 |
ImportantThis data source query method is no longer available after May 1, 2026. For more information
on the currently available data sources for use in XDR Data Explorer queries, go to
https://trendmicro.github.io/tm-v1-schema/pages/index.
|
|
Field
|
General Field
|
Example
|
Notes
|
|
srcDomain
|
DomainName
|
self.events.data.microsoft.com
|
Domain name system (DNS) event
|
|
src
|
|
|
Apex One records all internet protocol (IP) addresses including 127.0.01 and virtual machine
addresses.
|
|
request
|
URL
|
https://www.example.com
|
-
|
|
attachmentFileHash
|
FileSHA1
|
98A9A1C8F69373B211E5F1E303BA8762F44BC898
|
Information about each attachment file in the email message
|
|
attachmentFileHashSha256
|
FileSHA2
|
16e4e8b57e82159a16f5d7d898da9e2a4fbe90c17cd95c02074e75226337c90a
|
|
|
attachmentFileName
|
FileName
|
example.exe
|
|
|
fileExt
|
-
|
txt
|
|
|
mailMsgSubject
|
EmailSubject
|
Subject: From the desk of the Nigerian Prince
|
-
|
|
msgId
|
EmailMessageID
|
<rRzmIhBrXbgjvr4uhIwCcbtE6BnmgNTtAU51qWmqY@example.online>
|
-
|
|
suser
|
EmailSender
|
john_doe@example.com
|
-
|
|
duser
|
EmailRecipient
|
john_doe@example.com
|
-
|
|
suid
|
-
|
john_doe@example.com
|
-
|