Skip to content

Host Alerts

HostEvents

Object that holds 'events'/alerts that have happened on a specific host.

Attributes:

Name Type Description
network_connections List[NetworkConnection]

current network connection alerts

old_network_connections List[NetworkConnection]

past network connection alerts

process_creation list

current process creation alerts

old_process_creation list

past process creation alerts

NetworkConnection

Object that holds a network connection event/alert.

Attributes:

Name Type Description
local_address IPv4Address
local_port int
remote_address IPv4Address
remote_port int
pid int
application_protocol str
transport_protocol TransportProtocol