Data Mapping: Network Activity Data

Field

General Field

Example

Notes

ip

  • IPv4

  • IPv6

  • 192.0.2.0

  • 2001:0db8:85a3:0000:0000:8a2e:0370:7334

-

ip_port

-

443

-

url

URL

https://www.example.com

-

file_sha1

FileSHA1

98A9A1C8F69373B211E5F1E303BA8762F44BC898

-

file_sha256

FileSHA2

16e4e8b57e82159a16f5d7d898da9e2a4fbe90c17cd95c02074e75226337c90a

-

domain

DomainName

self.events.data.microsoft.com

-

filename

FileName

example.exe

-

user_account

UserAccount

john_doe

-