Number of indicators associated with an IP Reputation or OTX pulse event. If Asset Value = 3, Reliability = 2 and Priority = 2, the risk would be 3 * 2 * 2 / 25 = 0.48 (rounded down to 0)

Note: Risk calculation is based on this formula:Īsset Value * Event Reliability * Event Priority / 25 = Risk Product type of the event taxonomy, for example, Operating System or Server. ID associated with the external application or device that produced the event.

Name of the external application or device that produced the event. For example, this would be Denial of Service, if the category were Exploit. Subcategory of the event taxonomy type listed under Category. Protocol used for the source/destination of the event, for example, TCP IP.Įvent taxonomy for the event, for example, Authentication or Exploit. Unique ID number assigned to the event by USM Appliance. ID assigned by USM Appliance to identify the event type. IP address of the USM Appliance Sensor that processed the event. It also displays the number of indicators involved, when the event relates to an Open Threat Exchange® ( OTX™) pulse, and the IP reputation Threat ranking of IP addresses that have been submitted by the OTX community as being malicious or at least suspicious.-calculated reliability and risk level data. USM Appliance™ Review Event Details Applies to Product:Įvent Details identifies all information USM Appliance collected about this event.

Alienvault otx ip lookup