sendTestPushEvent — туршилтын push event илгээх

Энэ method-оор туршилтын event илгээнэ.

Туршилтын event-үүд үргэлж _testEvent_ шинж чанар нь true байна.

Параметрүүд

• `eventType` — Туршилт илгээх event-ийн төрөл; төрөл: String; хүсэлтэд заавал орно. Боломжит утгууд:

- hwid-change — Hardware ID Change. Network-ийн endpoint-ийн hardware ID өөрчлөгдөх үед үүснэ.
- adcloud — Cloud AD Integration. Control Center Active Directory domain-тэй синхрончлогдох үед үүснэ.
- aph — Antiphishing. Endpoint agent вэб хуудас руу хандахад мэдэгдэж буй фишинг оролдлогыг илрүүлэх бүрд мэдэгдэнэ.
- av — Antimalware. Endpoint дээр хортой программ илрэхэд үүсэх Antimalware event.
- avc — Advanced Threat Control (ATC). Endpoint дээр аюултай байж болзошгүй программ илрэн блоклогдох бүрд үүснэ.
- dp — Data Protection. Data protection дүрмийн дагуу endpoint дээр өгөгдлийн урсгал блоклогдох бүрд үүснэ.
- exchange-malware — Exchange Malware Detection. Bitdefender таны сүлжээн дэх Exchange server дээр хортой программ илрүүлэхэд үүснэ.
- exchange-user-credentials — Exchange User Credentials. Хэрэглэгчийн нэвтрэх мэдээлэл буруу байснаас зорилтот Exchange server дээр on-demand шалгалтын даалгавар эхэлж чадаагүй үед үүснэ. Даалгаврыг дуусгахын тулд Exchange credentials-аа солих шаардлагатай.
- fw — Firewall. Endpoint agent холбогдсон policy-ийн дагуу port scan эсвэл программыг сүлжээнд хандахаас блоклох үед үүснэ.
- hd — Hyper Detect event. Hyper Detect модуль хортой программ илрүүлэхэд үүснэ.
- modules — Product Modules Status. Суулгасан agent-ийн аюулгүй байдлын модуль идэвхжих эсвэл идэвхгүй болох үед үүснэ.
- network-sandboxing — Sandbox Analyzer Detection. Sandbox Analyzer илгээсэн файлуудын дунд шинэ аюул илрүүлэх бүрд үүснэ.
- registration — Product Registration. Сүлжээнд суулгасан agent-ийн бүртгэлийн төлөв өөрчлөгдөхөд үүснэ.
- supa-update-status — Outdated Update Server. Update server-ийн хортой программын signature хуучирсан үед үүснэ.
- sva-load — Overloaded Security Server. Сүлжээн дэх Security Server-ийн шалгалтын ачаалал тогтоосон босгоос давсан үед үүснэ.
- sva — Security Server Status. Тодорхой Security Server-ийн төлөв өөрчлөгдөхөд үүснэ. Төлөв гэдэгт тэжээл (асаалттай/унтраалттай), бүтээгдэхүүний шинэчлэлт, signature шинэчлэлт, дахин асаах шаардлага орно.
- task-status — Task Status. Даалгаврын төлөв өөрчлөгдөх бүрд үүснэ.
- uc — User Control/Content Control. Холбогдсон policy-ийн дагуу endpoint дээр вэб хөтлөх эсвэл программ ажиллуулах зэрэг хэрэглэгчийн үйлдэл блоклогдох үед үүснэ.
- antiexploit — Antiexploit Event. Advanced Anti-Exploit илрүүлэлт хийх үед үүснэ.
- endpoint-moved-out — Endpoint moved out. Network Inventory-д endpoint-үүдийг нэг компаниас нөгөө рүү зөөх үед үүснэ. Event-ийг эх компани хүлээн авна.
- endpoint-moved-in — Endpoint moved in. Network Inventory-д endpoint-үүдийг нэг компаниас нөгөө рүү зөөх үед үүснэ. Event-ийг хүрэх компани хүлээн авна.
- troubleshooting-activity — Troubleshooting activity. Troubleshooting даалгавар дуусахад үүсч, түүний төлвийг мэдэгдэнэ. Амжилттай бол логуудыг өгнө.
- uninstall — Uninstall Agent. Endpoint-оос agent устгагдахад үүснэ.
- install — Install Agent. Endpoint дээр agent суулгагдахад үүснэ.
- network-monitor — Network Attack Defense Event. Network Attack Defense модуль илрүүлэлт хийх үед үүснэ.
- ransomware-mitigation — Ransomware activity detection. Endpoint agent ransomware халдлагыг блоклох үед үүснэ.
- security-container-update-available — Security container update available. Security container-д шинэ шинэчлэл илрэх үед үүснэ.
- partner-changed — Partner change. Клиент компани таны удирдлагад нэгдэх эсвэл гарах бүрд үүснэ.
- device-control — Device Control. Device Control модуль клиент системд оруулсан төхөөрөмжийг илрүүлэх бүрд event үүснэ.
- new-incident — New Incident. Control Center-ийн Incidents хэсэгт шинэ Root Cause Analysis (RCA) харагдах бүрд үүснэ. Event нь RCA JSON-оос гаргасан холбогдох зүйлсийн жагсаалтыг агуулах бөгөөд SIEM дээрх корреляцийг EDR-ийн тусгай өгөгдлөөр баяжуулахад ашиглаж болно.
- incident-status-changed — Incident status changed. Incident-ийн төлөв өөрчлөгдөх бүрд илгээгдэнэ.
- incident-assignee-changed — Incident assignee changed. Incident-ийн хариуцагч өөрчлөгдөх бүрд илгээгдэнэ.
- incident-priority-changed — Incident priority changed. Incident-ийн эрэмбэ (priority) өөрчлөгдөх бүрд үүснэ.
- incident-note-created — Incident note created. Incident-д тэмдэглэл нэмэх бүрд үүснэ.
- incident-note-updated — Incident note updated. Incident-ийн тэмдэглэл шинэчлэгдэхэд илгээгдэнэ.
- incident-note-deleted — Incident note deleted. Incident-ийн тэмдэглэл устгагдахад үүснэ.

• `data` — төрөл: Object; заавал биш. Туршилтын event-үүд загвараас үүсдэг. Энэ параметрээр буцаах event жишээн дэх өгөгдлийг дарж бичиж болно.

Ерөнхий параметрүүд

• `id` — Хүсэлтэд танигч нэмж, түүнийг тохирох хариутай холбоно. Зорилтот тал хариуд ижил утгыг буцааснаар дуудлагыг хялбар хянах боломжтой; хүсэлтэд заавал орно; төрөл: String; нэмэлт шаардлагагүй. Жишээ: "id": "ad12cb61-52b3-4209-a87a-93a8530d91cb"
• `method` — Хүсэлт илгээхэд ашиглаж буй method-ийн нэр; хүсэлтэд заавал орно; төрөл: String; боломжит утга: sendTestPushEvent. Жишээ: "method": "sendTestPushEvent"
• `jsonrpc` — Хүсэлт болон хариуд ашиглагдах JSON-RPC-ийн хувилбар; хүсэлтэд заавал орно; төрөл: Integer; боломжит утга: 2.0. Жишээ: "jsonrpc": "2.0"
• `params` — Хүсэлтийн тохиргоог агуулсан объект; хүсэлтэд заавал орно; төрөл: Object; нэмэлт шаардлагагүй. Жишээ: "params": {...}

Буцаах утга

Энэ method нь илгээсэн event-ийн дэлгэрэнгүйг агуулсан Object болон event-ийг туршилт гэж тэмдэглэсэн Boolean буцаана.

Жишээ

Хүсэлт

malware_name атрибутыг Test malware name утгаар дарж бичин туршилтын push event илгээх:

  {
       "params": {
           "eventType": "av",
           "data": {
               "malware_name": "Test malware name"
           }
       },
       "jsonrpc": "2.0",
       "method": "sendTestPushEvent",
       "id": "ad12cb61-52b3-4209-a87a-93a8530d91cb"
  }

Ямар ч атрибутыг дарж бичихгүйгээр туршилтын push event илгээх:

  {
       "params": {
           "eventType": "av",
       },
       "jsonrpc": "2.0",
       "method": "sendTestPushEvent",
       "id": "ad12cb61-52b3-4209-a87a-93a8530d91cb"
  }

Хариунууд

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "module": "hwid-change",
            "product_installed": "BEST",
            "companyId": "5e207bc354060806ed24a132",
            "computer_name": "A",
            "computer_fqdn": "test-endpoint.dsd.ro",
            "computer_ip": "10.10.18.526",
            "computer_id": "5e284ff5b7e43d387ba54a96",
            "old_hwid": "00000000-0000-0000-0000-406186b5bde7",
            "new_hwid": "00000000-0000-0000-0000-406186b5bde6",
            "endpointId": "5e284ff5b7e43d387ba54a95"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "syncerId": "59b7d9bfa849af3a1465b7e3",
            "issueType": 0,
            "lastAdReportDate": "2017-09-14T08:03:49.671Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-EXCHANGE-01",
            "computer_fqdn": "fc-exchange-01.fc.dom",
            "computer_ip": "192.168.0.1",
            "computer_id": "59b7d9bfa849af3a1465b7e4",
            "product_installed": "BEST",
            "aph_type": "phishing",
            "url": "http://example.com/account/support/",
            "status": "aph_blocked",
            "last_blocked": "2017-09-14T08:49:43.000Z",
            "count": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "10.17.46.196",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "malware_type": "file",
            "malware_name": "EICAR-Test-File (not a virus)",
            "file_path": "C:\\eicar0000001.txt",
            "hash": "8b3f191819931d1f2cef7289239b5f77c00b079847b9c2636e56854d1e5eff71",
            "final_status": "deleted",
            "timestamp": "2017-09-08T12:01:36.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "exploit_type": "AVC Blocked Exploit",
            "exploit_path": "C:\\Users\\admin\\Desktop\\Tools\\avcsim\\win32\\avcsim32.exe",
            "status": "avc_blocked",
            "last_blocked": "2017-09-14T07:56:33.000Z",
            "count": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "target_type": "http",
            "blocking_rule_name": "dv",
            "url": "http://example.com/",
            "status": "data_protection_blocked",
            "last_blocked": "2017-09-11T10:23:43.000Z",
            "count": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-EXCHANGE-01",
            "computer_fqdn": "fc-exchange-01.fc.dom",
            "computer_ip": "192.168.0.1",
            "computer_id": "59b7d9bfa849af3a1465b7e4",
            "product_installed": "BEST",
            "endpointId": "59b7d9bfa849af3a1465b7e3",
            "serverName": "FC-EXCHANGE-01",
            "sender": "fc_test01@fc.dom",
            "recipients": [
                  "fc_test02@fc.dom"
            ],
            "subject": "Emailing Sending.. WL-cbe100c9f42a20ef9a4b1c20ed1a59f9-0",
            "detectionTime": "2017-09-13T14:20:37.000Z",
            "malware": [
                  {
                        "malwareName": "Trojan.Generic.KD.874127",
                        "malwareType": "virus",
                        "actionTaken": "quarantine",
                        "infectedObject": "WL-cbe100c9f42a20ef9a4b1c20ed1a59f9-0"
                  }
            ]
  
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "endpointId": "59b7d9bfa849af3a1465b7e3"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "exploit_type": "AVC Blocked Exploit",
            "exploit_path": "C:\\Users\\admin\\Desktop\\Tools\\avcsim\\win32\\avcsim32.exe",
            "status": "avc_blocked",
            "last_blocked": "2017-09-14T07:56:33.000Z",
            "count": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "product_installed": "EPS",
            "user": {
                  "name": "admin",
                  "sid": "BF410F3B-5F3A-41E1-BF8F-28DE6948A355"
            },
            "computer_name": "Computer 1",
            "computer_fqdn": "computer1.local",
            "computer_ip": "191.114.235.26",
            "computer_id": "5c12612db1a43dc3097b23c6",
            "malware_type": "file",
            "malware_name": "",
            "final_status": "quarantined",
            "file_path": "/Users/admin/Desktop/",
            "attack_type": "targeted attack",
            "detection_level": "permissive",
            "is_fileless_attack": 0,
            "hwid": "22574006-79523827-7401-9565-1295-798280775872",
            "date": "2019-01-17T10:01:02.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "malware_status": 1,
            "aph_status": 1,
            "firewall_status": 1,
            "avc_status": 1,
            "uc_web_filtering": 0,
            "uc_categ_filtering": 0,
            "uc_application_status": 0,
            "dp_status": 0,
            "pu_status": 1,
            "dlp_status": 0
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "endpointId": "59a1604e60369e06733f8aba",
            "computerName": "FC-WIN7-X64-01",
            "computerIp": "192.168.0.1",
            "detectionTime": 1505386969,
            "threatType": "RANSOMWARE",
            "filePaths": [
                  "C:\\Users\\Administrator\\Documents\\installer.xml",
                  "D:\\opt\\bitdefender\\installer2.xml",
                  "D:\\sources\\console\\CommonConsole\\app\\modules\\policies\\view\\endpoints\\networkSandboxing\\installer3.xml"
            ],
            "fileSizes": [
                  "2614",
                  "2615",
                  "2616"
            ],
            "remediationActions": [
                  "1",
                  "",
                  "1"
            ]
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-EXCHANGE-01",
            "computer_fqdn": "fc-exchange-01.fc.dom",
            "computer_ip": "192.168.0.1",
            "computer_id": "59b7d9bfa849af3a1465b7e4",
            "product_installed": "BEST",
            "product_registration": "registered"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "status": 0,
            "fromSupa": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "bitdefender-sva",
            "computer_fqdn": "bitdefender-sva",
            "computer_ip": "192.168.0.1",
            "computer_id": "59b8f3aba849af3a1465b81e",
            "product_installed": "SVA",
            "loadAverage": 1,
            "cpuUsage": 48,
            "memoryUsage": 32,
            "networkUsage": 0,
            "overallUsage": 48
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "bitdefender-sva",
            "computer_fqdn": "bitdefender-sva",
            "computer_ip": "192.168.0.1",
            "computer_id": "59b8f3aba849af3a1465b81e",
            "product_installed": "SVA",
            "powered_off": 0,
            "product_update_available": 1,
            "product_reboot_required": 0,
            "lastupdate": "0",
            "updatesigam": "7.72479"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "userId": "59a14b2b1da197c6108b4568",
            "taskId": "59b28dc81da19711058b4568",
            "taskName": "Quick Scan 2017-09-08(sub-task)",
            "taskType": 272,
            "targetName": "FC-WIN7-X64-01",
            "isSuccessful": 1,
            "status": 3,
            "errorMessage": "",
            "errorCode": 0
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "exploit_type": "AVC Blocked Exploit",
            "exploit_path": "C:\\Users\\admin\\Desktop\\Tools\\avcsim\\win32\\avcsim32.exe",
            "status": "avc_blocked",
            "last_blocked": "2017-09-14T07:56:33.000Z",
            "count": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "192.168.0.1",
            "computer_id": "59a1604e60369e06733f8abb",
            "product_installed": "BEST",
            "exploit_type": "AVC Blocked Exploit",
            "exploit_path": "C:\\Users\\admin\\Desktop\\Tools\\avcsim\\win32\\avcsim32.exe",
            "status": "avc_blocked",
            "last_blocked": "2017-09-14T07:56:33.000Z",
            "count": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "product_installed": "BEST",
            "computer_name": "TEST_ENDPOINT",
            "computer_fqdn": "test-endpoint.dsd.ro",
            "computer_ip": "10.10.18.226",
            "computer_id": "59b7d9bfa849af3a1465b7e4",
            "endpointId": "5e2085febf255a545e52276b",
            "hwid": "5e284ff-5b7e43d387ba-54a95"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "product_installed": "BEST",
            "computer_name": "TEST_ENDPOINT",
            "computer_fqdn": "test-endpoint.dsd.ro",
            "computer_ip": "10.10.18.226",
            "computer_id": "59b7d9bfa849af3a1465b7e3",
            "endpointId": "5e2085febf255a545e52276a",
            "hwid": "5e284ff-5b7e43d387ba-54a95"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "product_installed": "BEST",
            "computer_name": "TEST_ENDPOINT_WINDOWS_10",
            "computer_fqdn": "test-endpoint.dsd.ro",
            "computer_ip": "10.10.0.101",
            "computer_id": "5ee30e2b29a4e218489442b6",
            "taskId": "5eea0105f23f731302405833",
            "taskType": "Debug Session",
            "errorCode": 3,
            "username": "test@test.com",
            "localPath": "/test/dir",
            "networkSharePath": "//1.2.3.4/dir",
            "saveToBitdefenderCloud": 0,
            "status": 3,
            "stopReason": 2,
            "failedStorageType": 1,
            "startDate": "2020-06-24T06:06:48.000Z",
            "endDate": "2020-06-24T06:09:28.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "product_installed": "BEST",
            "computer_name": "TEST_ENDPOINT",
            "computer_fqdn": "test-endpoint.dsd.ro",
            "computer_ip": "10.10.18.226",
            "computer_id": "59b7d9bfa849af3a1465b7e4",
            "endpointId": "5e2085febf255a545e52276b",
            "reason": 1
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "product_installed": "BEST",
            "computer_name": "TEST_ENDPOINT",
            "computer_fqdn": "test-endpoint.dsd.ro",
            "computer_ip": "10.10.18.226",
            "computer_id": "5cf51ba5e8ee8c5b1852a9d7",
            "module": "install",
            "endpointId": "5e2085febf255a545e52276b",
            "hwid": "00000000-0000-0000-0000-406186b5bdbdzzz50"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "module": "network-monitor",
            "product_installed": "BEST",
            "user": {
                  "userName": "user1@domain.com",
                  "userSid": "S-1-2-3-4"
            },
            "computer_name": "TEST_ENDPOINT",
            "computer_fqdn": "test-endpoint.dsd.ro",
            "computer_ip": "10.10.18.226",
            "computer_id": "5d639e8f48ac2f04f6e00b1c",
            "actionTaken": "reportOnly",
            "detection_name": "PrivacyThreat.PasswordStealer.HTTP",
            "detection_attackTechnique": "discovery",
            "source_ip": "10.17.134.4",
            "victim_ip": "213.211.198.58",
            "local_port": "80",
            "timestamp": "2019-01-24T11:13:04.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "module": "ransomware-mitigation",
            "companyId": "5dad6f685f627d42cb3cd434",
            "product_installed": "SVA",
            "user": {
                  "name": "user",
                  "sid": "S-11-22-33"
            },
            "company_name": "Bitdefender",
            "computer_name": "DC-Nebula",
            "computer_fqdn": "undefined",
            "computer_ip": "10.17.16.10",
            "computer_id": "5ed4d2fef23f7325715dbb22",
            "attack_type": "remote",
            "item_count": "23",
            "detected_on": 1591007594,
            "attack_source": "10.10.20.120"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "module": "security-container-update-available",
            "product_installed": "BEST",
            "companyId": "60f00bd6c1aa8571d55a9314",
            "computer_name": "security-container-x",
            "computer_fqdn": "security-container-x-containers-host.dsd.ro",
            "computer_ip": "10.17.15.247",
            "computer_id": "60f6ba5e1b3272cce33c3281",
            "host_name": "TEST_ENDPOINT_2"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "module": "partner-changed",
            "companyId": "638f118f6b82bec40d0976df",
            "moved_company_id": "628f107f6b82bec40d0976af",
            "moved_company_name": "Bitdefender",
            "action": "joined",
            "license_type": "Monthly",
            "end_subscription_date": "2022-12-31T23:59:00",
            "auto_renew_period": 12,
            "minimal_commitment_usage_endpoints": 25,
            "enabled_services": [
                  "Email Security",
                  "Full Disk Encryption",
                  "Patch Management",
                  "HyperDetect",
                  "Sandbox Analyzer"
            ]
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "module": "device-control",
            "product_installed": "BEST",
            "companyId": "638f118f6b82bec40d0976df",
            "computer_name": "FC-WIN7-X64-01",
            "computer_fqdn": "fc-win7-x64-01",
            "computer_ip": "10.17.46.207",
            "computer_id": "5d529fb7008739443adb4003",
            "username": "Admin",
            "silentAgentVersion": "1.0",
            "action": "blocked",
            "deviceName": "CD-ROM Drive",
            "deviceClass": 2,
            "deviceId": "IDE\\CDROMNECVMWAR_VMWARE_IDE_CDR10_______________1.00____\\5&3A794E10&0&1.0.0",
            "productId": 0,
            "vendorId": 0,
            "date": "2019-08-13T11:33:18.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
            "module": "new-incident",
            "created": "2020-07-20T09:36:23.485Z",
            "endpointId": "5efb3a520075db7384dfa285",
            "companyId": "5efb2f7154060876cb4a13d2",
            "computer_id": "5efb3a520075db7384dfa286",
            "computer_fqdn": "desktop-jac14gs",
            "computer_name": "DESKTOP-JAC14GS",
            "detection_name": "ATC.Malicious",
            "attack_types": [
                  "Other"
            ],
            "computer_ip": "10.17.23.30",
            "severityScore": 90,
            "incident_id": "5f1557cbe7b2584f3959ee19",
            "attack_entry": 1688239188,
            "parent_process_path": "c:\\windows\\system32\\cmd.exe",
            "parent_process_pid": 9636,
            "process_path": "c:\\users\\bdadmin\\desktop\\atcsim\\atcsim32.exe",
            "process_pid": 10324,
            "username": "DESKTOP-JAC14GS\\bdadmin",
            "user_sid": "S-1-5-21-3349207704-443292085-2237656896-1003",
            "process_command_line": "detect",
            "file_hash_md5": "ccb1b07bdf330627f02b3c832663a489",
            "file_hash_sha256": "d5adc6a65a57d30d3ae70d195983d155e7cd24f26eb1ebebde9b92655251ec55",
            "att_ck_id": [
                  "T1036",
                  "T1059",
                  "T1002",
                  "T1012"
            ],
            "severity": "high",
            "main_action": "no action"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
        "module": "incident-status-changed",
        "status": "open",
        "incident_id": "445c4622cdcbe09d4ed69622",
        "user_id": "345c4622cdcbe09d4ed69623",
        "user_name": "test@bitdefender.com",
        "companyId": "64ccd626cdcbe09d4ed696d3",
        "date": "2026-07-04T13:01:17.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
        "module": "incident-assignee-changed",
        "user_id": "345c4622cdcbe09d4ed69623",
        "user_name": "test@bitdefender.com",
        "assignee_user_id": "65ccd626cdcbe09d4ed696d1",
        "assignee_email": "test@bitdefender.com",
        "assignee_company_id": "64ccd626cdcbe09d4ed696d3",
        "incident_id": "445c4622cdcbe09d4ed69622",
        "companyId": "64ccd626cdcbe09d4ed696d3",
        "date": "2026-07-04T13:01:17.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
        "module": "incident-priority-changed",
        "priority": "low",
        "incident_id": "445c4622cdcbe09d4ed69622",
        "user_id": "345c4622cdcbe09d4ed69623",
        "user_name": "test@bitdefender.com",
        "companyId": "64ccd626cdcbe09d4ed696d3",
        "date": "2026-07-04T13:01:17.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
        "module": "incident-note-created",
        "user_id": "65ccd626cdcbe09d4ed696d1",
        "user_name": "test@bitdefender.com",
        "text": "This is a new note",
        "note_id": "555c4622cdcbe09d4ed69628",
        "incident_id": "445c4622cdcbe09d4ed69622",
        "companyId": "64ccd626cdcbe09d4ed696d3",
        "date": "2026-07-04T13:01:17.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
        "module": "incident-note-updated",
        "user_id": "65ccd626cdcbe09d4ed696d1",
        "user_name": "test@bitdefender.com",
        "text": "This is the new text for an existing note",
        "note_id": "555c4622cdcbe09d4ed69628",
        "incident_id": "445c4622cdcbe09d4ed69622",
        "companyId": "64ccd626cdcbe09d4ed696d3",
        "date": "2026-07-04T13:01:17.000Z"
      }
  }

{
      "id":"ad12cb61-52b3-4209-a87a-93a8530d91cb",
      "jsonrpc":"2.0",
      "result": {
        "module": "incident-note-deleted",
        "user_id": "65ccd626cdcbe09d4ed696d1",
        "user_name": "test@bitdefender.com",
        "note_id": "555c4622cdcbe09d4ed69628",
        "incident_id": "445c4622cdcbe09d4ed69622",
        "companyId": "64ccd626cdcbe09d4ed696d3",
        "date": "2026-07-04T13:01:17.000Z"
      }
  }