Device event common fields
These fields exist in the details of Lookout device events where
event.type=DEVICE
.
Lookout event field | Type | LEEF field | Description |
---|---|---|---|
|
enum |
|
Device Category is generated based on the
One of
|
|
String |
|
Always
DEVICE_STATUS |
|
enum |
|
Device activation status. One of
ACTIVATED, DEACTIVATED, PENDING, DELETED. |
|
enum |
|
Device protection status. One of
PROTECTED, DISCONNECTED . |
|
enum |
|
Device security status. One of
SECURE, THREAT_LOW, THREAT_MEDIUM, THREAT_HIGH. |
|
Array |
|
Indicates which status change(s) triggered the event. Can be any combination of
activationStatus, protectionStatus, securityStatus |