Syslog үйл явдлын мессежүүд — 7-р хэсэг: Database Backup, Certificate, Upgrade, Troubleshooting, Update, Device Control, Ransomware

{
  "name": "Database Backup",
  "created": "2022-04-14T08:59:57+00:00",
  "company_name": "root",
  "user_name": "root",
  "backup_status": 0,
  "is_successful": true,
  "is_scheduled": false,
  "db_version": "023-001-001",
  "date": "2022-04-14T08:59:51",
  "location_type": 2,
  "location": "\\\\10.18.156.38\\share",
  "next_backup": null
}

{
  "name": "Certificate expires",
  "created": "2022-04-24T05:00:59+03:00",
  "company_name": "root",
  "user_name": "test",
  "certificate_type": 1,
  "days_left": 0,
  "last_notification_date": "2022-04-24T05:00:59+03:00",
  "threshold": 1
}

{
  "name": "Upgrade status",
  "created": "2015-06-22T11:11:39+03:00",
  "company_name": "Bitdefender",
  "user_name": "root@bitdefender.com",
  "count": 1,
  "protected_entities": [{
    "name": "stomoiaga-win",
    "company": {
      "id": "5be196701da1978e108b4567",
      "name": "Bitdefender"
    }
  }],
  "protected_entities_more": 0,
  "show_company_name": false,
  "csv_id": {
    "$id": "5587c33bb1a43d673d8b456c"
  }
}

{
  "product_installed": "BEST",
  "computer_name": "TEST_ENDPOINT_WINDOWS_10",
  "computer_fqdn": "test-endpoint.dsd.ro",
  "computer_ip": "10.10.0.101",
  "computer_id": "5ee30e2b29a4e218489442b6",
  "taskId": "5ee30e78f23f7312e6087824",
  "taskType": "Gather Logs",
  "errorCode": 0,
  "username": "vagrant",
  "localPath": "localPath",
  "networkSharePath": "networkSharePath",
  "saveToBitdefenderCloud": 0,
  "status": 3,
  "startDate": "2020-06-12T05:11:19.000Z",
  "endDate": "2020-06-12T06:43:00.801Z"
}

{
  "name": "Update Available",
  "created": "9 Jun 2022, 10:33:31 +03:00",
  "company_name": "root",
  "user_name": "test",
  "available_version": "6.28.1-4",
  "release_date": "9 Jun 2022, 10:33:31 +03:00",
  "update_type": 0,
  "current_version": "6.27.1-5"
}

{
  "module": "device-control",
  "product_installed": "BEST",
  "VM_NAME": "btoma-win-2k12-onPrem-2",
  "VM_ID": "vm-4309",
  "UUID_INSTANCE": "5016768a-2a1b-979f-f05b-21e4b67c371c",
  "UUID_BIOS": "42161832-3f3a-f1c9-1fa4-0c27a0c6be6d",
  "computer_name": "btoma-win-2k12-onPrem-2",
  "computer_fqdn": "win-9nvehq2j63g",
  "computer_ip": "10.18.154.75",
  "computer_id": "625c0f55a154a3606228a812",
  "username": "",
  "action": "blocked",
  "deviceName": "NECVMWar VMware IDE CDR10 ATA Device",
  "deviceClass": 2,
  "deviceId": "IDE\\CDROMNECVMWAR_VMWARE_IDE_CDR10_______________1.00____\\5&290FD3AB&0&1.0.0",
  "productId": 0,
  "vendorId": 0,
  "date": "2022-04-17T13:06:23.000Z"
}

{
  "module": "ransomware-mitigation",
  "product_installed": "BEST",
  "user": {
    "name": "bdvm",
    "sid": "S-1-5-21-2018264366-2484004464-1617746128-1001"
  },
  "VM_NAME": "Pi-machine",
  "VM_ID": "Pi-3141",
  "UUID_INSTANCE": "50164ed1-28af-41af-cdaf-8e550506c37b",
  "UUID_BIOS": "4216d501-36c5-22ed-de02-0e4da0badb7a",
  "computer_name": "Pi-machine",
  "computer_fqdn": "Pi14159-automation-win64",
  "computer_ip": "31.14.159.265",
  "computer_id": "6257cf1130015b2201bf4a00",
  "attack_type": "local",
  "item_count": "12",
  "detected_on": 1650191436,
  "attack_source": "C:\\Users\\bdvm\\Desktop\\samples\\samples\\ransomeware_remediation\\RanSim\\RanSim\\TestDirectory\\Scenarios\\Collaborator\\1934050139_Collaborator.txr"
}