mirror of
https://github.com/OTRF/OSSEM-DD
synced 2026-06-08 12:05:33 +00:00
Swann Legras
36 lines
842 B
YAML
36 lines
842 B
YAML
name: Arp_cache Table
|
|
description: Address resolution cache, both static and dynamic (from ARP, NDP).
|
|
platform: linux
|
|
log_source: osquery
|
|
event_id: arp_cache
|
|
event_version: 4.4.2
|
|
event_fields:
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: address
|
|
type: TEXT
|
|
description: IPv4 address target
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: mac
|
|
type: TEXT
|
|
description: MAC address of broadcasted address
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: interface
|
|
type: TEXT
|
|
description: Interface of the network for the MAC
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: permanent
|
|
type: TEXT
|
|
description: 1 for true, 0 for false
|
|
sample_value: TBD
|
|
references:
|
|
- text: OSQuery table documentation
|
|
link: https://osquery.io/schema/current#arp_cache
|
|
tags: []
|