home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Device Events

The following sequence shows a series of two device events. The first event shows that the device is PROTECTED, ACTIVATED, and SECURE, a typical state. The subsequent event shows a change in securityStatus, indicating a threat that was introduced on the device, with severity=HIGH.

{
      "type": "DEVICE",
"id": "1583",
"eventTime": "2017-07-26T12:35:37.000Z",
      "details": {
        "protectionStatus": "PROTECTED",
  "activationStatus": "ACTIVATED",
        "securityStatus": "SECURE",
        "type": "DEVICE_STATUS"
      },
      "updatedDetails": [
        "protectionStatus",
        "activationStatus",
        "securityStatus"
      ],
"target": {
        "platform": "IOS",
        "emailAddress": "threat_victim_device@example.com",
        "externalId": "fd0b3692-8d5f-445b-a907-6388be740e43",
        "id": "44444444-4444-4444-4444-444444444444",
        "type": "DEVICE"
  "mdmConnectorId" : "123456"
        "customerDeviceId" : "arbitrary_customer_id_value",
  "parentDeviceId" : "abcb3611-ffda-ab21-1234-8593be740dd3",
      }
},
{
      "type": "DEVICE",
      "id": "1584",
      "eventTime": "2017-07-26T12:35:37.000Z",
      "details": {
        "securityStatus": "THREAT_HIGH",
        "type": "DEVICE_STATUS"
      },
      "updatedDetails": [
        "securityStatus",
      ],
      "target": {
        "platform": "IOS",
        "emailAddress": "threat_victim_device@example.com",
        "externalId": "fd0b3692-8d5f-445b-a907-6388be740e43",
        "id": "44444444-4444-4444-4444-444444444444",
        "type": "DEVICE"
        "mdmConnectorId" : "123456"
        "customerDeviceId" : "arbitrary_customer_id_value",
        "parentDeviceId" : "abcb3611-ffda-ab21-1234-8593be740dd3",
      }
}