diff --git a/EDR_telem_macOS.json b/EDR_telem_macOS.json index 75439e5..cfea544 100644 --- a/EDR_telem_macOS.json +++ b/EDR_telem_macOS.json @@ -2,755 +2,755 @@ { "Telemetry Feature Category": "Process Activity", "Sub-Category": "Process Creation", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "Process Termination", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "No", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "Yes" }, { "Telemetry Feature Category": "File Activity", "Sub-Category": "File Creation", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Partially", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "File Modification", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "File Deletion", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "File Attribute Change", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "Partially", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "File Open/Access", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "No", "CrowdStrike": "Partially", "ESET Inspect": "No", "Elastic": "Partially", "LimaCharlie": "Partially", "MDE": "Partially", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "Yes" }, { "Telemetry Feature Category": "User & Session Activity", "Sub-Category": "User Logon", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "User Logoff", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Logon Failed", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "Yes", "ESET Inspect": "No", "Elastic": "Yes", "LimaCharlie": "No", "MDE": "Yes", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Screen Lock", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Screen Unlock", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Privilege Escalation (sudo etc.)", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Script Activity", "Sub-Category": "Script Content", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "Partially", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Network Activity", "Sub-Category": "Network Connection", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "Network Socket Listen", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "No", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "DNS Query", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Partially", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Scheduled Task & Persistence Activity", "Sub-Category": "Scheduled Task Change (cron/at)", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "Partially", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Launchd Item Created", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Partially", "ESET Inspect": "Partially", "Elastic": "Yes", "LimaCharlie": "No", "MDE": "Partially", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Launchd Item Modified", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Partially", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "Partially", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Launchd Item Deleted", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "Partially", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "LoginItem Created", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "Partially", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "LoginItem Deleted", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "User Account Activity", "Sub-Category": "User Account Created", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "Yes", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "User Account Modified", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "Yes", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "User Account Deleted", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "Yes", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Group Membership Modified", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "System Extension & Driver Activity", "Sub-Category": "System Extension Installed", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "System Extension Loaded", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "Yes", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "System Extension Uninstalled", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "DriverKit Extension Loaded", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Kernel Extension Loaded (legacy)", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Code Signing & Trust Activity", "Sub-Category": "Binary Signature Info Recorded", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Partially", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "No", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "Notarization Status Recorded", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Quarantine Flag Set", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Quarantine Flag Cleared", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Gatekeeper Decision Logged", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "XProtect Detection Logged", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "XProtect Remediation Logged", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Privacy & TCC Activity", "Sub-Category": "TCC Prompt Shown", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "TCC Decision (Allow)", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "TCC Decision (Deny)", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "TCC Policy Change", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "Yes", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "TCC Access Check", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Access Activity", "Sub-Category": "Raw Device Access", - "Phorion": "No", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Process Access", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Process Tampering Activity", "Sub-Category": "Process Injection Or Tampering", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "No", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Device Activity", "Sub-Category": "External Media Mounted", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Partially", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "External Media Unmounted", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "Yes", "MDE": "Partially", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "EDR SysOps", "Sub-Category": "Agent Start", - "Phorion": "No", "BitDefender": "Yes", + "C-Prot": "No", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "Agent Stop", - "Phorion": "No", "BitDefender": "Yes", + "C-Prot": "No", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "Agent Protection Disabled Or Tamper Event", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "Yes", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "File Metadata", "Sub-Category": "MD5 Available", - "Phorion": "No", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Partially", "LimaCharlie": "No", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "No", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "SHA-256 Available", - "Phorion": "Partially", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "Yes", "ESET Inspect": "Yes", "Elastic": "Yes", "LimaCharlie": "Yes", "MDE": "Yes", - "Qualys": "Yes", - "Unnamed: 10": null + "Phorion": "Partially", + "Qualys": "Yes" }, { "Telemetry Feature Category": null, "Sub-Category": "Fuzzy Hash Available", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": "Service Activity", "Sub-Category": "Service Created", - "Phorion": "Yes", "BitDefender": "Yes", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "Partially", "Elastic": "No", "LimaCharlie": "Yes", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Service Modified", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "Yes", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" }, { "Telemetry Feature Category": null, "Sub-Category": "Service Deleted", - "Phorion": "Yes", "BitDefender": "No", + "C-Prot": "Yes", "CrowdStrike": "No", "ESET Inspect": "No", "Elastic": "No", "LimaCharlie": "No", "MDE": "No", - "Qualys": "No", - "Unnamed: 10": null + "Phorion": "Yes", + "Qualys": "No" } ] \ No newline at end of file diff --git a/EDR_telem_windows.json b/EDR_telem_windows.json index a3008f8..6c2c2b3 100644 --- a/EDR_telem_windows.json +++ b/EDR_telem_windows.json @@ -1,1484 +1,1541 @@ [ { - "Telemetry Feature Category":"Process Activity", - "Sub-Category":"Process Creation", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": "Process Activity", + "Sub-Category": "Process Creation", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Process Termination", - "BitDefender":"Yes", - "Carbon Black":"Partially", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"No", - "LimaCharlie":"Yes", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"No", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"No", - "Trend Micro":"Via EnablingTelemetry", - "Uptycs":"No", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Process Termination", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Partially", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "No", + "LimaCharlie": "Yes", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "No", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "No", + "Trend Micro": "Via EnablingTelemetry", + "Uptycs": "No", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Process Access", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"No", - "ESET Inspect":"Partially", - "Elastic":"Yes", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Partially", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"No", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Process Access", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "No", + "ESET Inspect": "Partially", + "Elastic": "Yes", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Partially", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "No", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Image\/Library Loaded", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Image/Library Loaded", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Remote Thread Creation", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Remote Thread Creation", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Win32 API Telemetry", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Pending Response", - "Cybereason":"Pending Response", - "Cylance":"Yes", - "ESET Inspect":"Partially", - "Elastic":"Yes", - "FortiEDR":"Pending Response", - "Harfanglab":"Pending Response", - "LimaCharlie":"Pending Response", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Partially", - "Qualys":"Pending Response", - "SentinelOne":"Pending Response", - "Symantec SES Complete":"Pending Response", - "Sysmon":"No", - "Trellix":"Pending Response", - "Trend Micro":"Pending Response", - "Uptycs":"Via EnablingTelemetry", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Win32 API Telemetry", + "BitDefender": "Yes", + "C-Prot": "No", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Pending Response", + "Cybereason": "Pending Response", + "Cylance": "Yes", + "ESET Inspect": "Partially", + "Elastic": "Yes", + "FortiEDR": "Pending Response", + "Harfanglab": "Pending Response", + "LimaCharlie": "Pending Response", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Partially", + "Qualys": "Pending Response", + "SentinelOne": "Pending Response", + "Symantec SES Complete": "Pending Response", + "Sysmon": "No", + "Trellix": "Pending Response", + "Trend Micro": "Pending Response", + "Uptycs": "Via EnablingTelemetry", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Process Tampering Activity", - "BitDefender":"Yes", - "Carbon Black":"Partially", - "Cortex XDR":"Partially", - "CrowdStrike":"Yes", - "Cybereason":"Pending Response", - "Cylance":"Via EnablingTelemetry", - "ESET Inspect":"No", - "Elastic":"Yes", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Process Tampering Activity", + "BitDefender": "Yes", + "C-Prot": "No", + "Carbon Black": "Partially", + "Cortex XDR": "Partially", + "CrowdStrike": "Yes", + "Cybereason": "Pending Response", + "Cylance": "Via EnablingTelemetry", + "ESET Inspect": "No", + "Elastic": "Yes", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Process Call Stacks", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"Yes", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"No", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"No", - "Symantec SES Complete":"No", - "Sysmon":"Yes", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"No", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Process Call Stacks", + "BitDefender": "No", + "C-Prot": "No", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "Yes", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "No", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "No", + "Symantec SES Complete": "No", + "Sysmon": "Yes", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "No", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"File Manipulation", - "Sub-Category":"File Creation", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Via EnablingTelemetry", - "ESET Inspect":"Partially", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Partially" + "Telemetry Feature Category": "File Manipulation", + "Sub-Category": "File Creation", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Via EnablingTelemetry", + "ESET Inspect": "Partially", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Partially" }, { - "Telemetry Feature Category":null, - "Sub-Category":"File Opened", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Partially", - "Cybereason":"No", - "Cylance":"Via EnablingTelemetry", - "ESET Inspect":"Partially", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Partially", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"Yes", - "SentinelOne":"No", - "Symantec SES Complete":"Yes", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EnablingTelemetry", - "Uptycs":"Yes", - "WatchGuard":"Partially" + "Telemetry Feature Category": null, + "Sub-Category": "File Opened", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Partially", + "Cybereason": "No", + "Cylance": "Via EnablingTelemetry", + "ESET Inspect": "Partially", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Partially", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "Yes", + "SentinelOne": "No", + "Symantec SES Complete": "Yes", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EnablingTelemetry", + "Uptycs": "Yes", + "WatchGuard": "Partially" }, { - "Telemetry Feature Category":null, - "Sub-Category":"File Deletion", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"No", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Via EnablingTelemetry", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "File Deletion", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "No", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Via EnablingTelemetry", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"File Modification", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"No", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "File Modification", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "No", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"File Renaming", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Partially", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Partially", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Partially" + "Telemetry Feature Category": null, + "Sub-Category": "File Renaming", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Partially", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Partially", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Partially" }, { - "Telemetry Feature Category":"User Account Activity", - "Sub-Category":"Local Account Creation", - "BitDefender":"Via EventLogs", - "Carbon Black":"No", - "Cortex XDR":"Via EventLogs", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"Via EventLogs", - "ESET Inspect":"Yes", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": "User Account Activity", + "Sub-Category": "Local Account Creation", + "BitDefender": "Via EventLogs", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Via EventLogs", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "Via EventLogs", + "ESET Inspect": "Yes", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Local Account Modification", - "BitDefender":"Via EventLogs", - "Carbon Black":"No", - "Cortex XDR":"Via EventLogs", - "CrowdStrike":"Partially", - "Cybereason":"No", - "Cylance":"Via EventLogs", - "ESET Inspect":"Yes", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Via EventLogs", - "SentinelOne":"Via EventLogs", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Local Account Modification", + "BitDefender": "Via EventLogs", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Via EventLogs", + "CrowdStrike": "Partially", + "Cybereason": "No", + "Cylance": "Via EventLogs", + "ESET Inspect": "Yes", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Via EventLogs", + "SentinelOne": "Via EventLogs", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Local Account Deletion", - "BitDefender":"Via EventLogs", - "Carbon Black":"No", - "Cortex XDR":"Via EventLogs", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"Via EventLogs", - "ESET Inspect":"Yes", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Via EventLogs", - "SentinelOne":"Via EventLogs", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EnablingTelemetry", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Local Account Deletion", + "BitDefender": "Via EventLogs", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Via EventLogs", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "Via EventLogs", + "ESET Inspect": "Yes", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Via EventLogs", + "SentinelOne": "Via EventLogs", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EnablingTelemetry", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Account Login", - "BitDefender":"Yes", - "Carbon Black":"Via EventLogs", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Via EventLogs", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Partially", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Account Login", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Via EventLogs", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Via EventLogs", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Partially", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Account Logoff", - "BitDefender":"No", - "Carbon Black":"Via EventLogs", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Via EventLogs", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Account Logoff", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "Via EventLogs", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Via EventLogs", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":"Network Activity", - "Sub-Category":"TCP Connection", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": "Network Activity", + "Sub-Category": "TCP Connection", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"UDP Connection", - "BitDefender":"No", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"No", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Via EventLogs", - "LimaCharlie":"Yes", - "MDE":"No", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"No", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "UDP Connection", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "No", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Via EventLogs", + "LimaCharlie": "Yes", + "MDE": "No", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "No", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"URL", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"No", - "Cybereason":"No", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Partially", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"No", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Via EnablingTelemetry", - "Symantec SES Complete":"Partially", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"Partially" + "Telemetry Feature Category": null, + "Sub-Category": "URL", + "BitDefender": "No", + "C-Prot": "No", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "No", + "Cybereason": "No", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Partially", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "No", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Via EnablingTelemetry", + "Symantec SES Complete": "Partially", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "Partially" }, { - "Telemetry Feature Category":null, - "Sub-Category":"DNS Query", - "BitDefender":"No", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "DNS Query", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"File Downloaded", - "BitDefender":"Partially", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Partially", - "Cylance":"No", - "ESET Inspect":"Partially", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Partially", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"No", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"Yes", - "Uptycs":"Partially", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "File Downloaded", + "BitDefender": "Partially", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Partially", + "Cylance": "No", + "ESET Inspect": "Partially", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Partially", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "No", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "Yes", + "Uptycs": "Partially", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":"Hash Algorithms", - "Sub-Category":"MD5", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": "Hash Algorithms", + "Sub-Category": "MD5", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"SHA", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "SHA", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"IMPHASH", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"No", - "CrowdStrike":"No", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"Yes", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"No", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"No", - "Symantec SES Complete":"No", - "Sysmon":"Yes", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"No", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "IMPHASH", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "No", + "CrowdStrike": "No", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "Yes", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "No", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "No", + "Symantec SES Complete": "No", + "Sysmon": "Yes", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "No", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"JA3\/JA3s", - "BitDefender":"No", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"No", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"No", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"No", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "JA3/JA3s", + "BitDefender": "No", + "C-Prot": "No", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "No", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "No", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "No", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"Registry Activity", - "Sub-Category":"Key\/Value Creation", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Partially", - "Cybereason":"Partially", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": "Registry Activity", + "Sub-Category": "Key/Value Creation", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Partially", + "Cybereason": "Partially", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Key\/Value Modification", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Partially", - "Cybereason":"Partially", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"No", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Key/Value Modification", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Partially", + "Cybereason": "Partially", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "No", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Key\/Value Deletion", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"No", - "Cybereason":"Partially", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"No", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Key/Value Deletion", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "No", + "Cybereason": "Partially", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "No", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":"Schedule Task Activity", - "Sub-Category":"Scheduled Task Creation", - "BitDefender":"Via EventLogs", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Via EventLogs", - "ESET Inspect":"Yes", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": "Schedule Task Activity", + "Sub-Category": "Scheduled Task Creation", + "BitDefender": "Via EventLogs", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Via EventLogs", + "ESET Inspect": "Yes", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Scheduled Task Modification", - "BitDefender":"Via EventLogs", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Via EventLogs", - "ESET Inspect":"No", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Scheduled Task Modification", + "BitDefender": "Via EventLogs", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Via EventLogs", + "ESET Inspect": "No", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Scheduled Task Deletion", - "BitDefender":"Via EventLogs", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"Via EventLogs", - "ESET Inspect":"No", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"Via EventLogs", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Scheduled Task Deletion", + "BitDefender": "Via EventLogs", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "Via EventLogs", + "ESET Inspect": "No", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "Via EventLogs", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"Service Activity", - "Sub-Category":"Service Creation", - "BitDefender":"Partially", - "Carbon Black":"Partially", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"Partially" + "Telemetry Feature Category": "Service Activity", + "Sub-Category": "Service Creation", + "BitDefender": "Partially", + "C-Prot": "Yes", + "Carbon Black": "Partially", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "Partially" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Service Modification", - "BitDefender":"Via EventLogs", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"Partially", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Via EnablingTelemetry", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"Partially" + "Telemetry Feature Category": null, + "Sub-Category": "Service Modification", + "BitDefender": "Via EventLogs", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "Partially", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Via EnablingTelemetry", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "Partially" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Service Deletion", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"No", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"No", - "LimaCharlie":"Pending Response", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"No", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Service Deletion", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "No", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "No", + "LimaCharlie": "Pending Response", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "No", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"Driver\/Module Activity", - "Sub-Category":"Driver Loaded", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EnablingTelemetry", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"Yes", - "Trellix":"No", - "Trend Micro":"Via EnablingTelemetry", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": "Driver/Module Activity", + "Sub-Category": "Driver Loaded", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EnablingTelemetry", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "Yes", + "Trellix": "No", + "Trend Micro": "Via EnablingTelemetry", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Driver Modification", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"No", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"No", - "LimaCharlie":"Yes", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"No", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Driver Modification", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "No", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "No", + "LimaCharlie": "Yes", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "No", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Driver Unloaded", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"No", - "CrowdStrike":"No", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"No", - "LimaCharlie":"No", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"Partially", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Driver Unloaded", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "No", + "CrowdStrike": "No", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "No", + "LimaCharlie": "No", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "Partially", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"Device Operations", - "Sub-Category":"Virtual Disk Mount", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Partially", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"No", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"No", - "SentinelOne":"No", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": "Device Operations", + "Sub-Category": "Virtual Disk Mount", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Partially", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "No", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "No", + "SentinelOne": "No", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"USB Device Unmount", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Partially", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"Partially", - "LimaCharlie":"Partially", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"No", - "SentinelOne":"Via EnablingTelemetry", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "USB Device Unmount", + "BitDefender": "No", + "C-Prot": "No", + "Carbon Black": "No", + "Cortex XDR": "Partially", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "Partially", + "LimaCharlie": "Partially", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "No", + "SentinelOne": "Via EnablingTelemetry", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"USB Device Mount", - "BitDefender":"No", - "Carbon Black":"Partially", - "Cortex XDR":"Partially", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"Partially", - "LimaCharlie":"Partially", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"No", - "SentinelOne":"Via EnablingTelemetry", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "USB Device Mount", + "BitDefender": "No", + "C-Prot": "No", + "Carbon Black": "Partially", + "Cortex XDR": "Partially", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "Partially", + "LimaCharlie": "Partially", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "No", + "SentinelOne": "Via EnablingTelemetry", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":"Other Relevant Events", - "Sub-Category":"Group Policy Modification", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Via EventLogs", - "CrowdStrike":"No", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"No", - "LimaCharlie":"No", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"Yes", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"No", - "Trend Micro":"No", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": "Other Relevant Events", + "Sub-Category": "Group Policy Modification", + "BitDefender": "No", + "C-Prot": "No", + "Carbon Black": "No", + "Cortex XDR": "Via EventLogs", + "CrowdStrike": "No", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "No", + "LimaCharlie": "No", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "Yes", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "No", + "Trend Micro": "No", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Volume Shadow Copy Deletion", - "BitDefender":"Yes", - "Carbon Black":"No", - "Cortex XDR":"No", - "CrowdStrike":"Yes", - "Cybereason":"Pending Response", - "Cylance":"Pending Response", - "ESET Inspect":"Yes", - "Elastic":"Pending Response", - "FortiEDR":"Pending Response", - "Harfanglab":"Pending Response", - "LimaCharlie":"No", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"No", - "SentinelOne":"Yes", - "Symantec SES Complete":"Pending Response", - "Sysmon":"No", - "Trellix":"Pending Response", - "Trend Micro":"Pending Response", - "Uptycs":"No", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Volume Shadow Copy Deletion", + "BitDefender": "Yes", + "C-Prot": "No", + "Carbon Black": "No", + "Cortex XDR": "No", + "CrowdStrike": "Yes", + "Cybereason": "Pending Response", + "Cylance": "Pending Response", + "ESET Inspect": "Yes", + "Elastic": "Pending Response", + "FortiEDR": "Pending Response", + "Harfanglab": "Pending Response", + "LimaCharlie": "No", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "No", + "SentinelOne": "Yes", + "Symantec SES Complete": "Pending Response", + "Sysmon": "No", + "Trellix": "Pending Response", + "Trend Micro": "Pending Response", + "Uptycs": "No", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"Named Pipe Activity", - "Sub-Category":"Pipe Creation", - "BitDefender":"Yes", - "Carbon Black":"Partially", - "Cortex XDR":"No", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"Via EnablingTelemetry", - "Symantec SES Complete":"No", - "Sysmon":"Yes", - "Trellix":"No", - "Trend Micro":"Via EnablingTelemetry", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": "Named Pipe Activity", + "Sub-Category": "Pipe Creation", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Partially", + "Cortex XDR": "No", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "Via EnablingTelemetry", + "Symantec SES Complete": "No", + "Sysmon": "Yes", + "Trellix": "No", + "Trend Micro": "Via EnablingTelemetry", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Pipe Connection", - "BitDefender":"Yes", - "Carbon Black":"No", - "Cortex XDR":"No", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"No", - "Elastic":"No", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"No", - "Qualys":"No", - "SentinelOne":"Via EnablingTelemetry", - "Symantec SES Complete":"No", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Via EnablingTelemetry", - "Uptycs":"No", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Pipe Connection", + "BitDefender": "Yes", + "C-Prot": "No", + "Carbon Black": "No", + "Cortex XDR": "No", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "No", + "Elastic": "No", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "No", + "Qualys": "No", + "SentinelOne": "Via EnablingTelemetry", + "Symantec SES Complete": "No", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Via EnablingTelemetry", + "Uptycs": "No", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"EDR SysOps", - "Sub-Category":"Agent Start", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"No", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"Yes", - "Trellix":"Pending Response", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": "EDR SysOps", + "Sub-Category": "Agent Start", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "No", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "Yes", + "Trellix": "Pending Response", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Agent Stop", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"No", - "Elastic":"Yes", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Via EventLogs", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"Yes", - "Trellix":"Pending Response", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Agent Stop", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "No", + "Elastic": "Yes", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Via EventLogs", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "Yes", + "Trellix": "Pending Response", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Agent Install", - "BitDefender":"No", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"No", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"No", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Via EventLogs", - "OpenEDR":"Yes", - "Padvish XDR":"Via EventLogs", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Agent Install", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "No", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "No", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Via EventLogs", + "OpenEDR": "Yes", + "Padvish XDR": "Via EventLogs", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Agent Uninstall", - "BitDefender":"No", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"No", - "LimaCharlie":"No", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"No", - "SentinelOne":"Yes", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"No", - "Uptycs":"No", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "Agent Uninstall", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "No", + "LimaCharlie": "No", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "No", + "SentinelOne": "Yes", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "No", + "Uptycs": "No", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Agent Keep-Alive", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"No", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Via EventLogs", - "OpenEDR":"Yes", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"No", - "Trellix":"Pending Response", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Agent Keep-Alive", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "No", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Via EventLogs", + "OpenEDR": "Yes", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "No", + "Trellix": "Pending Response", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":null, - "Sub-Category":"Agent Errors", - "BitDefender":"Yes", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Yes", - "Harfanglab":"Yes", - "LimaCharlie":"Yes", - "MDE":"Yes", - "OpenEDR":"Yes", - "Padvish XDR":"No", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Via EnablingTelemetry", - "Sysmon":"Yes", - "Trellix":"Pending Response", - "Trend Micro":"No", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": null, + "Sub-Category": "Agent Errors", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Yes", + "Harfanglab": "Yes", + "LimaCharlie": "Yes", + "MDE": "Yes", + "OpenEDR": "Yes", + "Padvish XDR": "No", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Via EnablingTelemetry", + "Sysmon": "Yes", + "Trellix": "Pending Response", + "Trend Micro": "No", + "Uptycs": "Yes", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"WMI Activity", - "Sub-Category":"WmiEventConsumerToFilter", - "BitDefender":"Yes", - "Carbon Black":"No", - "Cortex XDR":"Via EnablingTelemetry", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"No", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"Partially", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": "WMI Activity", + "Sub-Category": "WmiEventConsumerToFilter", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Via EnablingTelemetry", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "No", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "Partially", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"WmiEventConsumer", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Via EnablingTelemetry", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"No", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"Partially", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "WmiEventConsumer", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Via EnablingTelemetry", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "No", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "Partially", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":null, - "Sub-Category":"WmiEventFilter", - "BitDefender":"No", - "Carbon Black":"No", - "Cortex XDR":"Via EnablingTelemetry", - "CrowdStrike":"Yes", - "Cybereason":"Yes", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Yes", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"No", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Via EventLogs", - "SentinelOne":"Yes", - "Symantec SES Complete":"Partially", - "Sysmon":"Yes", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Yes", - "WatchGuard":"Yes" + "Telemetry Feature Category": null, + "Sub-Category": "WmiEventFilter", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Via EnablingTelemetry", + "CrowdStrike": "Yes", + "Cybereason": "Yes", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Yes", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "No", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Via EventLogs", + "SentinelOne": "Yes", + "Symantec SES Complete": "Partially", + "Sysmon": "Yes", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Yes", + "WatchGuard": "Yes" }, { - "Telemetry Feature Category":"BITS Jobs Activity", - "Sub-Category":"BITS Jobs Activity", - "BitDefender":"Yes", - "Carbon Black":"No", - "Cortex XDR":"Via EnablingTelemetry", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"No", - "ESET Inspect":"Yes", - "Elastic":"No", - "FortiEDR":"Via EventLogs", - "Harfanglab":"No", - "LimaCharlie":"No", - "MDE":"No", - "OpenEDR":"No", - "Padvish XDR":"Via EventLogs", - "Qualys":"Yes", - "SentinelOne":"Via EventLogs", - "Symantec SES Complete":"No", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Via EventLogs", - "Uptycs":"Via EventLogs", - "WatchGuard":"No" + "Telemetry Feature Category": "BITS Jobs Activity", + "Sub-Category": "BITS Jobs Activity", + "BitDefender": "Yes", + "C-Prot": "Yes", + "Carbon Black": "No", + "Cortex XDR": "Via EnablingTelemetry", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "No", + "ESET Inspect": "Yes", + "Elastic": "No", + "FortiEDR": "Via EventLogs", + "Harfanglab": "No", + "LimaCharlie": "No", + "MDE": "No", + "OpenEDR": "No", + "Padvish XDR": "Via EventLogs", + "Qualys": "Yes", + "SentinelOne": "Via EventLogs", + "Symantec SES Complete": "No", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Via EventLogs", + "Uptycs": "Via EventLogs", + "WatchGuard": "No" }, { - "Telemetry Feature Category":"PowerShell Activity", - "Sub-Category":"Script-Block Activity", - "BitDefender":"No", - "Carbon Black":"Yes", - "Cortex XDR":"Yes", - "CrowdStrike":"Yes", - "Cybereason":"No", - "Cylance":"Yes", - "ESET Inspect":"Yes", - "Elastic":"Via EventLogs", - "FortiEDR":"Via EventLogs", - "Harfanglab":"Yes", - "LimaCharlie":"Via EventLogs", - "MDE":"Yes", - "OpenEDR":"No", - "Padvish XDR":"Yes", - "Qualys":"Yes", - "SentinelOne":"Yes", - "Symantec SES Complete":"Yes", - "Sysmon":"No", - "Trellix":"Yes", - "Trend Micro":"Yes", - "Uptycs":"Yes", - "WatchGuard":"No" + "Telemetry Feature Category": "PowerShell Activity", + "Sub-Category": "Script-Block Activity", + "BitDefender": "No", + "C-Prot": "Yes", + "Carbon Black": "Yes", + "Cortex XDR": "Yes", + "CrowdStrike": "Yes", + "Cybereason": "No", + "Cylance": "Yes", + "ESET Inspect": "Yes", + "Elastic": "Via EventLogs", + "FortiEDR": "Via EventLogs", + "Harfanglab": "Yes", + "LimaCharlie": "Via EventLogs", + "MDE": "Yes", + "OpenEDR": "No", + "Padvish XDR": "Yes", + "Qualys": "Yes", + "SentinelOne": "Yes", + "Symantec SES Complete": "Yes", + "Sysmon": "No", + "Trellix": "Yes", + "Trend Micro": "Yes", + "Uptycs": "Yes", + "WatchGuard": "No" } ] diff --git a/Tools/convert.py b/Tools/convert.py index 3b56398..cc0ae47 100644 --- a/Tools/convert.py +++ b/Tools/convert.py @@ -1,6 +1,6 @@ import pandas as pd import argparse -import json +from pathlib import Path parser = argparse.ArgumentParser( description='Convert from JSON to CSV and the other way around') @@ -12,76 +12,50 @@ parser.add_argument( args = parser.parse_args() input_file = args.input_file -def replace_to_words(file): - # Replace the target words with the replacement words - words_to_replace = { - "\u2705": "Yes", # ✅ Implemented - "\u274C": "No", # ❌ Not Implemented - "\u26A0\uFE0F": "Partially", # ⚠️ Partially Implemented - "\u2753": "Pending Response", # ❓ Pending Response - "\uD83E\uDEB5" : "Via EventLogs", # 🪵 Via EventLogs - "\ud83c\udf9a️" : "Via EnablingTelemetry" # 🎚️ Via EnablingTelemetry -} - # Read the JSON file - with open(file, "r", encoding='utf-8') as f: - data = json.load(f) - - # Replace values but skip "Sub-Category" and "Telemetry Feature Category" keys - for item in data: - for key, value in item.items(): - if key not in ["Sub-Category", "Telemetry Feature Category"]: - if isinstance(value, str): - for emoji, word in words_to_replace.items(): - value = value.replace(emoji, word) - item[key] = value - - try: - with open(file, 'w', encoding='utf-8') as f: - json.dump(data, f, indent=2, ensure_ascii=False) - except PermissionError: - print(PermissionError) - pass +EXCLUDED_COLUMNS = ["Sub-Category", "Telemetry Feature Category"] -def replace_from_words(file): - # Replace the target words with the replacement words - words_to_replace = { - "Yes": "✅", - "No" : "❌", - "Partially" : "⚠️", - "N/A" : "➖", - "Pending Response" : "❓", - "Via EventLogs" : "🪵", - "Via EnablingTelemetry" : "🎚️" - #Add more words as needed - } - # Read the CSV file - with open(file, "r") as f: - lines = f.readlines() - - # Skip replacement in the header (first line) and first two columns - for i in range(1, len(lines)): - # Split the line by comma - parts = lines[i].split(',') - # Replace only in columns after the first two - for j in range(2, len(parts)): - for key, value in words_to_replace.items(): - parts[j] = parts[j].replace(key, value) - # Join back together - lines[i] = ','.join(parts) - - try: - with open(file, 'w', encoding='utf-8') as f: - f.writelines(lines) - except PermissionError: - print(PermissionError) - pass +EMOJI_TO_WORDS = { + "✅": "Yes", + "❌": "No", + "⚠️": "Partially", + "❓": "Pending Response", + "➖": "N/A", + "🪵": "Via EventLogs", + "🎚️": "Via EnablingTelemetry", + "🎚": "Via EnablingTelemetry", +} + +WORDS_TO_EMOJI = { + "Yes": "✅", + "No": "❌", + "Partially": "⚠️", + "N/A": "➖", + "Pending Response": "❓", + "Via EventLogs": "🪵", + "Via EnablingTelemetry": "🎚️", +} + + +def replace_values(df, replacements): + columns = [column for column in df.columns if column not in EXCLUDED_COLUMNS] + + def replace_value(value): + if not isinstance(value, str): + return value + + for old_value, new_value in replacements.items(): + value = value.replace(old_value, new_value) + return value + + df[columns] = df[columns].apply(lambda column: column.map(replace_value)) + return df def to_json(input_file): df = pd.read_csv(input_file) - input_file = input_file.split(".")[0] + ".json" - df.to_json(input_file, orient='records', indent=2) - replace_to_words(input_file) - print(f"\n [*] Successfully converted to {input_file}\n") + df = replace_values(df, EMOJI_TO_WORDS) + output_file = Path(input_file).with_suffix(".json") + df.to_json(output_file, orient='records', indent=2, force_ascii=False) + print(f"\n [*] Successfully converted to {output_file}\n") def to_csv(input_file): @@ -90,11 +64,11 @@ def to_csv(input_file): df2 = df.drop(['Telemetry Feature Category', 'Sub-Category'], axis=1) df2.sort_index(axis=1, level=None, sort_remaining=False, inplace=True) df = pd.concat([df1, df2], axis="columns") + df = replace_values(df, WORDS_TO_EMOJI) - input_file = input_file.split(".")[0] + ".csv" - df.to_csv(input_file, index=False) - replace_from_words(input_file) - print(f"\n [*] Successfully converted to {input_file}\n") + output_file = Path(input_file).with_suffix(".csv") + df.to_csv(output_file, index=False) + print(f"\n [*] Successfully converted to {output_file}\n") if __name__ == '__main__':