Robuta

https://www.elastic.co/guide/en/beats/packetbeat/8.19/exported-fields-ecs.html ECS fields | Packetbeat Reference [8.19] | Elastic ecs fields8 19packetbeatreferenceelastic https://www.elastic.co/docs/reference/ecs/ecs-container Container fields | Elastic Common Schema (ECS) Container fields are used for meta information about the specific container that is the source of information. These fields help correlate data based... elastic common schemacontainer fieldsecs https://www.elastic.co/docs/reference/ecs/ecs-service Service fields | Elastic Common Schema (ECS) The service fields describe the service for or from which the data was collected. These fields help you find and correlate logs for a specific service... elastic common schemaservice fieldsecs https://www.elastic.co/docs/reference/ecs/ecs-device Device fields | Elastic Common Schema (ECS) Fields that describe a device instance and its characteristics. Data collected for applications and processes running on a (mobile) device can be enriched... elastic common schemadevice fieldsecs https://www.elastic.co/docs/reference/ecs/ecs-service-usage Service fields usage and examples | Elastic Common Schema (ECS) Here are the subjects covered in this page. Field reuse. The service fields can be used to * describe the service for or from which the data was collected... elastic common schemaservice fieldsusageexamplesecs https://www.elastic.co/guide/en/ecs/1.12/ecs-rule.html Rule Fields | Elastic Common Schema (ECS) Reference [1.12] | Elastic elastic common schemarule fieldsecsreference1 https://www.elastic.co/docs/reference/ecs/ecs-pe PE Header fields | Elastic Common Schema (ECS) These fields contain Windows Portable Executable (PE) metadata. The pe fields are expected to be nested at: dll.pe, file.pe, process.pe. Note also that... pe header fieldselastic common schemaecs https://www.elastic.co/docs/reference/ecs/ecs-risk Risk information fields | Elastic Common Schema (ECS) Fields for describing risk score and risk level of entities such as hosts and users. These fields are not allowed to be nested under event.*. Please continue... risk information fieldselastic common schemaecs https://www.elastic.co/docs/reference/ecs/ecs-gen_ai Gen AI fields | Elastic Common Schema (ECS) Fields that capture the context of Generative Artificial Intelligence (GenAI) Models requests and responses This field group definition is based on the... gen ai fieldselastic common schemaecs https://www.elastic.co/guide/en/ecs/8.17/ecs-cloud.html Cloud Fields | Elastic Common Schema (ECS) Reference [8.17] | Elastic elastic common schemacloud fieldsecsreference8 https://www.elastic.co/docs/reference/ecs/ecs-macho Mach-O Header fields | Elastic Common Schema (ECS) These fields contain Mac OS Mach Object file format (Mach-O) metadata. The macho fields are expected to be nested at: file.macho, process.macho. Note... elastic common schemaheader fieldsmachecs https://www.elastic.co/docs/reference/ecs/ecs-entity Entity fields | Elastic Common Schema (ECS) The entity fields provide a standardized way to represent and categorize different types of components within an IT environment, including those that... elastic common schemaentity fieldsecs https://www.elastic.co/docs/reference/ecs/ecs-vlan VLAN fields | Elastic Common Schema (ECS) The VLAN fields are used to identify 802.1q tag(s) of a packet, as well as ingress and egress VLAN associations of an observer in relation to a specific... elastic common schemavlan fieldsecs https://www.elastic.co/docs/reference/ecs/ecs-code_signature Code Signature fields | Elastic Common Schema (ECS) These fields contain information about binary code signatures. The code_signature fields are expected to be nested at: dll.code_signature,... code signature fieldselastic common schemaecs https://www.elastic.co/docs/reference/ecs/ecs-registry Registry fields | Elastic Common Schema (ECS) Fields related to Windows Registry operations. The registry fields are expected to be nested at: threat.enrichments.indicator.registry,... elastic common schemaregistry fieldsecs https://www.elastic.co/docs/reference/ecs/ecs-network Network fields | Elastic Common Schema (ECS) The network is defined as the communication path over which a host or network event happens. The network.* fields should be populated with details about... elastic common schemanetwork fieldsecs https://www.elastic.co/guide/en/ecs/8.17/ecs-user.html User Fields | Elastic Common Schema (ECS) Reference [8.17] | Elastic elastic common schemauser fieldsecsreference8 https://www.elastic.co/docs/reference/ecs/ecs-vulnerability Vulnerability fields | Elastic Common Schema (ECS) The vulnerability fields describe information about a vulnerability that is relevant to an event. elastic common schemavulnerability fieldsecs https://www.elastic.co/docs/reference/ecs/ecs-cloud-usage Cloud fields usage and examples | Elastic Common Schema (ECS) Here are the subjects covered in this page. Field reuse. The cloud fields can be used to * describe the cloud resource an event comes from * or to describe... elastic common schemacloud fieldsusageexamplesecs https://www.elastic.co/docs/reference/ecs/ecs-agent Agent fields | Elastic Common Schema (ECS) The agent fields contain the data about the software entity, if any, that collects, detects, or observes events on a host, or takes measurements on a... elastic common schemaagent fieldsecs