a |
| protocol_event | pe:syn:SESSION-67ab8ed4e4e1a8ac | pe:syn:SESSION-67ab8ed4e4e1a |
| flow | flow:cc8efefc1746 | flow:cc8efefc1746 |
| flow | flow:e197659f5099 | flow:e197659f5099 |
| session | SESSION-156bd158d924aa23 | SESSION-156bd158d924aa23 |
| session | SESSION-3ba9dc5a92e3c2f0 | SESSION-3ba9dc5a92e3c2f0 |
| protocol_event | pe:syn:SESSION-6e4a7f33ed2606fc | pe:syn:SESSION-6e4a7f33ed260 |
| session | SESSION-86d8648b563a0a93 | SESSION-86d8648b563a0a93 |
| port_hub | 45870 | port:tcp:45870 |
| behavior_group | BSG-BEACON-327341797d40 | BSG-BEACON-327341797d40 |
| tls_sni | tls_sni:metrics.fusionauth.io | tls_sni:metrics.fusionauth.i |
| session | SESSION-66bfe6fe9625dea4 | SESSION-66bfe6fe9625dea4 |
| host | 192.168.1.157 | host:192.168.1.157 |
| session | SESSION-5278f1108e39e72f | SESSION-5278f1108e39e72f |
| protocol_event | pe:rst:SESSION-2a28fc9acd0444ed | pe:rst:SESSION-2a28fc9acd044 |
| flow | flow:35bc341f6990 | flow:35bc341f6990 |
| flow | flow:d64c25fc9ec7 | flow:d64c25fc9ec7 |
| flow | flow:c2526e695797 | flow:c2526e695797 |
| session | SESSION-71b8258155348ba3 | SESSION-71b8258155348ba3 |
| flow | flow:0a51a843e9df | flow:0a51a843e9df |
| session | SESSION-b7f2c2d9ae3fbedd | SESSION-b7f2c2d9ae3fbedd |
| flow | flow:a8457e9b87de | flow:a8457e9b87de |
| protocol_event | pe:tls:SESSION-14a05880f5c927d2 | pe:tls:SESSION-14a05880f5c92 |
| protocol_event | pe:tls:SESSION-e11de486c42c391a | pe:tls:SESSION-e11de486c42c3 |
| dns_name | dns:Living Room._viziocast._tcp.local | dns:Living Room._viziocast._ |
| flow | flow:d0c610bbd8b4 | flow:d0c610bbd8b4 |
| host | 192.168.1.235 | host:192.168.1.235 |
| session | SESSION-2e2872b471dbde1e | SESSION-2e2872b471dbde1e |
| host | 172.19.0.2 | host:172.19.0.2 |
| protocol_event | pe:syn:SESSION-629e7a6638868fa8 | pe:syn:SESSION-629e7a6638868 |
| protocol_event | pe:syn:SESSION-be44e2bbbf35ddf2 | pe:syn:SESSION-be44e2bbbf35d |
| protocol_event | pe:syn:SESSION-8fe403b4baf9ce32 | pe:syn:SESSION-8fe403b4baf9c |
| flow | flow:44f61b4e7a66 | flow:44f61b4e7a66 |
| session | SESSION-d4d32e88a7e6a512 | SESSION-d4d32e88a7e6a512 |
| flow | flow:9dd515af87b2 | flow:9dd515af87b2 |
| session | SESSION-dc4350ab7f4cc10f | SESSION-dc4350ab7f4cc10f |
| protocol_event | pe:tls:SESSION-dbc9276b58a1eaa3 | pe:tls:SESSION-dbc9276b58a1e |
| flow | flow:c9e8aca63741 | flow:c9e8aca63741 |
| flow | flow:ae385cc4e3da | flow:ae385cc4e3da |
| protocol_event | pe:syn:SESSION-d8f3c3da2e93310b | pe:syn:SESSION-d8f3c3da2e933 |
| session | SESSION-b09335e9f2b8a092 | SESSION-b09335e9f2b8a092 |
| session | SESSION-edd1073d7fc358c7 | SESSION-edd1073d7fc358c7 |
| session | SESSION-ea156a69de34cd20 | SESSION-ea156a69de34cd20 |
| session | SESSION-93cbd2b4192c3c38 | SESSION-93cbd2b4192c3c38 |
| flow | flow:6a75d7e2c136 | flow:6a75d7e2c136 |
| flow | flow:c3ba2c5a57f1 | flow:c3ba2c5a57f1 |
| flow | flow:8d8a88ac1cf1 | flow:8d8a88ac1cf1 |
| flow | flow:a11af6f73c67 | flow:a11af6f73c67 |
| session | SESSION-7dd25082f38902aa | SESSION-7dd25082f38902aa |
| session | SESSION-fe9331abf8bf9d2a | SESSION-fe9331abf8bf9d2a |
| session | SESSION-20e01e780c43a78d | SESSION-20e01e780c43a78d |
| session | SESSION-33e31c033c3d8716 | SESSION-33e31c033c3d8716 |
| session | SESSION-e62117779fa5a33a | SESSION-e62117779fa5a33a |
| flow | flow:5d4c8a9b1eea | flow:5d4c8a9b1eea |
| protocol_event | pe:dns:SESSION-e005efd4e6bf6653 | pe:dns:SESSION-e005efd4e6bf6 |
| flow | flow:865578fae301 | flow:865578fae301 |
| flow | flow:d6c4ee057aec | flow:d6c4ee057aec |
| protocol_event | pe:syn:SESSION-20e01e780c43a78d | pe:syn:SESSION-20e01e780c43a |
| flow | flow:df8ccd0a5af5 | flow:df8ccd0a5af5 |
| flow | flow:f5032dc21276 | flow:f5032dc21276 |
| session | SESSION-b23557e9444c5b57 | SESSION-b23557e9444c5b57 |
| protocol_event | pe:syn:SESSION-af3f3527de441c86 | pe:syn:SESSION-af3f3527de441 |
| port_hub | 443 | port:tcp:443 |
| flow | flow:adad26e6c933 | flow:adad26e6c933 |
| flow | flow:471f8479a843 | flow:471f8479a843 |
| flow | flow:63f5621a3fb2 | flow:63f5621a3fb2 |
| session | SESSION-dd4506c768916d68 | SESSION-dd4506c768916d68 |
| flow | flow:ef444aa9036d | flow:ef444aa9036d |
| protocol_event | pe:syn:SESSION-3553e9d3562c89cf | pe:syn:SESSION-3553e9d3562c8 |
| flow | flow:a0cead84a7df | flow:a0cead84a7df |
| flow | flow:b7660d53d55e | flow:b7660d53d55e |
| behavior_group | BSG-BEACON-40e5871cb77f | BSG-BEACON-40e5871cb77f |
| flow | flow:230a448d9639 | flow:230a448d9639 |
| port_hub | 44855 | port:tcp:44855 |
| host | 172.19.0.3 | host:172.19.0.3 |
| session | SESSION-ab724b7a6bde96c9 | SESSION-ab724b7a6bde96c9 |
| flow | flow:1fd95f3089b4 | flow:1fd95f3089b4 |
| session | SESSION-c83afe5bdc32f7ad | SESSION-c83afe5bdc32f7ad |
| flow | flow:f91243929850 | flow:f91243929850 |
| flow | flow:9ea687ead801 | flow:9ea687ead801 |
| flow | flow:a353c96693f8 | flow:a353c96693f8 |
| flow | flow:c9346d51e9c8 | flow:c9346d51e9c8 |
| flow | flow:9ddc847bfdaf | flow:9ddc847bfdaf |
| session | SESSION-f676d41b2084d79f | SESSION-f676d41b2084d79f |
| session | SESSION-c289ea75f4cb1c5d | SESSION-c289ea75f4cb1c5d |
| session | SESSION-91c699c3a4b54b13 | SESSION-91c699c3a4b54b13 |
| protocol_event | pe:syn:SESSION-630ef8ef2c5fe4d9 | pe:syn:SESSION-630ef8ef2c5fe |
| protocol_event | pe:rst:SESSION-c780578a4585f135 | pe:rst:SESSION-c780578a4585f |
| session | SESSION-d2d1a7234e0f2380 | SESSION-d2d1a7234e0f2380 |
| session | SESSION-758b7009134f1117 | SESSION-758b7009134f1117 |
| host | 172.19.0.4 | host:172.19.0.4 |
| session | SESSION-5e43844ab55da347 | SESSION-5e43844ab55da347 |
| session | SESSION-6f03e4feddeed434 | SESSION-6f03e4feddeed434 |
| protocol_event | pe:syn:SESSION-e00ded900e72031a | pe:syn:SESSION-e00ded900e720 |
| behavior_group | BSG-DATA_EXFIL-a88fc270bff4 | BSG-DATA_EXFIL-a88fc270bff4 |
| protocol_event | pe:rst:SESSION-1a93562b893b2626 | pe:rst:SESSION-1a93562b893b2 |
| flow | flow:78166d689f1c | flow:78166d689f1c |
| session | SESSION-edcf0feb25fb307f | SESSION-edcf0feb25fb307f |
| session | SESSION-dccbe418439b7056 | SESSION-dccbe418439b7056 |
| session | SESSION-bd4153a3d3cee5df | SESSION-bd4153a3d3cee5df |
| geo_point | geo_37.33880_-121.89160 | geo_37.33880_-121.89160 |
| protocol_event | pe:rst:SESSION-43cfeab39c6cc207 | pe:rst:SESSION-43cfeab39c6cc |
| session | SESSION-342b731da1e7e954 | SESSION-342b731da1e7e954 |
| flow | flow:d00d96bfa1ec | flow:d00d96bfa1ec |
| session | SESSION-be44e2bbbf35ddf2 | SESSION-be44e2bbbf35ddf2 |
| session | SESSION-173509505931a8a6 | SESSION-173509505931a8a6 |
| flow | flow:b6c273de0b54 | flow:b6c273de0b54 |
| flow | flow:bab7fe2073f8 | flow:bab7fe2073f8 |
| flow | flow:c09df5d6e905 | flow:c09df5d6e905 |
| protocol_event | pe:syn:SESSION-1e07301ddce13746 | pe:syn:SESSION-1e07301ddce13 |
| session | SESSION-1cfc7765c9a69bd2 | SESSION-1cfc7765c9a69bd2 |
| flow | flow:6f5dd2694993 | flow:6f5dd2694993 |
| session | SESSION-0734fa9225c10adb | SESSION-0734fa9225c10adb |
| flow | flow:ea2952ed4c49 | flow:ea2952ed4c49 |
| session | SESSION-2283d24358f27399 | SESSION-2283d24358f27399 |
| session | SESSION-70606a15570d3189 | SESSION-70606a15570d3189 |
| flow | flow:cb85a2f6fb97 | flow:cb85a2f6fb97 |
| protocol_event | pe:syn:SESSION-05b461c656374b26 | pe:syn:SESSION-05b461c656374 |
| flow | flow:d1d66faac903 | flow:d1d66faac903 |
| flow | flow:9e9b7d35c69c | flow:9e9b7d35c69c |
| flow | flow:f5a9f25820d0 | flow:f5a9f25820d0 |
| flow | flow:6ce379a4443c | flow:6ce379a4443c |
| protocol_event | pe:rst:SESSION-c190f8e29174f0fe | pe:rst:SESSION-c190f8e29174f |
| session | SESSION-8f961622ea93ca6b | SESSION-8f961622ea93ca6b |
| flow | flow:fa6566835bf5 | flow:fa6566835bf5 |
| port_hub | 43263 | port:tcp:43263 |
| session | SESSION-65b84cb419a69715 | SESSION-65b84cb419a69715 |
| protocol_event | pe:syn:SESSION-69c63e4b731bf6f3 | pe:syn:SESSION-69c63e4b731bf |
| session | SESSION-6367915b8a8d6479 | SESSION-6367915b8a8d6479 |
| flow | flow:967a269ddfc1 | flow:967a269ddfc1 |
| session | SESSION-9f9234811b4ce934 | SESSION-9f9234811b4ce934 |
| flow | flow:006bc6b764bb | flow:006bc6b764bb |
| asn | asn:36459 | asn:36459 |
| host | 98.86.137.6 | host:98.86.137.6 |
| session | SESSION-69cda01d55c81516 | SESSION-69cda01d55c81516 |
| protocol_event | pe:syn:SESSION-d60847885d5e042d | pe:syn:SESSION-d60847885d5e0 |
| flow | flow:80ba884e958f | flow:80ba884e958f |
| flow | flow:0ff8f6eee507 | flow:0ff8f6eee507 |
| flow | flow:e923ea8e5b6b | flow:e923ea8e5b6b |
| flow | flow:6b3b467c3f03 | flow:6b3b467c3f03 |
| flow | flow:d9d40614671b | flow:d9d40614671b |
| flow | flow:73659a31e7d2 | flow:73659a31e7d2 |
| session | SESSION-26ab34a425f60ae3 | SESSION-26ab34a425f60ae3 |
| flow | flow:706b8983bf84 | flow:706b8983bf84 |
| session | SESSION-b46ab0061866d154 | SESSION-b46ab0061866d154 |
| protocol_event | pe:tls:SESSION-674701e7b74ac3e3 | pe:tls:SESSION-674701e7b74ac |
| flow | flow:34da53898c06 | flow:34da53898c06 |
| org | Amazon.com, Inc. | org:Amazon.com, Inc. |
| session | SESSION-96f60e97a498db0c | SESSION-96f60e97a498db0c |
| flow | flow:91e806bd5139 | flow:91e806bd5139 |
| flow | flow:04ddf8c9fc42 | flow:04ddf8c9fc42 |
| session | SESSION-6ebb91595915c79d | SESSION-6ebb91595915c79d |
| protocol_event | pe:tls:SESSION-86d8648b563a0a93 | pe:tls:SESSION-86d8648b563a0 |
| session | SESSION-bca4ecacf65640da | SESSION-bca4ecacf65640da |
| host | 140.82.113.21 | host:140.82.113.21 |
| protocol_event | pe:rst:SESSION-a8f1147a2013d309 | pe:rst:SESSION-a8f1147a2013d |
| protocol_event | pe:syn:SESSION-e465471aefdda74f | pe:syn:SESSION-e465471aefdda |
| protocol_event | pe:syn:SESSION-b79b86bda080b932 | pe:syn:SESSION-b79b86bda080b |
| session | SESSION-01878fb72a9fb947 | SESSION-01878fb72a9fb947 |
| flow | flow:de6f51fa37e2 | flow:de6f51fa37e2 |
| protocol_event | pe:syn:SESSION-72d258fe755aa75e | pe:syn:SESSION-72d258fe755aa |
| protocol_event | pe:syn:SESSION-1d3c15d6f6f0a5f7 | pe:syn:SESSION-1d3c15d6f6f0a |
| protocol_event | pe:rst:SESSION-92dd2d3b6857bac1 | pe:rst:SESSION-92dd2d3b6857b |
| protocol_event | pe:syn:SESSION-fd41b4700b718b8c | pe:syn:SESSION-fd41b4700b718 |
| flow | flow:2530369374e6 | flow:2530369374e6 |
| session | SESSION-835eb28b3b4359fa | SESSION-835eb28b3b4359fa |
| protocol_event | pe:dns:SESSION-83cc534019afea5c | pe:dns:SESSION-83cc534019afe |
| protocol_event | pe:syn:SESSION-a46c429b463a9640 | pe:syn:SESSION-a46c429b463a9 |
| session | SESSION-11986a9291319e36 | SESSION-11986a9291319e36 |
| flow | flow:636cba458dbe | flow:636cba458dbe |
| protocol_event | pe:syn:SESSION-7afeed239ba7033e | pe:syn:SESSION-7afeed239ba70 |
| session | SESSION-05acfda50cdd7a1c | SESSION-05acfda50cdd7a1c |
| flow | flow:ba3ff19601aa | flow:ba3ff19601aa |
| flow | flow:5280b5ba9f8a | flow:5280b5ba9f8a |
| protocol_event | pe:syn:SESSION-a19bb3d3c0c92e28 | pe:syn:SESSION-a19bb3d3c0c92 |
| protocol_event | pe:tls:SESSION-1e07301ddce13746 | pe:tls:SESSION-1e07301ddce13 |
| session | SESSION-e3d7027dca17c6c3 | SESSION-e3d7027dca17c6c3 |
| flow | flow:d9d59885eef6 | flow:d9d59885eef6 |
| flow | flow:adce36cf7362 | flow:adce36cf7362 |
| flow | flow:58c6b08d2a24 | flow:58c6b08d2a24 |
| session | SESSION-79f5a6135aaeb248 | SESSION-79f5a6135aaeb248 |
| session | SESSION-b83e32cd348901c3 | SESSION-b83e32cd348901c3 |
| protocol_event | pe:syn:SESSION-e7db206a9aa937c1 | pe:syn:SESSION-e7db206a9aa93 |
| flow | flow:35ee4fe4c8dc | flow:35ee4fe4c8dc |
| port_hub | 46338 | port:tcp:46338 |
| session | SESSION-a8f1147a2013d309 | SESSION-a8f1147a2013d309 |
| protocol_event | pe:tls:SESSION-703b04a6612ad9e0 | pe:tls:SESSION-703b04a6612ad |
| protocol_event | pe:syn:SESSION-0734fa9225c10adb | pe:syn:SESSION-0734fa9225c10 |
| port_hub | 46358 | port:tcp:46358 |
| protocol_event | pe:syn:SESSION-ddefbe9028034f40 | pe:syn:SESSION-ddefbe9028034 |
| protocol_event | pe:syn:SESSION-302dd204572b69d1 | pe:syn:SESSION-302dd204572b6 |
| flow | flow:6770e055ea32 | flow:6770e055ea32 |
| session | SESSION-a116a9797103df48 | SESSION-a116a9797103df48 |
| protocol_event | pe:rst:SESSION-4d92058c53b954b4 | pe:rst:SESSION-4d92058c53b95 |
| session | SESSION-dce84d9707bfabcb | SESSION-dce84d9707bfabcb |
| behavior_group | BSG-FAILED_HANDSHAKE-cf1f933e4f6b | BSG-FAILED_HANDSHAKE-cf1f933 |
| session | SESSION-7e65fd397eb315c7 | SESSION-7e65fd397eb315c7 |
| flow | flow:c0d6bc89d5bf | flow:c0d6bc89d5bf |
| flow | flow:13317a84cf64 | flow:13317a84cf64 |
| flow | flow:e0665f81661a | flow:e0665f81661a |
| protocol_event | pe:syn:SESSION-f3d95aa1d308c418 | pe:syn:SESSION-f3d95aa1d308c |
| protocol_event | pe:syn:SESSION-fc83faaacc47c02b | pe:syn:SESSION-fc83faaacc47c |
| flow | flow:1645000ac291 | flow:1645000ac291 |
| session | SESSION-9fa012fbb0354fd7 | SESSION-9fa012fbb0354fd7 |
| session | SESSION-817ad84e977ed661 | SESSION-817ad84e977ed661 |
| session | SESSION-629e7a6638868fa8 | SESSION-629e7a6638868fa8 |
| flow | flow:2a92b40a26b6 | flow:2a92b40a26b6 |
| flow | flow:f9b5415294ce | flow:f9b5415294ce |
| session | SESSION-b97b6ff344e68599 | SESSION-b97b6ff344e68599 |
| protocol_event | pe:tls:SESSION-b80fe05f43c8ea84 | pe:tls:SESSION-b80fe05f43c8e |
| session | SESSION-0c6d5ba4281bc4ee | SESSION-0c6d5ba4281bc4ee |
| service | http-alt | svc:http-alt |
| session | SESSION-b46c758780ca7a7c | SESSION-b46c758780ca7a7c |
| flow | flow:b6d78d6444e9 | flow:b6d78d6444e9 |
| protocol_event | pe:tls:SESSION-0c6d5ba4281bc4ee | pe:tls:SESSION-0c6d5ba4281bc |
| flow | flow:3cb5647339e2 | flow:3cb5647339e2 |
| flow | flow:140b863b96c8 | flow:140b863b96c8 |
| flow | flow:294970d4049c | flow:294970d4049c |
| session | SESSION-e005efd4e6bf6653 | SESSION-e005efd4e6bf6653 |
| flow | flow:13eb29f1c82f | flow:13eb29f1c82f |
| session | SESSION-566f5e93bf363acb | SESSION-566f5e93bf363acb |
| session | SESSION-1b38caac42f4dbad | SESSION-1b38caac42f4dbad |
| session | SESSION-c6bac1520f5a14b5 | SESSION-c6bac1520f5a14b5 |
| protocol_event | pe:syn:SESSION-a116a9797103df48 | pe:syn:SESSION-a116a9797103d |
| session | SESSION-170dca972be794d3 | SESSION-170dca972be794d3 |
| session | SESSION-7a7ce6101777a1ff | SESSION-7a7ce6101777a1ff |
| flow | flow:715b147e58a9 | flow:715b147e58a9 |
| session | SESSION-d8e2a42834860f3d | SESSION-d8e2a42834860f3d |
| flow | flow:a8bf7be2095e | flow:a8bf7be2095e |
| protocol_event | pe:rst:SESSION-5a98ffb9a195b127 | pe:rst:SESSION-5a98ffb9a195b |
| session | SESSION-250d0ece7ecf5734 | SESSION-250d0ece7ecf5734 |
| session | SESSION-6f2944733d12af92 | SESSION-6f2944733d12af92 |
| flow | flow:646f913b2cbf | flow:646f913b2cbf |
| session | SESSION-bdead9e51e23d9a9 | SESSION-bdead9e51e23d9a9 |
| flow | flow:473d01de3214 | flow:473d01de3214 |
| session | SESSION-6e00cc2eba767388 | SESSION-6e00cc2eba767388 |
| behavior_group | BSG-BEACON-539d54ec038d | BSG-BEACON-539d54ec038d |
| protocol_event | pe:syn:SESSION-1c11f677c31f86e3 | pe:syn:SESSION-1c11f677c31f8 |
| session | SESSION-455a6ea7c1bdc88e | SESSION-455a6ea7c1bdc88e |
| flow | flow:d95d79b1af77 | flow:d95d79b1af77 |
| protocol_event | pe:tls:SESSION-ff83896fc2103d16 | pe:tls:SESSION-ff83896fc2103 |
| flow | flow:09a40cbf97b7 | flow:09a40cbf97b7 |
| session | SESSION-2135ff8b8c6f4c6f | SESSION-2135ff8b8c6f4c6f |
| flow | flow:0cfcfabd7924 | flow:0cfcfabd7924 |
| session | SESSION-2bb4aea46fce74ae | SESSION-2bb4aea46fce74ae |
| session | SESSION-c87dbd4e42372e8f | SESSION-c87dbd4e42372e8f |
| flow | flow:a339520710f1 | flow:a339520710f1 |
| session | SESSION-72d258fe755aa75e | SESSION-72d258fe755aa75e |
| behavior_group | BSG-BEACON-5a9cee8870d8 | BSG-BEACON-5a9cee8870d8 |
| session | SESSION-7afeed239ba7033e | SESSION-7afeed239ba7033e |
| session | SESSION-689506f70e81f749 | SESSION-689506f70e81f749 |
| session | SESSION-b418266c25081e46 | SESSION-b418266c25081e46 |
| protocol_event | pe:syn:SESSION-29dc0936c4d93ba1 | pe:syn:SESSION-29dc0936c4d93 |
| flow | flow:ee73050ce693 | flow:ee73050ce693 |
| session | SESSION-550ce200d4fffe9c | SESSION-550ce200d4fffe9c |
| session | SESSION-4ed41fffad3e3c8d | SESSION-4ed41fffad3e3c8d |
| flow | flow:bdc61be79685 | flow:bdc61be79685 |
| session | SESSION-7d5c6963f01c0f42 | SESSION-7d5c6963f01c0f42 |
| flow | flow:173de66f67a3 | flow:173de66f67a3 |
| flow | flow:190b91ccc6f9 | flow:190b91ccc6f9 |
| protocol_event | pe:tls:SESSION-e00ded900e72031a | pe:tls:SESSION-e00ded900e720 |
| protocol_event | pe:syn:SESSION-fc3b85f784077bc7 | pe:syn:SESSION-fc3b85f784077 |
| host | 20.184.175.6 | host:20.184.175.6 |
| session | SESSION-99c1c8593a932d53 | SESSION-99c1c8593a932d53 |
| protocol_event | pe:tls:SESSION-758b7009134f1117 | pe:tls:SESSION-758b7009134f1 |
| port_hub | 53 | port:udp:53 |
| behavior_group | BSG-BEACON-27e414b2698b | BSG-BEACON-27e414b2698b |
| protocol_event | pe:syn:SESSION-48d311c8bbd93867 | pe:syn:SESSION-48d311c8bbd93 |
| flow | flow:b556a3b89b3b | flow:b556a3b89b3b |
| flow | flow:7b2c3cd32103 | flow:7b2c3cd32103 |
| protocol_event | pe:syn:SESSION-b5288e21ceae125c | pe:syn:SESSION-b5288e21ceae1 |
| flow | flow:88aa868c6a1b | flow:88aa868c6a1b |
| protocol_event | pe:syn:SESSION-01878fb72a9fb947 | pe:syn:SESSION-01878fb72a9fb |
| flow | flow:17a5924a7fd3 | flow:17a5924a7fd3 |
| session | SESSION-3facad7dd56485c3 | SESSION-3facad7dd56485c3 |
| protocol_event | pe:syn:SESSION-b489fae0b0e232f4 | pe:syn:SESSION-b489fae0b0e23 |
| flow | flow:cc3405da905d | flow:cc3405da905d |
| session | SESSION-fe209de061b616f8 | SESSION-fe209de061b616f8 |
| session | SESSION-65e8a579c92f3e2a | SESSION-65e8a579c92f3e2a |
| session | SESSION-b79b86bda080b932 | SESSION-b79b86bda080b932 |
| protocol_event | pe:syn:SESSION-2b43e95e0d0c5f74 | pe:syn:SESSION-2b43e95e0d0c5 |
| flow | flow:75658cede2ff | flow:75658cede2ff |
| flow | flow:7d05a82af17f | flow:7d05a82af17f |
| flow | flow:0db6b4acb2d3 | flow:0db6b4acb2d3 |
| session | SESSION-c9fbbf2c1fd20530 | SESSION-c9fbbf2c1fd20530 |
| flow | flow:fa7c1f6fb99d | flow:fa7c1f6fb99d |
| session | SESSION-289fb9343599f73c | SESSION-289fb9343599f73c |
| flow | flow:366673af3e99 | flow:366673af3e99 |
| flow | flow:415547e9877b | flow:415547e9877b |
| session | SESSION-2bb87d0fbbaf434c | SESSION-2bb87d0fbbaf434c |
| protocol_event | pe:syn:SESSION-bf1f54f07fcdaf92 | pe:syn:SESSION-bf1f54f07fcda |
| protocol_event | pe:syn:SESSION-d6955a3ff162af47 | pe:syn:SESSION-d6955a3ff162a |
| flow | flow:b4fc0ad0fdc3 | flow:b4fc0ad0fdc3 |
| session | SESSION-8fc93fca449557bf | SESSION-8fc93fca449557bf |
| flow | flow:3597b1153c5f | flow:3597b1153c5f |
| session | SESSION-3339183d7b97bb04 | SESSION-3339183d7b97bb04 |
| protocol_event | pe:syn:SESSION-f3144b0216dc32bc | pe:syn:SESSION-f3144b0216dc3 |
| session | SESSION-e1c8bc1cb24db0bb | SESSION-e1c8bc1cb24db0bb |
| protocol_event | pe:syn:SESSION-250d0ece7ecf5734 | pe:syn:SESSION-250d0ece7ecf5 |
| session | SESSION-bbeefb17db37e982 | SESSION-bbeefb17db37e982 |
| session | SESSION-a882c2e0ccb5c4de | SESSION-a882c2e0ccb5c4de |
| session | SESSION-b80fe05f43c8ea84 | SESSION-b80fe05f43c8ea84 |
| session | SESSION-5cf0a55c90f3167b | SESSION-5cf0a55c90f3167b |
| host | 192.168.1.1 | host:192.168.1.1 |
| session | SESSION-d5b0dc6c225fb5ab | SESSION-d5b0dc6c225fb5ab |
| session | SESSION-d72ea413c080dcbc | SESSION-d72ea413c080dcbc |
| session | SESSION-d9a9efb4c9de80c9 | SESSION-d9a9efb4c9de80c9 |
| session | SESSION-c5e5e8f9f56cdfa8 | SESSION-c5e5e8f9f56cdfa8 |
| session | SESSION-ff83896fc2103d16 | SESSION-ff83896fc2103d16 |
| flow | flow:17bf0b8870e1 | flow:17bf0b8870e1 |
| flow | flow:3745b23f1e40 | flow:3745b23f1e40 |
| protocol_event | pe:syn:SESSION-889982a12cbda1be | pe:syn:SESSION-889982a12cbda |
| port_hub | 44557 | port:tcp:44557 |
| session | SESSION-b966e6b5335f2d5a | SESSION-b966e6b5335f2d5a |
| flow | flow:25fa7f4f2e02 | flow:25fa7f4f2e02 |
| session | SESSION-7797a29b89b8d249 | SESSION-7797a29b89b8d249 |
| session | SESSION-97a28a89c9c66f63 | SESSION-97a28a89c9c66f63 |
| session | SESSION-cd1e8e0582d28510 | SESSION-cd1e8e0582d28510 |
| session | SESSION-7028b4ee01591a8c | SESSION-7028b4ee01591a8c |
| session | SESSION-7758a107224d9563 | SESSION-7758a107224d9563 |
| flow | flow:f1c3e1b86597 | flow:f1c3e1b86597 |
| flow | flow:a521a32c5718 | flow:a521a32c5718 |
| flow | flow:60aa49757de0 | flow:60aa49757de0 |
| session | SESSION-69fc4c89925965b9 | SESSION-69fc4c89925965b9 |
| session | SESSION-05862f47c08928e4 | SESSION-05862f47c08928e4 |
| flow | flow:b3392a17e203 | flow:b3392a17e203 |
| protocol_event | pe:dns:SESSION-253cc6bf7aec9a0f | pe:dns:SESSION-253cc6bf7aec9 |
| flow | flow:da1dbd71fa22 | flow:da1dbd71fa22 |
| asn | asn:16509 | asn:16509 |
| protocol_event | pe:syn:SESSION-758b7009134f1117 | pe:syn:SESSION-758b7009134f1 |
| flow | flow:cada5759a88f | flow:cada5759a88f |
| protocol_event | pe:dns:SESSION-3149632fd02a3bd4 | pe:dns:SESSION-3149632fd02a3 |
| session | SESSION-29b093f3accba60d | SESSION-29b093f3accba60d |
| session | SESSION-a926b62d79584690 | SESSION-a926b62d79584690 |
| session | SESSION-0c0a8d5885b6a7c7 | SESSION-0c0a8d5885b6a7c7 |
| session | SESSION-93556a977656b2a0 | SESSION-93556a977656b2a0 |
| protocol_event | pe:syn:SESSION-2935834eb4d5c433 | pe:syn:SESSION-2935834eb4d5c |
| flow | flow:a5a83a8a9258 | flow:a5a83a8a9258 |
| session | SESSION-e43b0a7becfc1fdd | SESSION-e43b0a7becfc1fdd |
| session | SESSION-cf76c123e7edce62 | SESSION-cf76c123e7edce62 |
| session | SESSION-c49e675074982741 | SESSION-c49e675074982741 |
| host | 192.168.1.165 | host:192.168.1.165 |
| port_hub | 44530 | port:tcp:44530 |
| protocol_event | pe:syn:SESSION-92dd2d3b6857bac1 | pe:syn:SESSION-92dd2d3b6857b |
| flow | flow:0f01ae0483e4 | flow:0f01ae0483e4 |
| protocol_event | pe:syn:SESSION-70606a15570d3189 | pe:syn:SESSION-70606a15570d3 |
| service | https | svc:https |
| session | SESSION-b0481336732ce1f6 | SESSION-b0481336732ce1f6 |
| session | SESSION-81e685d521d31c40 | SESSION-81e685d521d31c40 |
| behavior_group | BSG-DATA_EXFIL-e41a8a5cc959 | BSG-DATA_EXFIL-e41a8a5cc959 |
| protocol_event | pe:syn:SESSION-550ce200d4fffe9c | pe:syn:SESSION-550ce200d4fff |
| session | SESSION-32b4405e22717173 | SESSION-32b4405e22717173 |
| session | SESSION-96ca9dc682033a25 | SESSION-96ca9dc682033a25 |
| session | SESSION-1c11f677c31f86e3 | SESSION-1c11f677c31f86e3 |
| protocol_event | pe:syn:SESSION-79a48905cfc0e88d | pe:syn:SESSION-79a48905cfc0e |
| service | postgres | svc:postgres |
| behavior_group | BSG-BEACON-f29243d15b76 | BSG-BEACON-f29243d15b76 |
| protocol_event | pe:syn:SESSION-309cacd3b2e8e06d | pe:syn:SESSION-309cacd3b2e8e |
| session | SESSION-f2800a3eade1d953 | SESSION-f2800a3eade1d953 |
| flow | flow:d55b299a0d00 | flow:d55b299a0d00 |
| flow | flow:2ea92dfeee7c | flow:2ea92dfeee7c |
| protocol_event | pe:tls:SESSION-96f60e97a498db0c | pe:tls:SESSION-96f60e97a498d |
| session | SESSION-56d9ebc29c328547 | SESSION-56d9ebc29c328547 |
| protocol_event | pe:syn:SESSION-ac9e3adceff122e2 | pe:syn:SESSION-ac9e3adceff12 |
| protocol_event | pe:syn:SESSION-edcf0feb25fb307f | pe:syn:SESSION-edcf0feb25fb3 |
| session | SESSION-139fb9389c59c366 | SESSION-139fb9389c59c366 |
| behavior_group | BSG-DATA_EXFIL-e7f288856e4c | BSG-DATA_EXFIL-e7f288856e4c |
| protocol_event | pe:rst:SESSION-fa1354d2d519225e | pe:rst:SESSION-fa1354d2d5192 |
| protocol_event | pe:rst:SESSION-2bb87d0fbbaf434c | pe:rst:SESSION-2bb87d0fbbaf4 |
| session | SESSION-190ee104a243728c | SESSION-190ee104a243728c |
| tls_sni | tls_sni:chatgpt.com | tls_sni:chatgpt.com |
| flow | flow:4720987a7f17 | flow:4720987a7f17 |
| session | SESSION-2195649fe0f4de9d | SESSION-2195649fe0f4de9d |
| flow | flow:33ca0fe9d218 | flow:33ca0fe9d218 |
| session | SESSION-c190f8e29174f0fe | SESSION-c190f8e29174f0fe |
| flow | flow:e835d582a0e9 | flow:e835d582a0e9 |
| flow | flow:0f0d03716fd2 | flow:0f0d03716fd2 |
| flow | flow:801fb0d7fd84 | flow:801fb0d7fd84 |
| flow | flow:6e085244fc72 | flow:6e085244fc72 |
| tls_sni | tls_sni:registry.npmjs.org | tls_sni:registry.npmjs.org |
| protocol_event | pe:syn:SESSION-4d92058c53b954b4 | pe:syn:SESSION-4d92058c53b95 |
| protocol_event | pe:tls:SESSION-6367915b8a8d6479 | pe:tls:SESSION-6367915b8a8d6 |
| session | SESSION-e0622424ff9dd6f2 | SESSION-e0622424ff9dd6f2 |
| flow | flow:5ec4727bef0b | flow:5ec4727bef0b |
| flow | flow:b2042c07d8a3 | flow:b2042c07d8a3 |
| protocol_event | pe:syn:SESSION-db4258adee2ba45a | pe:syn:SESSION-db4258adee2ba |
| protocol_event | pe:syn:SESSION-90bd41870aa59bf9 | pe:syn:SESSION-90bd41870aa59 |
| flow | flow:515a5c3d69de | flow:515a5c3d69de |
| session | SESSION-f50e4113b4aaf23c | SESSION-f50e4113b4aaf23c |
| flow | flow:deeced821817 | flow:deeced821817 |
| session | SESSION-e0ad0397b98e0a01 | SESSION-e0ad0397b98e0a01 |
| flow | flow:ad7056b79a24 | flow:ad7056b79a24 |
| protocol_event | pe:syn:SESSION-fa1354d2d519225e | pe:syn:SESSION-fa1354d2d5192 |
| session | SESSION-475c2360af0deb2c | SESSION-475c2360af0deb2c |
| session | SESSION-80551e13f3a1d1d3 | SESSION-80551e13f3a1d1d3 |
| protocol_event | pe:syn:SESSION-016674f0a59c9ec7 | pe:syn:SESSION-016674f0a59c9 |
| flow | flow:4bd5aa16e37d | flow:4bd5aa16e37d |
| protocol_event | pe:syn:SESSION-64aeb07268d33526 | pe:syn:SESSION-64aeb07268d33 |
| flow | flow:63f5e4aedb97 | flow:63f5e4aedb97 |
| flow | flow:f35240ee4f75 | flow:f35240ee4f75 |
| session | SESSION-22d754d9b3efdf14 | SESSION-22d754d9b3efdf14 |
| flow | flow:0e4a709c4b44 | flow:0e4a709c4b44 |
| protocol_event | pe:tls:SESSION-bd47576413b505b5 | pe:tls:SESSION-bd47576413b50 |
| flow | flow:440712638364 | flow:440712638364 |
| port_hub | 57815 | port:tcp:57815 |
| flow | flow:4fc67ae456c4 | flow:4fc67ae456c4 |
| flow | flow:1aae5b5f4523 | flow:1aae5b5f4523 |
| flow | flow:b51c4d5956da | flow:b51c4d5956da |
| session | SESSION-f743391fa64e6dda | SESSION-f743391fa64e6dda |
| session | SESSION-3996714cb64d55ac | SESSION-3996714cb64d55ac |
| protocol_event | pe:tls:SESSION-977b43f50d1ad72d | pe:tls:SESSION-977b43f50d1ad |
| session | SESSION-bb08ad195d2764c4 | SESSION-bb08ad195d2764c4 |
| protocol_event | pe:syn:SESSION-fe209de061b616f8 | pe:syn:SESSION-fe209de061b61 |
| session | SESSION-b7cb0a6a0e51d7fd | SESSION-b7cb0a6a0e51d7fd |
| flow | flow:ba4c55773d8e | flow:ba4c55773d8e |
| port_hub | 46294 | port:tcp:46294 |
| session | SESSION-72e5540a120aca4f | SESSION-72e5540a120aca4f |
| flow | flow:98e6a0db455b | flow:98e6a0db455b |
| session | SESSION-2c24503ab40a1d16 | SESSION-2c24503ab40a1d16 |
| session | SESSION-d1b4607c68cd1425 | SESSION-d1b4607c68cd1425 |
| flow | flow:94cf508d8fef | flow:94cf508d8fef |
| flow | flow:d527331cb346 | flow:d527331cb346 |
| protocol_event | pe:syn:SESSION-458b26d0950f0b85 | pe:syn:SESSION-458b26d0950f0 |
| port_hub | 5353 | port:udp:5353 |
| protocol_event | pe:syn:SESSION-e3aa5aaf996f7e23 | pe:syn:SESSION-e3aa5aaf996f7 |
| flow | flow:029ded682a5b | flow:029ded682a5b |
| service | http | svc:http |
| session | SESSION-4e595b7381291672 | SESSION-4e595b7381291672 |
| flow | flow:09a01e1779bd | flow:09a01e1779bd |
| protocol_event | pe:syn:SESSION-073d084e46f38cd3 | pe:syn:SESSION-073d084e46f38 |
| protocol_event | pe:tls:SESSION-eb8bb87dc4c64532 | pe:tls:SESSION-eb8bb87dc4c64 |
| session | SESSION-8bc9961984b1cd0d | SESSION-8bc9961984b1cd0d |
| protocol_event | pe:tls:SESSION-cfa8fa920121a620 | pe:tls:SESSION-cfa8fa920121a |
| protocol_event | pe:syn:SESSION-1af58dd08460838c | pe:syn:SESSION-1af58dd084608 |
| protocol_event | pe:dns:SESSION-9b629d94c71ad646 | pe:dns:SESSION-9b629d94c71ad |
| protocol_event | pe:tls:SESSION-1cfc7765c9a69bd2 | pe:tls:SESSION-1cfc7765c9a69 |
| flow | flow:f83f497f07c5 | flow:f83f497f07c5 |
| protocol_event | pe:syn:SESSION-100d977dcd765ffd | pe:syn:SESSION-100d977dcd765 |
| protocol_event | pe:syn:SESSION-8cd5031496731c2a | pe:syn:SESSION-8cd5031496731 |
| flow | flow:8bacea338005 | flow:8bacea338005 |
| host | 172.18.0.2 | host:172.18.0.2 |
| protocol_event | pe:dns:SESSION-ce74ac5bcce0e530 | pe:dns:SESSION-ce74ac5bcce0e |
| flow | flow:a1e737a0f84c | flow:a1e737a0f84c |
| flow | flow:683483c8891b | flow:683483c8891b |
| protocol_event | pe:syn:SESSION-2bb87d0fbbaf434c | pe:syn:SESSION-2bb87d0fbbaf4 |
| flow | flow:9f47d4263847 | flow:9f47d4263847 |
| session | SESSION-b5288e21ceae125c | SESSION-b5288e21ceae125c |
| behavior_group | BSG-BEACON-3efc408c61c8 | BSG-BEACON-3efc408c61c8 |
| session | SESSION-9a53c05670838fd4 | SESSION-9a53c05670838fd4 |
| geo_point | geo_32.77970_-96.80220 | geo_32.77970_-96.80220 |
| session | SESSION-c9dc4111f1711b44 | SESSION-c9dc4111f1711b44 |
| session | SESSION-dbe10df51c80cf56 | SESSION-dbe10df51c80cf56 |
| flow | flow:fe85441a699f | flow:fe85441a699f |
| org | Microsoft Corporation | org:Microsoft Corporation |
| session | SESSION-8b19737c03b13e65 | SESSION-8b19737c03b13e65 |
| session | SESSION-df46e6208423eba4 | SESSION-df46e6208423eba4 |
| session | SESSION-8cb18c771a483b74 | SESSION-8cb18c771a483b74 |
| session | SESSION-b9253f675631fa7d | SESSION-b9253f675631fa7d |
| session | SESSION-f9799944bf013155 | SESSION-f9799944bf013155 |
| flow | flow:7ccd1870ca19 | flow:7ccd1870ca19 |
| flow | flow:f9f29b9e657e | flow:f9f29b9e657e |
| session | SESSION-53ebb359e66d5d3d | SESSION-53ebb359e66d5d3d |
| protocol_event | pe:syn:SESSION-86d8648b563a0a93 | pe:syn:SESSION-86d8648b563a0 |
| session | SESSION-f8769bc376e475c8 | SESSION-f8769bc376e475c8 |
| flow | flow:c1aa32256e2f | flow:c1aa32256e2f |
| protocol_event | pe:syn:SESSION-f2800a3eade1d953 | pe:syn:SESSION-f2800a3eade1d |
| flow | flow:5fe682c7e65f | flow:5fe682c7e65f |
| protocol_event | pe:syn:SESSION-541f21aa08f1c433 | pe:syn:SESSION-541f21aa08f1c |
| session | SESSION-6d456bb15f61432c | SESSION-6d456bb15f61432c |
| flow | flow:1177bf259192 | flow:1177bf259192 |
| flow | flow:03fa62ee7774 | flow:03fa62ee7774 |
| behavior_group | BSG-DATA_EXFIL-dacf828e7271 | BSG-DATA_EXFIL-dacf828e7271 |
| flow | flow:7d99bcb4e320 | flow:7d99bcb4e320 |
| session | SESSION-e71cd89d4e56de05 | SESSION-e71cd89d4e56de05 |
| flow | flow:58193144bfb0 | flow:58193144bfb0 |
| flow | flow:b50c86b2f2c0 | flow:b50c86b2f2c0 |
| session | SESSION-dd2c6de5d49f84dd | SESSION-dd2c6de5d49f84dd |
| session | SESSION-2b43e95e0d0c5f74 | SESSION-2b43e95e0d0c5f74 |
| protocol_event | pe:syn:SESSION-d50c29924253cad7 | pe:syn:SESSION-d50c29924253c |
| protocol_event | pe:tls:SESSION-b72d89abd43ba58e | pe:tls:SESSION-b72d89abd43ba |
| protocol_event | pe:syn:SESSION-100809527cfb581a | pe:syn:SESSION-100809527cfb5 |
| protocol_event | pe:syn:SESSION-7e65fd397eb315c7 | pe:syn:SESSION-7e65fd397eb31 |
| session | SESSION-6164d9df171f5ae7 | SESSION-6164d9df171f5ae7 |
| flow | flow:4b05ced5d14a | flow:4b05ced5d14a |
| session | SESSION-4066b2293848b2b2 | SESSION-4066b2293848b2b2 |
| protocol_event | pe:rst:SESSION-66bfe6fe9625dea4 | pe:rst:SESSION-66bfe6fe9625d |
| flow | flow:5c81776b9189 | flow:5c81776b9189 |
| protocol_event | pe:syn:SESSION-43cfeab39c6cc207 | pe:syn:SESSION-43cfeab39c6cc |
| port_hub | 46152 | port:tcp:46152 |
| flow | flow:23381113d09b | flow:23381113d09b |
| flow | flow:1a6349e7fea2 | flow:1a6349e7fea2 |
| session | SESSION-8cd5031496731c2a | SESSION-8cd5031496731c2a |
| session | SESSION-629ca45e17716c22 | SESSION-629ca45e17716c22 |
| flow | flow:f372f71d3a41 | flow:f372f71d3a41 |
| session | SESSION-703b04a6612ad9e0 | SESSION-703b04a6612ad9e0 |
| protocol_event | pe:syn:SESSION-57ec79a2a9bd7398 | pe:syn:SESSION-57ec79a2a9bd7 |
| flow | flow:39e5a3e8193b | flow:39e5a3e8193b |
| flow | flow:219b0719ba4b | flow:219b0719ba4b |
| session | SESSION-a78a6b784715a578 | SESSION-a78a6b784715a578 |
| flow | flow:3c721ce3dc74 | flow:3c721ce3dc74 |
| session | SESSION-1af58dd08460838c | SESSION-1af58dd08460838c |
| session | SESSION-44139a06dcd3d0ef | SESSION-44139a06dcd3d0ef |
| session | SESSION-d3f2944b5db5068b | SESSION-d3f2944b5db5068b |
| flow | flow:6f35757e6fd8 | flow:6f35757e6fd8 |
| flow | flow:fff029adbc80 | flow:fff029adbc80 |
| flow | flow:67dcaee397f1 | flow:67dcaee397f1 |
| behavior_group | BSG-BEACON-6af00b59011c | BSG-BEACON-6af00b59011c |
| flow | flow:2c951d4c10a7 | flow:2c951d4c10a7 |
| protocol_event | pe:rst:SESSION-3f602f3575fbc95e | pe:rst:SESSION-3f602f3575fbc |
| protocol_event | pe:syn:SESSION-ed28a8cd564f78db | pe:syn:SESSION-ed28a8cd564f7 |
| protocol_event | pe:syn:SESSION-85bac2569396ac15 | pe:syn:SESSION-85bac2569396a |
| session | SESSION-e5496581ae7ea611 | SESSION-e5496581ae7ea611 |
| session | SESSION-1e07301ddce13746 | SESSION-1e07301ddce13746 |
| flow | flow:db6ea98e1899 | flow:db6ea98e1899 |
| flow | flow:7e7cb3ccece7 | flow:7e7cb3ccece7 |
| protocol_event | pe:tls:SESSION-56d9ebc29c328547 | pe:tls:SESSION-56d9ebc29c328 |
| flow | flow:388d7bd1be82 | flow:388d7bd1be82 |
| session | SESSION-aeb8d7e30bb3fb80 | SESSION-aeb8d7e30bb3fb80 |
| session | SESSION-fd41b4700b718b8c | SESSION-fd41b4700b718b8c |
| session | SESSION-f7ec98436750a4d4 | SESSION-f7ec98436750a4d4 |
| flow | flow:63997ef81f7f | flow:63997ef81f7f |
| session | SESSION-553776601d0154ca | SESSION-553776601d0154ca |
| session | SESSION-04cac82803937d55 | SESSION-04cac82803937d55 |
| flow | flow:9f6ff82b63e4 | flow:9f6ff82b63e4 |
| flow | flow:2a5a5acda1dd | flow:2a5a5acda1dd |
| session | SESSION-1d99eae64a5ae91c | SESSION-1d99eae64a5ae91c |
| flow | flow:45b45c6d7a7f | flow:45b45c6d7a7f |
| session | SESSION-27726e453a7ced69 | SESSION-27726e453a7ced69 |
| protocol_event | pe:tls:SESSION-cd1e8e0582d28510 | pe:tls:SESSION-cd1e8e0582d28 |
| session | SESSION-bd47576413b505b5 | SESSION-bd47576413b505b5 |
| protocol_event | pe:rst:SESSION-c5e5e8f9f56cdfa8 | pe:rst:SESSION-c5e5e8f9f56cd |
| session | SESSION-f0676728ca82102f | SESSION-f0676728ca82102f |
| flow | flow:8e3ca465bf07 | flow:8e3ca465bf07 |
| flow | flow:16d9204aabbf | flow:16d9204aabbf |
| flow | flow:b0202da78af9 | flow:b0202da78af9 |
| session | SESSION-7264815ae0d54f9c | SESSION-7264815ae0d54f9c |
| flow | flow:75d8037d58a1 | flow:75d8037d58a1 |
| session | SESSION-1f71b76829657537 | SESSION-1f71b76829657537 |
| protocol_event | pe:syn:SESSION-60e51e11c98105b9 | pe:syn:SESSION-60e51e11c9810 |
| behavior_group | BSG-BEACON-92f611c51e9a | BSG-BEACON-92f611c51e9a |
| session | SESSION-15860c0f67873e5e | SESSION-15860c0f67873e5e |
| flow | flow:169e96fd8b6e | flow:169e96fd8b6e |
| session | SESSION-e7db206a9aa937c1 | SESSION-e7db206a9aa937c1 |
| protocol_event | pe:syn:SESSION-6f2944733d12af92 | pe:syn:SESSION-6f2944733d12a |
| flow | flow:c73e913d875c | flow:c73e913d875c |
| session | SESSION-a2d11b861f7eb6f1 | SESSION-a2d11b861f7eb6f1 |
| session | SESSION-be990e3c770e348d | SESSION-be990e3c770e348d |
| session | SESSION-0240bde3132895ac | SESSION-0240bde3132895ac |
| session | SESSION-8d201a0b3bce218a | SESSION-8d201a0b3bce218a |
| host | 4.249.131.160 | host:4.249.131.160 |
| protocol_event | pe:rst:SESSION-6367915b8a8d6479 | pe:rst:SESSION-6367915b8a8d6 |
| session | SESSION-909b4326ae85444e | SESSION-909b4326ae85444e |
| flow | flow:9dc7bb06bcae | flow:9dc7bb06bcae |
| flow | flow:0d508fd5c037 | flow:0d508fd5c037 |
| flow | flow:23b400026657 | flow:23b400026657 |
| session | SESSION-b7fca11eae0fc272 | SESSION-b7fca11eae0fc272 |
| protocol_event | pe:syn:SESSION-650f2832f41a8b13 | pe:syn:SESSION-650f2832f41a8 |
| flow | flow:eb97e849da80 | flow:eb97e849da80 |
| host | 192.168.1.154 | host:192.168.1.154 |
| session | SESSION-0e28906756511644 | SESSION-0e28906756511644 |
| flow | flow:329bfd3cafd5 | flow:329bfd3cafd5 |
| protocol_event | pe:syn:SESSION-6cf553d2b91b85c9 | pe:syn:SESSION-6cf553d2b91b8 |
| flow | flow:be233ef6e121 | flow:be233ef6e121 |
| flow | flow:f020082e6621 | flow:f020082e6621 |
| flow | flow:9c268119cc77 | flow:9c268119cc77 |
| session | SESSION-92dd2d3b6857bac1 | SESSION-92dd2d3b6857bac1 |
| protocol_event | pe:syn:SESSION-a2d11b861f7eb6f1 | pe:syn:SESSION-a2d11b861f7eb |
| flow | flow:1ec536c853f1 | flow:1ec536c853f1 |
| behavior_group | BSG-HORIZ_SCAN-cd2c52661c4b | BSG-HORIZ_SCAN-cd2c52661c4b |
| protocol_event | pe:tls:SESSION-d5b0dc6c225fb5ab | pe:tls:SESSION-d5b0dc6c225fb |
| protocol_event | pe:syn:SESSION-a8f1147a2013d309 | pe:syn:SESSION-a8f1147a2013d |
| session | SESSION-f21f57f9271d6488 | SESSION-f21f57f9271d6488 |
| flow | flow:42d6473b4ebf | flow:42d6473b4ebf |
| session | SESSION-386fc5c4a8940d8a | SESSION-386fc5c4a8940d8a |
| flow | flow:3b08771ee95c | flow:3b08771ee95c |
| flow | flow:83e165c42ec2 | flow:83e165c42ec2 |
| flow | flow:0ad6593ab250 | flow:0ad6593ab250 |
| flow | flow:3264492c21a2 | flow:3264492c21a2 |
| flow | flow:ccb781fe82cd | flow:ccb781fe82cd |
| session | SESSION-3cf16f9bdc8cffa6 | SESSION-3cf16f9bdc8cffa6 |
| flow | flow:2fccc6b6b3fc | flow:2fccc6b6b3fc |
| protocol_event | pe:syn:SESSION-074e94ddc91b70d6 | pe:syn:SESSION-074e94ddc91b7 |
| org | Akamai Connected Cloud | org:Akamai Connected Cloud |
| protocol_event | pe:tls:SESSION-b418266c25081e46 | pe:tls:SESSION-b418266c25081 |
| session | SESSION-d50c29924253cad7 | SESSION-d50c29924253cad7 |
| protocol_event | pe:tls:SESSION-15860c0f67873e5e | pe:tls:SESSION-15860c0f67873 |
| protocol_event | pe:syn:SESSION-abb50d03e723988e | pe:syn:SESSION-abb50d03e7239 |
| session | SESSION-e7e01c30712fcb92 | SESSION-e7e01c30712fcb92 |
| session | SESSION-a5b322a05ae36ffa | SESSION-a5b322a05ae36ffa |
| flow | flow:e37fb326bbcc | flow:e37fb326bbcc |
| protocol_event | pe:syn:SESSION-2195649fe0f4de9d | pe:syn:SESSION-2195649fe0f4d |
| session | SESSION-db4258adee2ba45a | SESSION-db4258adee2ba45a |
| session | SESSION-a0970a11218f4a95 | SESSION-a0970a11218f4a95 |
| flow | flow:7c2c7bd3c6bf | flow:7c2c7bd3c6bf |
| geo_point | geo_39.04690_-77.49030 | geo_39.04690_-77.49030 |
| flow | flow:5b89cbbc6ed8 | flow:5b89cbbc6ed8 |
| session | SESSION-0a1a7d9189351004 | SESSION-0a1a7d9189351004 |
| flow | flow:011e04b26639 | flow:011e04b26639 |
| flow | flow:734f70246c1d | flow:734f70246c1d |
| protocol_event | pe:syn:SESSION-e9bdc124ee62a19d | pe:syn:SESSION-e9bdc124ee62a |
| flow | flow:e1c31411790d | flow:e1c31411790d |
| session | SESSION-57ec79a2a9bd7398 | SESSION-57ec79a2a9bd7398 |
| protocol_event | pe:syn:SESSION-9f1fad2d78ad45a7 | pe:syn:SESSION-9f1fad2d78ad4 |
| session | SESSION-335f6233783d573b | SESSION-335f6233783d573b |
| session | SESSION-6f33ba43391aaa93 | SESSION-6f33ba43391aaa93 |
| pcap_artifact | PCAP:pcapng_neurosphere_20260531_143001_1:d5aac9caf238 | PCAP:pcapng_neurosphere_2026 |
| flow | flow:f9a7c9d3fa70 | flow:f9a7c9d3fa70 |
| session | SESSION-79a48905cfc0e88d | SESSION-79a48905cfc0e88d |
| protocol_event | pe:syn:SESSION-e62117779fa5a33a | pe:syn:SESSION-e62117779fa5a |
| session | SESSION-8cb7dc59d2fd7bda | SESSION-8cb7dc59d2fd7bda |
| protocol_event | pe:syn:SESSION-cb5c548e05014469 | pe:syn:SESSION-cb5c548e05014 |
| session | SESSION-e5a971a2b8065b2f | SESSION-e5a971a2b8065b2f |
| flow | flow:48b9a0c4a1e0 | flow:48b9a0c4a1e0 |
| session | SESSION-302dd204572b69d1 | SESSION-302dd204572b69d1 |
| flow | flow:d03e40a74722 | flow:d03e40a74722 |
| flow | flow:d0179a8eb875 | flow:d0179a8eb875 |
| protocol_event | pe:syn:SESSION-3a1f5293d9704b48 | pe:syn:SESSION-3a1f5293d9704 |
| flow | flow:4d6fb22b43d2 | flow:4d6fb22b43d2 |
| flow | flow:ad22805e090b | flow:ad22805e090b |
| flow | flow:0ea559ecd644 | flow:0ea559ecd644 |
| session | SESSION-05b461c656374b26 | SESSION-05b461c656374b26 |
| session | SESSION-47d9fb49c9aa85c3 | SESSION-47d9fb49c9aa85c3 |
| port_hub | 45149 | port:tcp:45149 |
| session | SESSION-dfc756c4c84013a3 | SESSION-dfc756c4c84013a3 |
| protocol_event | pe:dns:SESSION-335f6233783d573b | pe:dns:SESSION-335f6233783d5 |
| protocol_event | pe:syn:SESSION-b7f2c2d9ae3fbedd | pe:syn:SESSION-b7f2c2d9ae3fb |
| dns_name | dns:play.googleapis.com | dns:play.googleapis.com |
| session | SESSION-a6bcab272bcbe760 | SESSION-a6bcab272bcbe760 |
| session | SESSION-5e62e24db74a7509 | SESSION-5e62e24db74a7509 |
| session | SESSION-87cc766284006ed1 | SESSION-87cc766284006ed1 |
| protocol_event | pe:syn:SESSION-5e43844ab55da347 | pe:syn:SESSION-5e43844ab55da |
| session | SESSION-51c4a6f65ea6b690 | SESSION-51c4a6f65ea6b690 |
| flow | flow:f8c255388ee1 | flow:f8c255388ee1 |
| protocol_event | pe:syn:SESSION-edd1073d7fc358c7 | pe:syn:SESSION-edd1073d7fc35 |
| protocol_event | pe:syn:SESSION-f7ec98436750a4d4 | pe:syn:SESSION-f7ec98436750a |
| session | SESSION-fed277b857243633 | SESSION-fed277b857243633 |
| flow | flow:5e3cedc28e2f | flow:5e3cedc28e2f |
| session | SESSION-93aaa4f42fc8382f | SESSION-93aaa4f42fc8382f |
| flow | flow:ad4967c50b03 | flow:ad4967c50b03 |
| protocol_event | pe:syn:SESSION-e0622424ff9dd6f2 | pe:syn:SESSION-e0622424ff9dd |
| flow | flow:0b4f10613793 | flow:0b4f10613793 |
| protocol_event | pe:syn:SESSION-c81f09363c528434 | pe:syn:SESSION-c81f09363c528 |
| flow | flow:0b38f82c9f7f | flow:0b38f82c9f7f |
| flow | flow:27ba8068f724 | flow:27ba8068f724 |
| flow | flow:77d47e365e46 | flow:77d47e365e46 |
| service | dns | svc:dns |
| protocol_event | pe:tls:SESSION-6d456bb15f61432c | pe:tls:SESSION-6d456bb15f614 |
| protocol_event | pe:syn:SESSION-fe9331abf8bf9d2a | pe:syn:SESSION-fe9331abf8bf9 |
| session | SESSION-b01b925f3ff0d790 | SESSION-b01b925f3ff0d790 |
| session | SESSION-6f5d570a053b846c | SESSION-6f5d570a053b846c |
| protocol_event | pe:syn:SESSION-f50e4113b4aaf23c | pe:syn:SESSION-f50e4113b4aaf |
| host | 209.177.156.94 | host:209.177.156.94 |
| protocol_event | pe:syn:SESSION-ab724b7a6bde96c9 | pe:syn:SESSION-ab724b7a6bde9 |
| flow | flow:f62653e031d5 | flow:f62653e031d5 |
| protocol_event | pe:syn:SESSION-0ddb798aa6541b6a | pe:syn:SESSION-0ddb798aa6541 |
| session | SESSION-4d8234b7f59ac4cd | SESSION-4d8234b7f59ac4cd |
| protocol_event | pe:syn:SESSION-6f5d570a053b846c | pe:syn:SESSION-6f5d570a053b8 |
| protocol_event | pe:syn:SESSION-d8a39d719091e9b7 | pe:syn:SESSION-d8a39d719091e |
| session | SESSION-963aa6cdac10050c | SESSION-963aa6cdac10050c |
| flow | flow:d0eeed0b06c5 | flow:d0eeed0b06c5 |
| flow | flow:0705f9128398 | flow:0705f9128398 |
| flow | flow:5883a4d1f6c0 | flow:5883a4d1f6c0 |
| flow | flow:4e00714a5a9e | flow:4e00714a5a9e |
| protocol_event | pe:dns:SESSION-e1b217a1b3c4fb86 | pe:dns:SESSION-e1b217a1b3c4f |
| session | SESSION-d752b703412feb8e | SESSION-d752b703412feb8e |
| flow | flow:33b1ec436620 | flow:33b1ec436620 |
| flow | flow:6502345bf769 | flow:6502345bf769 |
| flow | flow:1c5c5ef4f963 | flow:1c5c5ef4f963 |
| flow | flow:fad726584142 | flow:fad726584142 |
| session | SESSION-3f98c500bc23b332 | SESSION-3f98c500bc23b332 |
| behavior_group | BSG-DATA_EXFIL-01d6c334761e | BSG-DATA_EXFIL-01d6c334761e |
| host | 104.16.2.34 | host:104.16.2.34 |
| session | SESSION-1d3c15d6f6f0a5f7 | SESSION-1d3c15d6f6f0a5f7 |
| flow | flow:153d7d9a503b | flow:153d7d9a503b |
| session | SESSION-ca686dc45978e778 | SESSION-ca686dc45978e778 |
| flow | flow:4948880342ac | flow:4948880342ac |
| dns_name | dns:wpad.local | dns:wpad.local |
| session | SESSION-fc83faaacc47c02b | SESSION-fc83faaacc47c02b |
| protocol_event | pe:syn:SESSION-0240bde3132895ac | pe:syn:SESSION-0240bde313289 |
| session | SESSION-6e24365fa63a8a5e | SESSION-6e24365fa63a8a5e |
| flow | flow:9dc9b9ea2b46 | flow:9dc9b9ea2b46 |
| flow | flow:f6743e747449 | flow:f6743e747449 |
| protocol_event | pe:syn:SESSION-01519d7a137238e9 | pe:syn:SESSION-01519d7a13723 |
| flow | flow:a270645cfcb9 | flow:a270645cfcb9 |
| org | NetActuate, Inc | org:NetActuate, Inc |
| flow | flow:9532f4847fca | flow:9532f4847fca |
| flow | flow:c04df621deca | flow:c04df621deca |
| flow | flow:7c4ffd8cdd0c | flow:7c4ffd8cdd0c |
| protocol_event | pe:syn:SESSION-7a7ce6101777a1ff | pe:syn:SESSION-7a7ce6101777a |
| flow | flow:1510daa65b79 | flow:1510daa65b79 |
| protocol_event | pe:syn:SESSION-aa258edb0b97196c | pe:syn:SESSION-aa258edb0b971 |
| flow | flow:b19b6bb50d7c | flow:b19b6bb50d7c |
| dns_name | dns:feodotracker.abuse.ch | dns:feodotracker.abuse.ch |
| session | SESSION-f5e468b91fa2e213 | SESSION-f5e468b91fa2e213 |
| session | SESSION-f5ea7231a9f2c142 | SESSION-f5ea7231a9f2c142 |
| host | 185.199.110.133 | host:185.199.110.133 |
| session | SESSION-f754cfff78cb379f | SESSION-f754cfff78cb379f |
| session | SESSION-4d92058c53b954b4 | SESSION-4d92058c53b954b4 |
| behavior_group | BSG-PORT_SCAN-1cabee609aa8 | BSG-PORT_SCAN-1cabee609aa8 |
| session | SESSION-3657f119813fd4f3 | SESSION-3657f119813fd4f3 |
| protocol_event | pe:tls:SESSION-c289ea75f4cb1c5d | pe:tls:SESSION-c289ea75f4cb1 |
| flow | flow:12e9d0234e5b | flow:12e9d0234e5b |
| session | SESSION-e8b400036d0ac5af | SESSION-e8b400036d0ac5af |
| flow | flow:7685ae79d375 | flow:7685ae79d375 |
| protocol_event | pe:syn:SESSION-4066b2293848b2b2 | pe:syn:SESSION-4066b2293848b |
| session | SESSION-26e795a6ba805c2b | SESSION-26e795a6ba805c2b |
| session | SESSION-052407204a0d1191 | SESSION-052407204a0d1191 |
| flow | flow:328d56ce22d9 | flow:328d56ce22d9 |
| session | SESSION-9cefb55e4048a71f | SESSION-9cefb55e4048a71f |
| protocol_event | pe:tls:SESSION-fe209de061b616f8 | pe:tls:SESSION-fe209de061b61 |
| protocol_event | pe:dns:SESSION-c9fbbf2c1fd20530 | pe:dns:SESSION-c9fbbf2c1fd20 |
| session | SESSION-a2d470da872117a0 | SESSION-a2d470da872117a0 |
| host | 224.0.0.22 | host:224.0.0.22 |
| flow | flow:8e0945a4ab64 | flow:8e0945a4ab64 |
| protocol_event | pe:tls:SESSION-2f198eb5522d6de0 | pe:tls:SESSION-2f198eb5522d6 |
| protocol_event | pe:syn:SESSION-e43b0a7becfc1fdd | pe:syn:SESSION-e43b0a7becfc1 |
| session | SESSION-ea928d91138d8cbc | SESSION-ea928d91138d8cbc |
| flow | flow:0d952107e504 | flow:0d952107e504 |
| session | SESSION-2935834eb4d5c433 | SESSION-2935834eb4d5c433 |
| protocol_event | pe:syn:SESSION-c2ff45a05a999a0e | pe:syn:SESSION-c2ff45a05a999 |
| protocol_event | pe:tls:SESSION-f754cfff78cb379f | pe:tls:SESSION-f754cfff78cb3 |
| flow | flow:3fd562f5f12c | flow:3fd562f5f12c |
| session | SESSION-309cacd3b2e8e06d | SESSION-309cacd3b2e8e06d |
| protocol_event | pe:syn:SESSION-be0c5d3c1ba55da3 | pe:syn:SESSION-be0c5d3c1ba55 |
| session | SESSION-b8b120bd53397054 | SESSION-b8b120bd53397054 |
| flow | flow:294aaf0b74fc | flow:294aaf0b74fc |
| session | SESSION-3553e9d3562c89cf | SESSION-3553e9d3562c89cf |
| protocol_event | pe:dns:SESSION-32b4405e22717173 | pe:dns:SESSION-32b4405e22717 |
| protocol_event | pe:syn:SESSION-6eb67ecd61626e1e | pe:syn:SESSION-6eb67ecd61626 |
| flow | flow:357a0a91efb0 | flow:357a0a91efb0 |
| protocol_event | pe:syn:SESSION-3339183d7b97bb04 | pe:syn:SESSION-3339183d7b97b |
| flow | flow:fc71825dfff8 | flow:fc71825dfff8 |
| flow | flow:4fb28d51fc43 | flow:4fb28d51fc43 |
| session | SESSION-cb5c548e05014469 | SESSION-cb5c548e05014469 |
| host | 172.18.0.1 | host:172.18.0.1 |
| flow | flow:76bbbcd36c68 | flow:76bbbcd36c68 |
| flow | flow:2b1b06feb6f5 | flow:2b1b06feb6f5 |
| flow | flow:b067d28639b0 | flow:b067d28639b0 |
| protocol_event | pe:syn:SESSION-089fb128a9024399 | pe:syn:SESSION-089fb128a9024 |
| protocol_event | pe:tls:SESSION-553776601d0154ca | pe:tls:SESSION-553776601d015 |
| protocol_event | pe:syn:SESSION-c5e5e8f9f56cdfa8 | pe:syn:SESSION-c5e5e8f9f56cd |
| protocol_event | pe:dns:SESSION-84b7f834843c699b | pe:dns:SESSION-84b7f834843c6 |
| protocol_event | pe:rst:SESSION-ff83896fc2103d16 | pe:rst:SESSION-ff83896fc2103 |
| flow | flow:56112c1217b1 | flow:56112c1217b1 |
| flow | flow:978312eacea0 | flow:978312eacea0 |
| session | SESSION-84b7f834843c699b | SESSION-84b7f834843c699b |
| flow | flow:ca1649105fc8 | flow:ca1649105fc8 |
| flow | flow:07fd382ca1f6 | flow:07fd382ca1f6 |
| protocol_event | pe:tls:SESSION-e3d7027dca17c6c3 | pe:tls:SESSION-e3d7027dca17c |
| host | 192.168.1.185 | host:192.168.1.185 |
| protocol_event | pe:syn:SESSION-a0fbe20e4ac0f4d3 | pe:syn:SESSION-a0fbe20e4ac0f |
| protocol_event | pe:syn:SESSION-190ee104a243728c | pe:syn:SESSION-190ee104a2437 |
| port_hub | 5001 | port:tcp:5001 |
| flow | flow:75d51858b35b | flow:75d51858b35b |
| session | SESSION-793e1256113700c9 | SESSION-793e1256113700c9 |
| protocol_event | pe:syn:SESSION-f5e468b91fa2e213 | pe:syn:SESSION-f5e468b91fa2e |
| session | SESSION-caf9cffdd80b1a59 | SESSION-caf9cffdd80b1a59 |
| session | SESSION-a5609cc2c3463f11 | SESSION-a5609cc2c3463f11 |
| protocol_event | pe:syn:SESSION-31733c26636d009f | pe:syn:SESSION-31733c26636d0 |
| org | Fastly, Inc. | org:Fastly, Inc. |
| session | SESSION-0ddb798aa6541b6a | SESSION-0ddb798aa6541b6a |
| protocol_event | pe:syn:SESSION-9cefb55e4048a71f | pe:syn:SESSION-9cefb55e4048a |
| protocol_event | pe:syn:SESSION-d72ea413c080dcbc | pe:syn:SESSION-d72ea413c080d |
| tls_sni | tls_sni:feodotracker.abuse.ch | tls_sni:feodotracker.abuse.c |
| flow | flow:deaef227ccda | flow:deaef227ccda |
| dns_name | dns:raw.githubusercontent.com | dns:raw.githubusercontent.co |
| protocol_event | pe:rst:SESSION-2c24503ab40a1d16 | pe:rst:SESSION-2c24503ab40a1 |
| protocol_event | pe:tls:SESSION-a2c976a45bf1d73c | pe:tls:SESSION-a2c976a45bf1d |
| session | SESSION-c17214463c3b4295 | SESSION-c17214463c3b4295 |
| protocol_event | pe:syn:SESSION-dadca3d6ac8ad6e7 | pe:syn:SESSION-dadca3d6ac8ad |
| protocol_event | pe:tls:SESSION-f688665059c0415c | pe:tls:SESSION-f688665059c04 |
| protocol_event | pe:rst:SESSION-b5288e21ceae125c | pe:rst:SESSION-b5288e21ceae1 |
| flow | flow:23167b5c7b2b | flow:23167b5c7b2b |
| session | SESSION-dbc9276b58a1eaa3 | SESSION-dbc9276b58a1eaa3 |
| session | SESSION-b72d89abd43ba58e | SESSION-b72d89abd43ba58e |
| protocol_event | pe:syn:SESSION-69fc4c89925965b9 | pe:syn:SESSION-69fc4c8992596 |
| session | SESSION-f11177d1105e822f | SESSION-f11177d1105e822f |
| protocol_event | pe:rst:SESSION-9b28800928e44902 | pe:rst:SESSION-9b28800928e44 |
| session | SESSION-d2bece626215459e | SESSION-d2bece626215459e |
| protocol_event | pe:rst:SESSION-c2ff45a05a999a0e | pe:rst:SESSION-c2ff45a05a999 |
| session | SESSION-e11de486c42c391a | SESSION-e11de486c42c391a |
| session | SESSION-1b17ec536a17349a | SESSION-1b17ec536a17349a |
| flow | flow:709f155fc455 | flow:709f155fc455 |
| protocol_event | pe:tls:SESSION-b09335e9f2b8a092 | pe:tls:SESSION-b09335e9f2b8a |
| session | SESSION-29cc9ad7741510ad | SESSION-29cc9ad7741510ad |
| flow | flow:61884834e083 | flow:61884834e083 |
| protocol_event | pe:syn:SESSION-fb99e81c109520c4 | pe:syn:SESSION-fb99e81c10952 |
| session | SESSION-4f708232f252c2cb | SESSION-4f708232f252c2cb |
| session | SESSION-7542ae076eb3ece2 | SESSION-7542ae076eb3ece2 |
| session | SESSION-eb8bb87dc4c64532 | SESSION-eb8bb87dc4c64532 |
| session | SESSION-458b26d0950f0b85 | SESSION-458b26d0950f0b85 |
| flow | flow:2f988ffab4d0 | flow:2f988ffab4d0 |
| session | SESSION-83cc534019afea5c | SESSION-83cc534019afea5c |
| flow | flow:3ac51c4661dd | flow:3ac51c4661dd |
| session | SESSION-78dbc6bd30f6dece | SESSION-78dbc6bd30f6dece |
| flow | flow:99246e0ed798 | flow:99246e0ed798 |
| behavior_group | BSG-BEACON-312c32e67c7b | BSG-BEACON-312c32e67c7b |
| port_hub | 46274 | port:tcp:46274 |
| flow | flow:0fc8babe4fa0 | flow:0fc8babe4fa0 |
| flow | flow:56eeb3a50715 | flow:56eeb3a50715 |
| flow | flow:6804b4a7aa0f | flow:6804b4a7aa0f |
| flow | flow:53547ea85a48 | flow:53547ea85a48 |
| protocol_event | pe:syn:SESSION-df46e6208423eba4 | pe:syn:SESSION-df46e6208423e |
| protocol_event | pe:syn:SESSION-c190f8e29174f0fe | pe:syn:SESSION-c190f8e29174f |
| protocol_event | pe:syn:SESSION-c6bac1520f5a14b5 | pe:syn:SESSION-c6bac1520f5a1 |
| protocol_event | pe:syn:SESSION-170dca972be794d3 | pe:syn:SESSION-170dca972be79 |
| behavior_group | BSG-BEACON-6b92f4af7091 | BSG-BEACON-6b92f4af7091 |
| flow | flow:42409fd85526 | flow:42409fd85526 |
| protocol_event | pe:syn:SESSION-b72d89abd43ba58e | pe:syn:SESSION-b72d89abd43ba |
| org | GitHub, Inc. | org:GitHub, Inc. |
| behavior_group | BSG-BEACON-ff0873d3b432 | BSG-BEACON-ff0873d3b432 |
| protocol_event | pe:rst:SESSION-6f2944733d12af92 | pe:rst:SESSION-6f2944733d12a |
| flow | flow:09f4ca1df4b6 | flow:09f4ca1df4b6 |
| protocol_event | pe:syn:SESSION-1d66155a4480251c | pe:syn:SESSION-1d66155a44802 |
| session | SESSION-0d6cff07ca5b74eb | SESSION-0d6cff07ca5b74eb |
| protocol_event | pe:tls:SESSION-aad0caf4f84bb929 | pe:tls:SESSION-aad0caf4f84bb |
| pcap_artifact | PCAP:pcapng_neurosphere_20260531_143001_2:c92dfb3d42a1 | PCAP:pcapng_neurosphere_2026 |
| protocol_event | pe:syn:SESSION-26ab34a425f60ae3 | pe:syn:SESSION-26ab34a425f60 |
| geo_point | geo_37.75100_-97.82200 | geo_37.75100_-97.82200 |
| flow | flow:88fc76b6251c | flow:88fc76b6251c |
| flow | flow:8bcd2c54032e | flow:8bcd2c54032e |
| session | SESSION-074e94ddc91b70d6 | SESSION-074e94ddc91b70d6 |
| session | SESSION-ac9e3adceff122e2 | SESSION-ac9e3adceff122e2 |
| flow | flow:365c60dbe6cd | flow:365c60dbe6cd |
| protocol_event | pe:syn:SESSION-6164d9df171f5ae7 | pe:syn:SESSION-6164d9df171f5 |
| protocol_event | pe:syn:SESSION-7542ae076eb3ece2 | pe:syn:SESSION-7542ae076eb3e |
| flow | flow:2a4f87551df0 | flow:2a4f87551df0 |
| protocol_event | pe:rst:SESSION-e7db206a9aa937c1 | pe:rst:SESSION-e7db206a9aa93 |
| protocol_event | pe:rst:SESSION-72d258fe755aa75e | pe:rst:SESSION-72d258fe755aa |
| session | SESSION-a46c429b463a9640 | SESSION-a46c429b463a9640 |
| flow | flow:878a26bb6e27 | flow:878a26bb6e27 |
| protocol_event | pe:tls:SESSION-fa1354d2d519225e | pe:tls:SESSION-fa1354d2d5192 |
| flow | flow:632dffab5806 | flow:632dffab5806 |
| flow | flow:8b2048f0aa72 | flow:8b2048f0aa72 |
| protocol_event | pe:syn:SESSION-9ea7804b2fac31f5 | pe:syn:SESSION-9ea7804b2fac3 |
| flow | flow:23d732e0e2d8 | flow:23d732e0e2d8 |
| protocol_event | pe:syn:SESSION-97a28a89c9c66f63 | pe:syn:SESSION-97a28a89c9c66 |
| protocol_event | pe:syn:SESSION-27726e453a7ced69 | pe:syn:SESSION-27726e453a7ce |
| session | SESSION-cd452be7aaeb65fe | SESSION-cd452be7aaeb65fe |
| asn | asn:36236 | asn:36236 |
| protocol_event | pe:tls:SESSION-b46c758780ca7a7c | pe:tls:SESSION-b46c758780ca7 |
| session | SESSION-78a6838f57f2d010 | SESSION-78a6838f57f2d010 |
| host | 216.239.34.223 | host:216.239.34.223 |
| session | SESSION-6c981eff5fbd227c | SESSION-6c981eff5fbd227c |
| protocol_event | pe:tls:SESSION-faca149a347aae6b | pe:tls:SESSION-faca149a347aa |
| session | SESSION-c2ff45a05a999a0e | SESSION-c2ff45a05a999a0e |
| flow | flow:dec7f1d117fb | flow:dec7f1d117fb |
| session | SESSION-2a28fc9acd0444ed | SESSION-2a28fc9acd0444ed |
| session | SESSION-85bac2569396ac15 | SESSION-85bac2569396ac15 |
| flow | flow:3199e5096333 | flow:3199e5096333 |
| session | SESSION-de739eda352c7796 | SESSION-de739eda352c7796 |
| session | SESSION-456eb555f436e522 | SESSION-456eb555f436e522 |
| session | SESSION-ce74ac5bcce0e530 | SESSION-ce74ac5bcce0e530 |
| protocol_event | pe:syn:SESSION-baabbf7e2b22c5e8 | pe:syn:SESSION-baabbf7e2b22c |
| flow | flow:af7e5c0a7259 | flow:af7e5c0a7259 |
| flow | flow:b3223e486a01 | flow:b3223e486a01 |
| protocol_event | pe:syn:SESSION-cd452be7aaeb65fe | pe:syn:SESSION-cd452be7aaeb6 |
| flow | flow:393c34841365 | flow:393c34841365 |
| flow | flow:294409f8dee0 | flow:294409f8dee0 |
| protocol_event | pe:syn:SESSION-44139a06dcd3d0ef | pe:syn:SESSION-44139a06dcd3d |
| flow | flow:b2447dc9423d | flow:b2447dc9423d |
| protocol_event | pe:rst:SESSION-7264815ae0d54f9c | pe:rst:SESSION-7264815ae0d54 |
| behavior_group | BSG-BEACON-bea037c738fc | BSG-BEACON-bea037c738fc |
| session | SESSION-1aceaf296fabb8a4 | SESSION-1aceaf296fabb8a4 |
| session | SESSION-c780578a4585f135 | SESSION-c780578a4585f135 |
| session | SESSION-100809527cfb581a | SESSION-100809527cfb581a |
| flow | flow:a7eb5b245e39 | flow:a7eb5b245e39 |
| port_hub | 45886 | port:tcp:45886 |
| protocol_event | pe:tls:SESSION-a16534aafb8f2dda | pe:tls:SESSION-a16534aafb8f2 |
| flow | flow:3f29510f878c | flow:3f29510f878c |
| flow | flow:0952b18189ca | flow:0952b18189ca |
| flow | flow:574cd4de2050 | flow:574cd4de2050 |
| protocol_event | pe:rst:SESSION-e00ded900e72031a | pe:rst:SESSION-e00ded900e720 |
| flow | flow:4b500903c030 | flow:4b500903c030 |
| protocol_event | pe:syn:SESSION-456eb555f436e522 | pe:syn:SESSION-456eb555f436e |
| session | SESSION-56e90f3fdd7e3f37 | SESSION-56e90f3fdd7e3f37 |
| flow | flow:e1b51700cd72 | flow:e1b51700cd72 |
| host | 192.168.1.167 | host:192.168.1.167 |
| protocol_event | pe:syn:SESSION-d9e0e0417ed1497d | pe:syn:SESSION-d9e0e0417ed14 |
| session | SESSION-97afd411dc8433cd | SESSION-97afd411dc8433cd |
| protocol_event | pe:tls:SESSION-1577d7a6fde62cd5 | pe:tls:SESSION-1577d7a6fde62 |
| protocol_event | pe:tls:SESSION-2283d24358f27399 | pe:tls:SESSION-2283d24358f27 |
| flow | flow:69dcf5c524e4 | flow:69dcf5c524e4 |
| protocol_event | pe:syn:SESSION-a2c976a45bf1d73c | pe:syn:SESSION-a2c976a45bf1d |
| session | SESSION-abb50d03e723988e | SESSION-abb50d03e723988e |
| protocol_event | pe:syn:SESSION-a4725472dd4dbc49 | pe:syn:SESSION-a4725472dd4db |
| asn | asn:54113 | asn:54113 |
| flow | flow:ac4bcd8d3627 | flow:ac4bcd8d3627 |
| protocol_event | pe:tls:SESSION-f0676728ca82102f | pe:tls:SESSION-f0676728ca821 |
| protocol_event | pe:syn:SESSION-e3d7027dca17c6c3 | pe:syn:SESSION-e3d7027dca17c |
| session | SESSION-ec75037cbaf1f9e3 | SESSION-ec75037cbaf1f9e3 |
| flow | flow:da045e9fa2bd | flow:da045e9fa2bd |
| protocol_event | pe:rst:SESSION-fce7a71363893398 | pe:rst:SESSION-fce7a71363893 |
| protocol_event | pe:syn:SESSION-93cbd2b4192c3c38 | pe:syn:SESSION-93cbd2b4192c3 |
| protocol_event | pe:syn:SESSION-1f71b76829657537 | pe:syn:SESSION-1f71b76829657 |
| flow | flow:bcad2f86623e | flow:bcad2f86623e |
| flow | flow:6fb18ed8d309 | flow:6fb18ed8d309 |
| protocol_event | pe:dns:SESSION-cf76c123e7edce62 | pe:dns:SESSION-cf76c123e7edc |
| session | SESSION-32566c579cff324f | SESSION-32566c579cff324f |
| session | SESSION-9ea7804b2fac31f5 | SESSION-9ea7804b2fac31f5 |
| geo_point | geo_41.88350_-87.63050 | geo_41.88350_-87.63050 |
| session | SESSION-016674f0a59c9ec7 | SESSION-016674f0a59c9ec7 |
| session | SESSION-1d66155a4480251c | SESSION-1d66155a4480251c |
| protocol_event | pe:syn:SESSION-be990e3c770e348d | pe:syn:SESSION-be990e3c770e3 |
| session | SESSION-eca4c2a3e5fd196f | SESSION-eca4c2a3e5fd196f |
| flow | flow:ae89348b5ca7 | flow:ae89348b5ca7 |
| asn | asn:15169 | asn:15169 |
| flow | flow:e6900afdacd0 | flow:e6900afdacd0 |
| session | SESSION-feb07b7fc7550c32 | SESSION-feb07b7fc7550c32 |
| session | SESSION-90bd41870aa59bf9 | SESSION-90bd41870aa59bf9 |
| flow | flow:6808d1631a0c | flow:6808d1631a0c |
| protocol_event | pe:rst:SESSION-90bd41870aa59bf9 | pe:rst:SESSION-90bd41870aa59 |
| protocol_event | pe:tls:SESSION-27726e453a7ced69 | pe:tls:SESSION-27726e453a7ce |
| flow | flow:b638b95566a8 | flow:b638b95566a8 |
| port_hub | 45916 | port:tcp:45916 |
| session | SESSION-28a48b034dafced4 | SESSION-28a48b034dafced4 |
| protocol_event | pe:syn:SESSION-a5609cc2c3463f11 | pe:syn:SESSION-a5609cc2c3463 |
| session | SESSION-d7b4e1a1544ea8f4 | SESSION-d7b4e1a1544ea8f4 |
| session | SESSION-3a1f5293d9704b48 | SESSION-3a1f5293d9704b48 |
| session | SESSION-72bdae6c28a2c035 | SESSION-72bdae6c28a2c035 |
| session | SESSION-2f8b2c1222706a82 | SESSION-2f8b2c1222706a82 |
| flow | flow:ed2549ed17f5 | flow:ed2549ed17f5 |
| protocol_event | pe:tls:SESSION-9b28800928e44902 | pe:tls:SESSION-9b28800928e44 |
| flow | flow:039823796e55 | flow:039823796e55 |
| session | SESSION-9a8dcdd5d58370e7 | SESSION-9a8dcdd5d58370e7 |
| session | SESSION-29dc0936c4d93ba1 | SESSION-29dc0936c4d93ba1 |
| protocol_event | pe:syn:SESSION-fa34d349ad96d0b2 | pe:syn:SESSION-fa34d349ad96d |
| session | SESSION-650f2832f41a8b13 | SESSION-650f2832f41a8b13 |
| flow | flow:30562374b6e4 | flow:30562374b6e4 |
| flow | flow:644d4974f8d4 | flow:644d4974f8d4 |
| session | SESSION-95eea60af1e20708 | SESSION-95eea60af1e20708 |
| protocol_event | pe:syn:SESSION-66bfe6fe9625dea4 | pe:syn:SESSION-66bfe6fe9625d |
| flow | flow:7ae9b60163c6 | flow:7ae9b60163c6 |
| tls_sni | tls_sni:raw.githubusercontent.com | tls_sni:raw.githubuserconten |
| protocol_event | pe:tls:SESSION-15343069d83ab736 | pe:tls:SESSION-15343069d83ab |
| port_hub | 44722 | port:tcp:44722 |
| flow | flow:6d59777ba57f | flow:6d59777ba57f |
| flow | flow:21ab759cea7f | flow:21ab759cea7f |
| protocol_event | pe:tls:SESSION-d8e2a42834860f3d | pe:tls:SESSION-d8e2a42834860 |
| flow | flow:db57ca2433ea | flow:db57ca2433ea |
| session | SESSION-12e13fdf58bf5002 | SESSION-12e13fdf58bf5002 |
| flow | flow:72b3a56cc9da | flow:72b3a56cc9da |
| protocol_event | pe:syn:SESSION-817ad84e977ed661 | pe:syn:SESSION-817ad84e977ed |
| flow | flow:2a2720107626 | flow:2a2720107626 |
| port_hub | 45202 | port:tcp:45202 |
| protocol_event | pe:rst:SESSION-be990e3c770e348d | pe:rst:SESSION-be990e3c770e3 |
| port_hub | 11434 | port:tcp:11434 |
| flow | flow:91a57d856a19 | flow:91a57d856a19 |
| protocol_event | pe:syn:SESSION-852d5c5ce93e7e5b | pe:syn:SESSION-852d5c5ce93e7 |
| session | SESSION-674701e7b74ac3e3 | SESSION-674701e7b74ac3e3 |
| session | SESSION-81b2810f60d2281e | SESSION-81b2810f60d2281e |
| protocol_event | pe:tls:SESSION-1925c59e3dac3e6c | pe:tls:SESSION-1925c59e3dac3 |
| session | SESSION-60e51e11c98105b9 | SESSION-60e51e11c98105b9 |
| session | SESSION-80db58924ce452e6 | SESSION-80db58924ce452e6 |
| session | SESSION-49ae9b78920ec783 | SESSION-49ae9b78920ec783 |
| flow | flow:1a99de0b3739 | flow:1a99de0b3739 |
| protocol_event | pe:tls:SESSION-f21f57f9271d6488 | pe:tls:SESSION-f21f57f9271d6 |
| flow | flow:544ea4d61b31 | flow:544ea4d61b31 |
| flow | flow:b08295c7077e | flow:b08295c7077e |
| behavior_group | BSG-BEACON-937391f09716 | BSG-BEACON-937391f09716 |
| protocol_event | pe:syn:SESSION-65b84cb419a69715 | pe:syn:SESSION-65b84cb419a69 |
| flow | flow:709f9a4e06c3 | flow:709f9a4e06c3 |
| protocol_event | pe:syn:SESSION-951e2412fc57f4ac | pe:syn:SESSION-951e2412fc57f |
| protocol_event | pe:syn:SESSION-2e2872b471dbde1e | pe:syn:SESSION-2e2872b471dbd |
| protocol_event | pe:syn:SESSION-3f602f3575fbc95e | pe:syn:SESSION-3f602f3575fbc |
| protocol_event | pe:tls:SESSION-c37133abfa09d10f | pe:tls:SESSION-c37133abfa09d |
| behavior_group | BSG-BEACON-d609dc61a094 | BSG-BEACON-d609dc61a094 |
| flow | flow:eb9c56c461e5 | flow:eb9c56c461e5 |
| session | SESSION-7918fbff7e4d8074 | SESSION-7918fbff7e4d8074 |
| session | SESSION-3f602f3575fbc95e | SESSION-3f602f3575fbc95e |
| session | SESSION-0760f58d7df2e318 | SESSION-0760f58d7df2e318 |
| protocol_event | pe:syn:SESSION-4ed41fffad3e3c8d | pe:syn:SESSION-4ed41fffad3e3 |
| protocol_event | pe:syn:SESSION-fce7a71363893398 | pe:syn:SESSION-fce7a71363893 |
| asn | asn:14618 | asn:14618 |
| session | SESSION-f688665059c0415c | SESSION-f688665059c0415c |
| protocol_event | pe:syn:SESSION-a6bcab272bcbe760 | pe:syn:SESSION-a6bcab272bcbe |
| protocol_event | pe:tls:SESSION-a0fbe20e4ac0f4d3 | pe:tls:SESSION-a0fbe20e4ac0f |
| protocol_event | pe:syn:SESSION-53ebb359e66d5d3d | pe:syn:SESSION-53ebb359e66d5 |
| session | SESSION-f073eb42fca217bf | SESSION-f073eb42fca217bf |
| host | 199.165.136.100 | host:199.165.136.100 |
| session | SESSION-2825d9f84bb6fbdc | SESSION-2825d9f84bb6fbdc |
| flow | flow:6acacb94ac7a | flow:6acacb94ac7a |
| protocol_event | pe:syn:SESSION-5a98ffb9a195b127 | pe:syn:SESSION-5a98ffb9a195b |
| session | SESSION-0886b7e28133f479 | SESSION-0886b7e28133f479 |
| session | SESSION-5516be27696bf7e5 | SESSION-5516be27696bf7e5 |
| session | SESSION-a0fbe20e4ac0f4d3 | SESSION-a0fbe20e4ac0f4d3 |
| protocol_event | pe:tls:SESSION-e71cd89d4e56de05 | pe:tls:SESSION-e71cd89d4e56d |
| flow | flow:5566ccdbb566 | flow:5566ccdbb566 |
| flow | flow:3b2b31dbf2c7 | flow:3b2b31dbf2c7 |
| session | SESSION-2784f7b2ab64e719 | SESSION-2784f7b2ab64e719 |
| protocol_event | pe:syn:SESSION-71ef3eb03fc36b15 | pe:syn:SESSION-71ef3eb03fc36 |
| flow | flow:dd00a7255664 | flow:dd00a7255664 |
| session | SESSION-5a98ffb9a195b127 | SESSION-5a98ffb9a195b127 |
| session | SESSION-c67500c879dbca24 | SESSION-c67500c879dbca24 |
| flow | flow:7e63fb054476 | flow:7e63fb054476 |
| flow | flow:f1e3f6632a19 | flow:f1e3f6632a19 |
| flow | flow:d8fdde6c04f7 | flow:d8fdde6c04f7 |
| flow | flow:510927b92b2b | flow:510927b92b2b |
| protocol_event | pe:syn:SESSION-7d42a55e9e04fe10 | pe:syn:SESSION-7d42a55e9e04f |
| protocol_event | pe:syn:SESSION-d1b4607c68cd1425 | pe:syn:SESSION-d1b4607c68cd1 |
| session | SESSION-349ea8b8b7448a84 | SESSION-349ea8b8b7448a84 |
| session | SESSION-5e9f1ce8c5bc9dcd | SESSION-5e9f1ce8c5bc9dcd |
| session | SESSION-48d311c8bbd93867 | SESSION-48d311c8bbd93867 |
| port_hub | 43346 | port:tcp:43346 |
| port_hub | 80 | port:tcp:80 |
| flow | flow:9b8ac031aa39 | flow:9b8ac031aa39 |
| flow | flow:28021fccc48a | flow:28021fccc48a |
| flow | flow:0f33b475041f | flow:0f33b475041f |
| flow | flow:8c55fc220df9 | flow:8c55fc220df9 |
| flow | flow:76d7e55721b8 | flow:76d7e55721b8 |
| protocol_event | pe:rst:SESSION-b79b86bda080b932 | pe:rst:SESSION-b79b86bda080b |
| Kind | Src | Dst | |
|---|---|---|---|
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| HOST_IN_ASN | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| HOST_IN_ASN | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| PORT_IMPLIED_SERVICE | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| HOST_IN_ASN | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| HOST_IN_ASN | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| ASN_IN_ORG | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| HOST_GEO_ESTIMATE | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| ASN_IN_ORG | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TLS_SNI | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| HOST_IN_ASN | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TLS_SNI | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| PORT_IMPLIED_SERVICE | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| ASN_IN_ORG | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| ASN_IN_ORG | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| HOST_IN_ASN | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TLS_SNI | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TLS_SNI | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| PORT_IMPLIED_SERVICE | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TLS_SNI | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TLS_SNI | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TLS_SNI | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| HOST_IN_ASN | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TLS_SNI | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| ASN_IN_ORG | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| HOST_IN_ASN | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| HOST_GEO_ESTIMATE | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| HOST_GEO_ESTIMATE | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_TLS_SNI | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TLS_SNI | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| ASN_IN_ORG | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TLS_SNI | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TLS_SNI | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| ASN_IN_ORG | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| HOST_GEO_ESTIMATE | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| PORT_IMPLIED_SERVICE | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| ASN_IN_ORG | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_TLS_SNI | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| PORT_IMPLIED_SERVICE | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| HOST_IN_ASN | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| HOST_IN_ASN | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| HOST_GEO_ESTIMATE | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TLS_SNI | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_QUERIED_DNS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| HOST_IN_ASN | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| HOST_IN_ASN | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| flow_observed | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_QUERIED_DNS | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| flow_observed | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| FLOW_TO_HOST | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_TLS_SNI | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_FROM_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| FLOW_FROM_HOST | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_BETWEEN_HOSTS | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_CONTAINS_EVENT | → | ||
| FLOW_FROM_HOST | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → | ||
| FLOW_TO_HOST | → | ||
| flow_observed | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_MEMBER_OF_BEHAVIOR_GROUP | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| FLOW_DST_PORT | → | ||
| SESSION_OBSERVED_HOST | → | ||
| SESSION_OBSERVED_FLOW | → | ||
| flow_observed | → | ||
| SESSION_DERIVED_FROM_PCAP | → |