McAfee (Trellix) · Schema

TriggeredAlarm

AntivirusCybersecurityEndpoint ProtectionSecurityThreat Intelligence

Properties

Name Type Description
id integer Triggered alarm ID
alarmName string Name of the alarm definition
triggeredDate string When the alarm was triggered
acknowledgedDate string When the alarm was acknowledged
acknowledgedUsername string User who acknowledged the alarm
severity integer Alarm severity
summary string Alarm summary text
assignee string Assigned analyst
caseId integer Associated case ID
events array Associated events
View JSON Schema on GitHub

JSON Schema

mcafee-triggeredalarm-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/TriggeredAlarm",
  "title": "TriggeredAlarm",
  "type": "object",
  "properties": {
    "id": {
      "type": "integer",
      "description": "Triggered alarm ID"
    },
    "alarmName": {
      "type": "string",
      "description": "Name of the alarm definition"
    },
    "triggeredDate": {
      "type": "string",
      "format": "date-time",
      "description": "When the alarm was triggered"
    },
    "acknowledgedDate": {
      "type": "string",
      "format": "date-time",
      "description": "When the alarm was acknowledged"
    },
    "acknowledgedUsername": {
      "type": "string",
      "description": "User who acknowledged the alarm"
    },
    "severity": {
      "type": "integer",
      "description": "Alarm severity"
    },
    "summary": {
      "type": "string",
      "description": "Alarm summary text"
    },
    "assignee": {
      "type": "string",
      "description": "Assigned analyst"
    },
    "caseId": {
      "type": "integer",
      "description": "Associated case ID"
    },
    "events": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "eventId": {
            "type": "string"
          },
          "sourceIp": {
            "type": "string"
          },
          "destIp": {
            "type": "string"
          }
        }
      },
      "description": "Associated events"
    }
  }
}