Previous Topic: Email Inspection ClassNext Topic: Confidential Loss Action


Attachment Scanning Action

The Attachment Scanning action occurs when event information pertaining to the scanning of Attachment in the mail between two network entities as recorded by a given host is sent. These events may get generated when Mail server process the email with attachment.

Information

Level

Source - User Information

Primary

Source - Host Information

Primary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Secondary

Dest - Host Information

Primary

Dest - Object Information

Tertiary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Secondary

Event - Information

Primary

Result - Information

Primary

The important information for this action is which host is attempting to access which host. The event information was expressed on which host and recorded by which agent on which host.

Result

event_result

event_severity

Success

S

2

Failure

F

3