InlineInspectedFileDetails1

InlineInspectedFileDetails1

Details of a particular inspected file.

JSON Example

{
    "file_name": [
        "string"
    ],
    "analysed_in_cloud": false,
    "is_blocked": false,
    "file_type": "string",
    "file_type_details": "string",
    "submitted_by": "string",
    "analyst_task_uuid": "string",
    "protocol": "string",
    "workloads_affected_count": 0,
    "last_client": {
        "vm_id": "string",
        "ip_address": "string",
        "fqdn": "string"
    },
    "last_server": "VirtualMachineDetails Object",
    "node_type": "string",
    "node_id": "string",
    "gateway_id": "string",
    "first_inspected": 0
}

array of string

file_name

Optional

Array of file names observed for this file hash. This list is sorted based on corresponding inspection time. Last observed file name will appear first in this list.

boolean

analysed_in_cloud

Optional

Specifies whether this file is analysed in cloud.

boolean

is_blocked

Optional

Conveys if the file is blocked by the Malware Prevention Service.

string

file_type

Optional

Type / Extension of the inspected file.

string

file_type_details

Optional

Detailed information about the type / extension of the inspected file.

string

submitted_by

Optional

Identifier of the last user who submitted this file for inspection.

string

analyst_task_uuid

Optional

Task UUID assigned by Lastline Analyst service.

Protocol

protocol

Optional

Protocol through which the file download / process activity is reported.

Enumeration: INVALID, HTTP, HTTPS, FTP, SMB

integer

workloads_affected_count

Optional

Number of workload Virtual Machines (VMs) on which this file is observed.

VirtualMachineDetails

last_client

Optional

Details about the Virtual Machine.

VirtualMachineDetails

last_server

Optional

Details about the Virtual Machine.

NodeType

node_type

Optional

Type of node on which endpoint or network activity is reported.

Enumeration: HOST, GATEWAY, SENSOR, INVALID

NodeId

node_id

Optional

ID of the node from which event was generated. A node could be hypervisor host, NSX Edge or Sensor.

string

gateway_id

Optional

ID of the Tier0 or Tier1 gateway on which this file is detected. Tier0 or Tier1 gateway are logical routers of NSX-T topology.

EpochMsTimestamp

first_inspected

Optional

Timestamp in milliseconds since epoch.

Used By

InspectedFileDetails