{"architectures":{"alpine64":5,"arm":3,"arm64":4,"arml":8,"chromium":6,"usp_adapter":9,"wireguard":7,"x64":2,"x86":1},"native_edr_events":["SSH_LOGIN","SSH_LOGOUT","APP_CONTROL_DENIED","FIM_ADD","EXEC_OOB","MUL","OS_USERS_REP","POSSIBLE_DOC_EXPLOIT","CONNECTED","HISTORY_DUMP_REP","LOG_GET_REP","STARTING_UP","UNLOAD_KERNEL","YARA_SCAN","MEM_FIND_HANDLE_REP","VARIST_SCAN_REP","APP_CONTROL_POLICY_REP","DIR_FINDHASH_REP","VOLUME_MOUNT","VARIST_SCAN_FILE_REP","TOASTER_NOTIFY_REP","AUTORUN_CHANGE","MEM_MAP_REP","USER_LOGOUT","MEM_HANDLES_REP","RECEIPT","LOG_LIST_REP","WEL","FILE_DEL_REP","REGISTRY_LIST_REP","HTTP_REQUEST_HEADERS","DEBUG_DATA_REP","FORCE_SYNC_REP","GET_EXFIL_EVENT_REP","SENSITIVE_PROCESS_ACCESS","ONGOING_IDENTITY","UPDATE","REMOTE_PROCESS_HANDLE","VARIST_STOP_REP","TERMINATE_UDP6_CONNECTION","FILE_DELETE","BACKOFF","DATA_DROPPED","LATE_MODULE_LOAD","OS_SUSPEND_REP","OS_AUTORUNS_REP","FILE_MODIFIED","NEW_UDP6_CONNECTION","FILE_GREP_REP","FILE_TYPE_ACCESSED","APP_CONTROL_UNRESOLVED","DRIVER_CHANGE","SEAL","YARA_DETECTION","FIM_HIT","NEW_KERNEL_SOCKET","YARA_RULES_UPDATE","HTTP_RESPONSE_HEADERS","ACK_MESSAGES","SERVICE_CONFIG_REPAIR_REP","APP_CONTROL_RESIDENT","NEW_PROCESS","FILE_HASH_REP","SERVICE_CHANGE","NETWORK_CONNECTIONS","NEW_UDP4_CONNECTION","NEW_REMOTE_THREAD","AMSI_SCAN","EXISTING_PROCESS","REGISTRY_DELETE","REGISTRY_CREATE","SHUTTING_DOWN","PCAP_LIST_INTERFACES_REP","FILE_CREATE","OS_RESUME_REP","MEM_READ_REP","VOLUME_UNMOUNT","SYNC","NEW_TCP6_CONNECTION","FILE_READ","RECON_BURST","REGISTRY_WRITE","MODULE_MEM_DISK_MISMATCH","GET_DOCUMENT_REP","VARIST_START_REP","REPO_LIST_REP","NEW_DOCUMENT","FILE_INFO_REP","SELF_TEST_RESULT","HTTP_REQUEST","EXTERNAL_EVENT","OPEN_NAMED_PIPE","SERVICE_UPGRADE_REP","OS_PACKAGES_REP","SERVICE_UNINSTALL_REP","MODULE_LOAD","SERVICE_RESTART_REP","APP_CONTROL_DENIED_SUMMARY","FILE_GET_REP","CONTAINER_LIST_REP","SET_PERFORMANCE_MODE","USER_OBSERVED","OS_KILL_PROCESS_REP","FILE_MOV_REP","FIM_LIST_REP","SELF_TEST","REGISTRY_GET_REP","DIR_LIST_REP","SEGREGATE_NETWORK","TERMINATE_TCP4_CONNECTION","NEW_RELATION","DIR_FIND_REP","MEM_STRINGS_REP","FIM_REMOVE","NETSTAT_REP","RUN","NETWORK_SUMMARY","TERMINATE_UDP4_CONNECTION","PROCESS_ENVIRONMENT","MEM_FIND_STRING_REP","TERMINATE_PROCESS","NEW_TCP4_CONNECTION","OS_PROCESSES_REP","VARIST_STATUS_REP","TERMINATE_TCP6_CONNECTION","OS_SERVICES_REP","REJOIN_NETWORK","NEW_NAMED_PIPE","THREAD_INJECTION","USER_LOGIN","DNS_REQUEST","OS_VERSION_REP","BROWSER_REQUEST_CONTEXT","CODE_IDENTITY","HIDDEN_MODULE_DETECTED","OS_DRIVERS_REP","CLOUD_IDENTITY"],"permissions":["ingestkey.ctrl","cloudsec_provider.set","mailsec_provider.get","lookup.set.mtd","yara.get","app.get","ai_agent.exec","gstatus.get","comms.msg.view","cloudsec.get","query.get","app.get.mtd","org_notes.set","insight.stat","playbook.set.mtd","app.set.mtd","org_notes.get.mtd","acl.get","access.global","sensor.del","dr.del.service","insight.det.get","insight.ctrl","model.get.mtd","ai_agent.set","ai_agent.operate","comms.assign","ext.conf.get","yara.set.mtd","playbook.set","app.set","ai_agent.get.mtd","ai_memory.get.mtd","ai_cost_model.del","user.ctrl","dr.set.service","output.del","comms.bucket","cloudsensor.get","externaladapter.del","investigation.set.mtd","org_notes.get","comms.msg.post","mailsec.get","mailsec_provider.get.mtd","user.list","ext.conf.set","playbook.get.mtd","ai_memory.get","timeline.set","gconf.get","res.acl.del","replicant.get","comms.link","cloudsensor.set.mtd","cloudsec.set","partner.provision","ext.request","org.list","res.list","org.conf.get","ext.conf.del","lookup.get","playbook.get","ai_skill.set","ai_cost_model.set.mtd","billing.ctrl","sites.get","sensor.task","live_stream.ctrl","comms.room.list","cloudsec_provider.set.mtd","sop.get","audit.set","sensor.get","dr.list.service","incident.set","payload.ctrl","yara.del","ai_skill.get.mtd","externaladapter.set","timeline.del","apikey.ctrl","dr.set","ikey.set","insight.del","mailsec.act","secret.set.mtd","lookup.set","externaladapter.set.mtd","org.del","app.del","ai_skill.get","sop.set.mtd","ikey.list","query.get.mtd","investigation.get","investigation.del","org.get","sensor.tag","res.set","secret.get","ai_agent.get","profile.get","res.del","job.set","lookup.del","query.set","model.del","externaladapter.get.mtd","sop.set","org.set_quota","dr.del.replicant","insight.det.del","ai_memory.set","externaladapter.get","replicant.task","replicant.ctrl","net.provision","net.policy.get","cloudsec.respond","cloudsec_provider.get","mailsec_provider.set.mtd","query.set.mtd","dr.set.replicant","insight.evt.get","insight.list","comms.status","net.ctrl","mailsec.get.eml","ext.sub","timeline.set.mtd","dr.del","job.get","cloudsensor.get.mtd","mailsec_provider.del","model.set","fp.ctrl","res.acl.list","dashboard.get","cloudsensor.set","cloudsensor.del","cloudsec_provider.del","mailsec_provider.set","ai_skill.del","profile.set","module.update","audit.get","yara.set","ai_memory.del","dr.list.replicant","res.acl.set","insight.evt.get.simple","cloudsec_provider.get.mtd","app_control.get","secret.set","model.set.mtd","ai_memory.set.mtd","comms.room.create","ai_cost_model.get","ai_cost_model.get.mtd","org_notes.del","org.create","org.conf.set","ext.sub.mtd","yara.get.mtd","version.get","dr.list.managed","secret.del","ext.conf.set.mtd","ai_agent.set.mtd","investigation.get.mtd","dr.set.managed","model.get","playbook.del","ai_agent.del","sop.get.mtd","dr.list","secret.get.mtd","ext.conf.get.mtd","ai_skill.set.mtd","sop.del","output.list","res.get","partner.org.manage","org_notes.set.mtd","sensor.list","ikey.del","incident.get","payload.use","net.policy.set","timeline.get.mtd","profile.del","output.set","app_control.set","query.del","ai_cost_model.set","acl.set","gconf.set","dr.del.managed","mailsec.set","lookup.get.mtd","timeline.get","investigation.set"],"platforms":{"1password":3489660928,"android":1342177280,"aws":2952790016,"azure_ad":201326592,"azure_event_hub_namespace":352321536,"azure_key_vault":369098752,"azure_kubernetes_service":385875968,"azure_monitor":218103808,"azure_network_security_group":402653184,"azure_sql_audit":419430400,"bitwarden":738197504,"box":654311424,"canary_token":234881024,"carbon_black":3221225472,"cato":872415232,"cef":167772160,"chrome":1610612736,"cortex_xdr":788529152,"cortex_xsoar":905969664,"crowdstrike":16777216,"cylance":671088640,"duo":83886080,"email":436207616,"entraid":704643072,"falconcloud":603979776,"fortigate":452984832,"gcp":2684354560,"github":134217728,"gmail":889192448,"guard_duty":251658240,"halopsa":855638016,"harmony":822083584,"hubspot":553648128,"iis":520093696,"ios":1073741824,"itglue":285212672,"json":2415919104,"k8s_pods":301989888,"lc_event":184549376,"linux":536870912,"mac_unified_logging":335544320,"macos":805306368,"mimecast":620756992,"msdefender":67108864,"netscaler":486539264,"office365":3758096384,"okta":100663296,"otel":771751936,"paloalto_fw":503316480,"pandadoc":587202560,"proofpoint":687865856,"sentinel_one":117440512,"slack":150994944,"sophos":4026531840,"sublime":637534208,"text":2147483648,"threatlocker":838860800,"trend_micro":754974720,"trend_worryfree":469762048,"vpn":1879048192,"wel":50331648,"windows":268435456,"wiz":721420288,"xml":33554432,"zeek":318767104,"zendesk":570425344}}