List of Serenety alert categories
In this article, you'll find out which categories of alerts can be used through the API.
SUMMARY
- Alert categories
- Alert sub-categories
Alert categories
Based on the "custom_fields.category" field, you can use these categories to filter events through the API.
"compromised_systems",
"data_leak",
"expirations",
"exposed_or_sensitive_systems",
"image_and_reputation",
"new_threats",
"scope_discovery",
"synthesis"
Alert sub-categories
Based on the "custom_fields.subcategory" field, you can use these categories to filter events through the API.
"compromised_systems_database",
"compromised_systems_webshell",
"compromised_systems_website",
"data_leak_confidential_document",
"data_leak_personal_data",
"data_leak_source_code",
"data_leak_strategic_data_or_intellectual_property",
"data_leak_technical_data",
"data_leak_user_accounts",
"expirations_dns",
"expirations_ssl_tls_certificates",
"exposed_or_sensitive_systems_configuration_error",
"exposed_or_sensitive_systems_connection_interfaces_or_web_pages",
"exposed_or_sensitive_systems_version_error",
"image_and_reputation_denigration",
"image_and_reputation_identity_theft",
"image_and_reputation_suspicious_domain",
"new_threats_new_cve",
"scope_discovery_dns",
"scope_discovery_keyword",
"scope_discovery_mobile_application",
"synthesis_cti_analysis_notes",
"synthesis_managerial_synthesis",
"synthesis_thematic_analysis_notes"