 |
ImportantThis data source query method is no longer available after February 2, 2026. For more
information on the currently available data sources for use in XDR Data Explorer queries,
go to https://trendmicro.github.io/tm-v1-schema/pages/index.
|
|
Field
|
General Field
|
Example
|
Notes
|
|
srcDomain
|
DomainName
|
self.events.data.microsoft.com
|
Domain name system (DNS) event
|
|
src
|
|
|
Apex One records all internet protocol (IP) addresses including 127.0.01 and virtual machine
addresses.
|
|
request
|
URL
|
https://www.example.com
|
-
|
|
attachmentFileHash
|
FileSHA1
|
98A9A1C8F69373B211E5F1E303BA8762F44BC898
|
Information about each attachment file in the email message
|
|
attachmentFileHashSha256
|
FileSHA2
|
16e4e8b57e82159a16f5d7d898da9e2a4fbe90c17cd95c02074e75226337c90a
|
|
|
attachmentFileName
|
FileName
|
example.exe
|
|
|
fileExt
|
-
|
txt
|
|
|
mailMsgSubject
|
EmailSubject
|
Subject: From the desk of the Nigerian Prince
|
-
|
|
msgId
|
EmailMessageID
|
<rRzmIhBrXbgjvr4uhIwCcbtE6BnmgNTtAU51qWmqY@example.online>
|
-
|
|
suser
|
EmailSender
|
john_doe@example.com
|
-
|
|
duser
|
EmailRecipient
|
john_doe@example.com
|
-
|
|
suid
|
-
|
john_doe@example.com
|
-
|