Dataset
First 50 rows of train
| srcstring | dststring | typestring | timestampfloat64 | attrs | labels | edge_idstring |
|---|---|---|---|---|---|---|
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721992407.268152 | {"message_type":"auth_success","action":"","protocol":"","src_port":"61104","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"14ea9030-4b40-11ef-bb25-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000000 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 |
| USER_ACTION |
| 1721992402.5990932 |
| {"message_type":"auth_success","action":"","protocol":"","src_port":"61104","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"12221f13-4b40-11ef-9d15-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… |
| {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… |
| e-000000001 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721992475.0125256 | {"message_type":"auth_success","action":"","protocol":"","src_port":"59962","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"3d4b88c8-4b40-11ef-b7f9-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000002 |
| ORG-0001/10.173.156.178 | ORG-0001/10.143.4.184 | EVENT | 1721992488.7961996 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"135","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"4582c18c-4b40-11ef-87d1-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000003 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721992476.7209735 | {"message_type":"auth_success","action":"","protocol":"","src_port":"59962","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"3e503908-4b40-11ef-84ed-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000004 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721992455.1859934 | {"message_type":"auth_success","action":"","protocol":"","src_port":"61104","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"317a3ede-4b40-11ef-b3ec-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000005 |
| 192.0.2.10 | 192.0.2.223 | EVENT | 1721992490.4108555 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"4500","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"4679220c-4b40-11ef-b8af-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000006 |
| ORG-0001/10.31.239.188 | 192.0.2.232 | EVENT | 1721992483.1067123 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"80","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"421e9bf3-4b40-11ef-b2a1-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","inc… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000007 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721992540.561056 | {"message_type":"auth_success","action":"","protocol":"","src_port":"61104","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"645d723e-4b40-11ef-95a1-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000008 |
| 192.0.2.144 | 192.0.2.10 | EVENT | 1721992783.227604 | {"message_type":"communication","action":"","protocol":"1","src_port":"","dst_port":"0","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"f5016c47-4b40-11ef-a248-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","inci… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000009 |
| ORG-0001/10.105.54.41 | ORG-0001/10.175.93.132 | EVENT | 1721992784.819166 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"389","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"f5f446ab-4b40-11ef-b69f-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000010 |
| ORG-0001/10.1.19.18 | 192.0.2.247 | EVENT | 1721992790.149678 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"f921a5cc-4b40-11ef-b7a3-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000011 |
| ORG-0001/10.249.231.69 | ORG-0001/10.31.239.188 | EVENT | 1721992788.9438925 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"53","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"f869a8cb-4b40-11ef-a9a0-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000012 |
| 192.0.2.17 | ORG-0001/10.225.7.106 | EVENT | 1721992790.1238995 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"f91db6d2-4b40-11ef-b734-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000013 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721993015.4617112 | {"message_type":"auth_success","action":"","protocol":"","src_port":"61104","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"7f6d8918-4b41-11ef-a70a-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000014 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721993092.3574731 | {"message_type":"auth_success","action":"","protocol":"","src_port":"59962","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"ad42e5cd-4b41-11ef-8902-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000015 |
| ORG-0001/10.207.65.50 | ORG-0001/10.31.239.188 | EVENT | 1721993072.545052 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"49670","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"a173c318-4b41-11ef-8b06-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000016 |
| ORG-0001/10.210.148.89 | ORG-0001/10.31.239.188 | EVENT | 1721993078.959241 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"53","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"a5467d5a-4b41-11ef-9dcf-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000017 |
| ORG-0001/10.12.12.123 | 192.0.2.226 | EVENT | 1721993077.9910593 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"a4b2c1c0-4b41-11ef-905d-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000018 |
| ORG-0001/10.215.80.152 | ORG-0001/10.31.239.188 | EVENT | 1721993077.6340039 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"389","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"a47c4646-4b41-11ef-8cf5-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000019 |
| ORG-0001/10.164.115.221 | ORG-0001/10.31.239.188 | EVENT | 1721993082.0271952 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"389","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"a71a9f50-4b41-11ef-8a5c-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000020 |
| ORG-0001/10.74.5.64 | ORG-0001/10.175.81.39 | EVENT | 1721993374.9107585 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"55ad1b80-4b42-11ef-9588-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000021 |
| 192.0.2.17 | ORG-0001/10.31.239.188 | EVENT | 1721993381.9925342 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"53","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"59e5b35e-4b42-11ef-b6fe-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","inc… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000022 |
| 192.0.2.40 | ORG-0001/10.136.249.106 | EVENT | 1721993376.9858444 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"161","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"56e9bd8c-4b42-11ef-a5a4-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000023 |
| 192.0.2.17 | ORG-0001/10.24.167.82 | EVENT | 1721993373.0400808 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"1433","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"548faa27-4b42-11ef-8e47-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000024 |
| ORG-0001/10.86.92.253 | ORG-0001/10.31.239.188 | EVENT | 1721993373.9240932 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"389","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"55168de4-4b42-11ef-919b-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000025 |
| 203.0.113.44 | 192.0.2.4 | EVENT | 1721993680.601012 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"0be1bd07-4b43-11ef-8003-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000026 |
| ORG-0001/10.148.99.139 | ORG-0001/10.31.239.188 | EVENT | 1721993676.8033392 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"49670","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"099e4271-4b43-11ef-99b7-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000027 |
| ORG-0001/10.188.93.12 | ORG-0001/10.172.229.29 | EVENT | 1721993673.8002331 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"49669","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"07d4059b-4b43-11ef-82ea-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000028 |
| ORG-0001/10.221.16.144 | ORG-0001/10.31.239.188 | EVENT | 1721993679.8442852 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"53","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"0b6e4563-4b43-11ef-aba8-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000029 |
| ORG-0001/10.225.7.106 | ORG-0001/10.9.2.168 | EVENT | 1721993677.285225 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"09e7ca19-4b43-11ef-a62c-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000030 |
| 192.0.2.149 | 192.0.2.10 | EVENT | 1721993676.2087853 | {"message_type":"communication","action":"","protocol":"1","src_port":"","dst_port":"0","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"094389ad-4b43-11ef-86b0-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","inci… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000031 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721993846.2304783 | {"message_type":"auth_success","action":"","protocol":"","src_port":"61104","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"6e9aca10-4b43-11ef-a7b7-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000032 |
| ORG-0001/10.185.156.133 | ORG-0001/10.207.50.200 | EVENT | 1721993981.1897976 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"0","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"bf0bf278-4b43-11ef-8e1d-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","inc… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000033 |
| ORG-0001/10.30.252.60 | ORG-0001/10.31.239.188 | EVENT | 1721993986.3255773 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"135","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"c21b9adb-4b43-11ef-9d0d-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000034 |
| ORG-0001/10.173.156.178 | ORG-0001/10.142.229.198 | EVENT | 1721993981.3194664 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"161","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"bf1fbba9-4b43-11ef-8ef0-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000035 |
| ORG-0001/10.67.54.198 | ORG-0001/10.31.239.188 | EVENT | 1721993985.2935257 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"53","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"c17e2058-4b43-11ef-b8ff-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000036 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721993966.007176 | {"message_type":"auth_success","action":"","protocol":"","src_port":"59962","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"b5ff4351-4b43-11ef-bb7f-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000037 |
| ORG-0001/10.16.112.54 | ORG-0001/10.31.239.188 | EVENT | 1721993976.7879524 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"53","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"bc6c4763-4b43-11ef-94a7-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000038 |
| ORG-0001/10.189.17.186 | ORG-0001/10.176.80.33 | EVENT | 1721993982.6529164 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"123","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"bfeb338d-4b43-11ef-adf5-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000039 |
| ORG-0001/10.47.145.131 | ORG-0001/10.80.22.121 | EVENT | 1721993979.6494722 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"161","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"be20e982-4b43-11ef-b1f3-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","i… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000040 |
| ORG-0001/10.46.62.29 | 192.0.2.63 | EVENT | 1721993983.7231023 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"c08e7fb0-4b43-11ef-8bb0-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000041 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721994047.6370986 | {"message_type":"auth_success","action":"","protocol":"","src_port":"59962","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"e6a7002a-4b43-11ef-8176-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000042 |
| ORG-0001/user:USER-0001 | ORG-0001/10.143.60.26 | USER_ACTION | 1721994086.8982594 | {"message_type":"auth_success","action":"","protocol":"","src_port":"59962","dst_port":"","stream":"sshd","origin":"live","org_id":"ORG-0001","artifact_id":"fe0dc742-4b43-11ef-849d-02c153059a64","sender_host":"host-0001.example.internal","event_edge_type":"EVENT","host_role":"src… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000043 |
| ORG-0001/10.1.19.18 | 192.0.2.5 | EVENT | 1721994283.9643073 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"7383abbf-4b44-11ef-9a5c-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000044 |
| ORG-0001/10.28.88.217 | ORG-0001/10.173.156.178 | EVENT | 1721994277.1003282 | {"message_type":"communication","action":"","protocol":"1","src_port":"","dst_port":"0","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"6f6c4f92-4b44-11ef-9f51-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","inci… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000045 |
| ORG-0001/10.204.89.29 | 192.0.2.167 | EVENT | 1721994283.6158152 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"734e7ec9-4b44-11ef-95f6-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000046 |
| 203.0.113.230 | 192.0.2.4 | EVENT | 1721994278.0769312 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"443","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"7001541f-4b44-11ef-a780-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000047 |
| ORG-0001/10.195.120.150 | ORG-0001/10.31.239.188 | EVENT | 1721994578.0116017 | {"message_type":"communication","action":"","protocol":"17","src_port":"","dst_port":"53","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"22c7ba32-4b45-11ef-bcbc-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","in… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000048 |
| ORG-0001/10.31.239.188 | ORG-0001/10.169.58.116 | EVENT | 1721994584.208339 | {"message_type":"communication","action":"","protocol":"6","src_port":"","dst_port":"49599","stream":"network_communication","origin":"live","org_id":"ORG-0001","artifact_id":"2679463e-4b45-11ef-b684-02c153059a64","sender_host":"10.73.183.87","event_edge_type":"","host_role":"","… | {"label_binary":"benign","label_confidence":0.5,"suspicion_score":0,"mo_name":"","attack_techniques":[],"attack_tactics":[],"set_roles":[],"lifecycle_stage":"none","disposition":"Unprocessed","disposition_category":"automated","status_name":"","incident_ids":[],"matched_rules":[]… | e-000000049 |
