Advanced Threat Protection

Hello everyone

I am trying to find a resource whihc helps explain the format of the atp logs that we recieve. Does anyone know where this information can be found.

Are you talking strictly syslog format?

I believe so but am not totally sure. We get many different types of logs from different networks (MSSP).

Any reference would be helpful. I am looking for a document to help expand on the meaning of each field displayed in the log and its value. Some are self explanaotory but a reference document is always helpful for context.

Hello,

You should open a case as public documentation is non-existent.