Application / File Threat Detail Fields
In addition to the Common Threat Detail Fields, the
details block for
THREAT events of
type=APPLICATION or
FILE also includes the following fields, unless privacy controls are enabled on your tenant:
"details": {
...,
"assessments": [...],
"applicationName": "FooBarApplication",
"packageName": "com.FooBarApplication",
"path": "/usr/local/FooBarApplication",
"fileName": "FooBarFileName.ipa",
"packageSha": "!application SHA!",
}| Field | Type | Description |
|---|---|---|
|
String | Name of the application. |
|
String | Package name of the application. |
|
String | Path of the file. |
|
String | Name of the file. |
|
String | (
APPLICATION events only) SHA-256 of the application, Base64 encoded. |
* Field omitted if privacy controls are enabled.
