| Name | Type | Description | Notes |
|---|---|---|---|
| category | CategoryEnum | Networking category of the match | |
| how | HowEnum | Detection tier that produced the match | |
| matchedName | String | Name or token that matched | |
| source | SourceEnum | Networking source the match belongs to |
| Name | Value |
|---|---|
| ACCEPT | "accept" |
| ADDRESS | "address" |
| CONNECT | "connect" |
| DNS | "dns" |
| HTTP | "http" |
| NETINFO | "netinfo" |
| RAW_PACKET | "raw-packet" |
| RECV | "recv" |
| SEND | "send" |
| SOCKET | "socket" |
| TLS | "tls" |
| URL | "url" |
| UNKNOWN_DEFAULT_OPEN_API | "unknown_default_open_api" |
| Name | Value |
|---|---|
| API | "api" |
| CPP_CLASS_TOKEN | "cpp-class-token" |
| GENERIC_KEYWORD | "generic-keyword" |
| UNKNOWN_DEFAULT_OPEN_API | "unknown_default_open_api" |
| Name | Value |
|---|---|
| BOOST | "boost" |
| CPP | "cpp" |
| CURL | "curl" |
| GENERIC | "generic" |
| LIBC | "libc" |
| PCAP | "pcap" |
| POCO | "poco" |
| QT | "qt" |
| TLS | "tls" |
| WINDOWS | "windows" |
| UNKNOWN_DEFAULT_OPEN_API | "unknown_default_open_api" |