indicator_terms.default

{"yara": {"Yara/FileSize": {"last_modified": "2013-07-22T20:08:42Z", "context_doc": "Yara", "content_type": "string"}, "Yara/TextString": {"last_modified": "2013-07-22T20:08:42Z", "context_doc": "Yara", "content_type": "string"}, "Yara/RuleName": {"last_modified": "2013-07-22T20:08:42Z", "context_doc": "Yara", "content_type": "string"}, "Yara/RegexString": {"last_modified": "2013-07-22T20:08:42Z", "context_doc": "Yara", "content_type": "string"}, "Yara/HexString": {"last_modified": "2013-07-22T20:08:42Z", "context_doc": "Yara", "content_type": "string"}}, "mir": {"DriverItem/PEInfo/Exports/NumberOfNames": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "EventLogItem/writeTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "date"}, "CookieHistoryItem/IsSecure": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "bool"}, "PortItem/CreationTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "date"}, "ServiceItem/pathsha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "sha1"}, "SystemInfoItem/timezoneStandard": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedDeviceObject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FileItem/PEInfo/BaseAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "VolumeItem/BytesPerSector": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Entropy/CurveData/float": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "float"}, "SystemInfoItem/networkArray/networkInfo/dhcpLeaseObtained": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "date"}, "DriverItem/DriverObjectAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerValueQueries": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "VolumeItem/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Sha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "sha1"}, "ServiceItem/path": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "UrlHistoryItem/PageTitle": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooked/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "bool"}, "FileItem/FileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "CookieHistoryItem/Profile": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "RouteEntryItem/IsIPv6": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "bool"}, "ArpEntryItem/IPv4Address": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ArpEntryItem", "content_type": "IP"}, "ProcessItem/PortList/PortItem/remoteIP": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "IP"}, "FileItem/PEInfo/Sections/ActualNumberOfSections": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "DnsEntryItem/RecordData/IPv4Address": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "IP"}, "FileItem/Created": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "FormHistoryItem/FormFieldValue": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "EventLogItem/CorrelationActivityId": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "FileDownloadHistoryItem/CacheHitCount": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "int"}, "SystemRestoreItem/ChangeLogEntryType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "DiskItem/DiskSize": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DiskItem", "content_type": "int"}, "PortItem/path": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/OriginalFilename": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "Email/X-filetypes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "EventLogItem/category": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "CookieHistoryItem/LastAccessedDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "date"}, "TaskItem/AccountName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemInfoItem/OS": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "RouteEntryItem/RouteAge": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailCC": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/Sections/Section/Entropy/CurveData/float": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "float"}, "EventLogItem/EID": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "int"}, "ProcessItem/HandleList/Handle/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/PETimeStamp": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "EventLogItem/unformattedMessage/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "DnsEntryItem/DataLength": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "int"}, "ArpEntryItem/Interface": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ArpEntryItem", "content_type": "IP"}, "DriverItem/DeviceItem/AttachedDriverObject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "HookItem/DigitalSignatureHooking/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "bool"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileDescription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfNames": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "Snort/Snort": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Snort", "content_type": "string"}, "Email/Subject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "FormHistoryItem/PasswordFieldName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Mapped": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "Email/X-filenames": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/dhcpServerArray/dhcpServer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "IP"}, "TaskItem/ActionList/Action/EmailSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/StringList/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "UserItem/SecurityType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "RegistryItem/NumValues": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "int"}, "FileItem/Changed": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "SystemInfoItem/patchLevel": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "EventLogItem/blob": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailFrom": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "CookieHistoryItem/BrowserName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "FileDownloadHistoryItem/MaxBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "int"}, "Network/HTTP_Referr": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Network", "content_type": "string"}, "TaskItem/SignatureDescription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FormHistoryItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Opcodes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FormHistoryItem/BrowserName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/DetectedAnomalies/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "SystemInfoItem/domain": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDriverObject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FileItem/FileExtension": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/Sections/NumberOfSections": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "SystemRestoreItem/RestorePointDescription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "ServiceItem/serviceDLLsha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "sha256"}, "DriverItem/ImageBase": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "DriverItem/DeviceItem/DriverName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "RegistryItem/detectedAnomaly": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "SystemInfoItem/availphysical": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "int"}, "TaskItem/Flag": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FileDownloadHistoryItem/SourceURL": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "DriverItem/StringList/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/FilePath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ServiceItem/pathSignatureDescription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/PEInfo/DigitalSignature/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "bool"}, "SystemInfoItem/networkArray/networkInfo/ipGatewayArray/ipGateway": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "IP"}, "VolumeItem/SerialNumber": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "FileItem/SecurityID": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileDownloadHistoryItem/Profile": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "FileItem/PEInfo/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/Drive": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/Exports/ExportedFunctions/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "CookieHistoryItem/CookiePath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDriverName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "PortItem/remotePort": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "int"}, "UrlHistoryItem/VisitCount": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "int"}, "ProcessItem/detectedAnomaly": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "UrlHistoryItem/FirstVisitDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "date"}, "Email/CC": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PeakEntropy": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "float"}, "FileDownloadHistoryItem/LastCacheSynchDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "date"}, "FileItem/PEInfo/Exports/NumberOfFunctions": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "CookieHistoryItem/ExpirationDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "date"}, "FileItem/PEInfo/Sections/Section/Entropy/CurveData/float": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "float"}, "HookItem/DigitalSignatureHooked/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DiskItem", "content_type": "string"}, "FileItem/PEInfo/PEChecksum/PEFileRaw": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "SystemRestoreItem/RestorePointFullPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "SystemRestoreItem/RegistryHives/String": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "RegistryItem/NumSubKeys": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "int"}, "PrefetchItem/VolumeList/VolumeItem/SerialNumber": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "string"}, "DriverItem/PEInfo/DetectedEntryPointSignature/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/StreamList/Stream/SizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "FileDownloadHistoryItem/LastModifiedDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "date"}, "FileItem/FullPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "SystemInfoItem/totalphysical": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "int"}, "SystemInfoItem/biosInfo/biosVersion": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "SystemInfoItem/biosInfo/biosDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "FileItem/detectedAnomaly": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/Modified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "ProcessItem/HandleList/Handle/HandleCount": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "ServiceItem/serviceDLLsha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "sha1"}, "DriverItem/PEInfo/DigitalSignature/Description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "DriverItem/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "bool"}, "TaskItem/ActionList/Action/DigitalSignature/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "bool"}, "ProcessItem/SectionList/MemorySection/PEInfo/BaseAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "PortItem/state": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "string"}, "CookieHistoryItem/CookieName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "SystemRestoreItem/OriginalFileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "VolumeItem/FileSystemFlags": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "VolumeItem/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "FileItem/PEInfo/DigitalSignature/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ArpEntryItem/PhysicalAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ArpEntryItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/SpecialBuild": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDeviceObject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/UsernameFieldValue": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "SystemRestoreItem/OriginalShortFileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "ServiceItem/pid": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "int"}, "SystemRestoreItem/Created": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "date"}, "DnsEntryItem/RecordName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "SystemInfoItem/machine": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "EventLogItem/message": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "UrlHistoryItem/VisitType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileAPI": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "CookieHistoryItem/CookieFlags": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/path": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionNumber": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DiskItem", "content_type": "int"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileVersion": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "DriverItem/Sha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "sha1"}, "VolumeItem/IsMounted": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "bool"}, "Email/Body": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "EventLogItem/source": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "TaskItem/ActionList/Action/COMClassId": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/PEInfo/PEChecksum/PEFileAPI": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "FileItem/PEInfo/Sections/Section/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/ApplicationName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemInfoItem/timezoneDST": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/remotePort": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "ServiceItem/serviceDLLCertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "UserItem/disabled": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "bool"}, "TaskItem/ActionList/Action/EmailBCC": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "Email/AttachmentCount": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "int"}, "Email/Date": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "date"}, "FormHistoryItem/Profile": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/DetectedAnomalies/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "UrlHistoryItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/NumberOfFunctions": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/Protection": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalTrademarks": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/DetectedSignatureKeys/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SecurityID": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "Email/Thread-Topic": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "Email/X-MS-Has-Attach": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Injected": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "bool"}, "TaskItem/ActionList/Action/ExecArguments": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FormHistoryItem/CreationDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "date"}, "FileItem/PEInfo/DigitalSignature/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "CookieHistoryItem/FileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "Email/In-Reply-To": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "ServiceItem/pathmd5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "md5"}, "ServiceItem/serviceDLLmd5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "md5"}, "EventLogItem/ExecutionProcessId": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "int"}, "Email/To": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "UrlHistoryItem/BrowserVersion": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/Subsystem": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ModuleItem/ModuleSize": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ModuleItem", "content_type": "int"}, "TaskItem/CreationDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "date"}, "TaskItem/NextRunTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "date"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Size": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "CookieHistoryItem/CreationDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "date"}, "FileItem/FilenameAccessed": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "ServiceItem/pathCertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "TaskItem/Comment": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/DetectedEntryPointSignature/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/INode": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "TaskItem/WorkItemData": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "RegistryItem/ValueName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/pid": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "Email/X-filesizes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "int"}, "UserItem/LastLogin": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "date"}, "ProcessItem/SectionList/MemorySection/RegionSize": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "ModuleItem/ModulePath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ModuleItem", "content_type": "string"}, "FormHistoryItem/HttpRealm": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportsTimeStamp": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "date"}, "EventLogItem/machine": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "SystemInfoItem/procType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "PortItem/remoteIP": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "IP"}, "FormHistoryItem/LastUsedDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "date"}, "Network/UserAgent": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Network", "content_type": "string"}, "SystemRestoreItem/BackupFileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "RouteEntryItem/Protocol": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "ModuleItem/ModuleName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ModuleItem", "content_type": "string"}, "TaskItem/ActionList/Action/ShowMessageTitle": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "HookItem/HookedModule": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/Index": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "PrefetchItem/ReportedSizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "int"}, "RouteEntryItem/Interface": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "FileItem/PEInfo/Subsystem": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailReplyTo": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "UrlHistoryItem/LastVisitDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "date"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "bool"}, "VolumeItem/ActualAvailableAllocationUnits": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "int"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/PrivateBuild": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "PortItem/localIP": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "IP"}, "TaskItem/ActionList/Action/ExecProgramSha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "sha1"}, "Email/Thread-Index": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PEInfo/DigitalSignature/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "bool"}, "DriverItem/DriverName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerFrequency": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FileDownloadHistoryItem/MimeType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "ServiceItem/descriptiveName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "bool"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportedFunctions/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/AccountLogonType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FormHistoryItem/FirstUsedDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "date"}, "SystemRestoreItem/AclChangeSecurityID": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "DriverItem/PEInfo/BaseAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/EncryptedPassword": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedDriverName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "VolumeItem/DevicePath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionLength": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DiskItem", "content_type": "int"}, "Email/Attachment/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "PrefetchItem/AccessedFileList/AccessedFile": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "string"}, "SystemRestoreItem/RestorePointType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FileItem/StreamList/Stream/Md5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "md5"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "bool"}, "SystemInfoItem/networkArray/networkInfo/description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "DnsEntryItem/Flags": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "DriverItem/SignatureDescription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "UserItem/passwordrequired": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "bool"}, "Email/Attachment/Content": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Depth": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/StreamList/Stream/Sha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "sha1"}, "DnsEntryItem/RecordType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "UserItem/scriptpath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "FileItem/PEInfo/DigitalSignature/Description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/DetectedAnomalies/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "DriverItem/Sha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "sha256"}, "DriverItem/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/ExportsTimeStamp": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "date"}, "PrefetchItem/VolumeList/VolumeItem/DevicePath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "string"}, "FileDownloadHistoryItem/AutoResume": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "TaskItem/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ModuleItem/ModuleInit": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ModuleItem", "content_type": "int"}, "TaskItem/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "bool"}, "DriverItem/PEInfo/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "ServiceItem/serviceDLL": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "EventLogItem/user": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "UrlHistoryItem/Profile": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "TaskItem/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "HookItem/HookDescription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "FileItem/StreamList/Stream/Sha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "sha256"}, "EventLogItem/log": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "Email/ReceivedFromIP": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "IP"}, "ServiceItem/serviceDLLSignatureDescription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "FileItem/Md5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "md5"}, "TaskItem/ActionList/Action/ExecProgramMd5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "md5"}, "FileItem/Sha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "sha256"}, "ServiceItem/startedAs": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "SystemInfoItem/installDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "date"}, "ProcessItem/SecurityType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "Network/URI": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Network", "content_type": "string"}, "ServiceItem/pathCertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "SystemInfoItem/regOwner": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "FileDownloadHistoryItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "SystemInfoItem/user": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/Status": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ModuleItem/ModuleAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ModuleItem", "content_type": "int"}, "FileDownloadHistoryItem/TemporaryPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "FileItem/SecurityType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "UserItem/SecurityID": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "EventLogItem/type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "FileItem/PEInfo/Exports/ExportsTimeStamp": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "UrlHistoryItem/Hidden": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "VolumeItem/CreationTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "date"}, "FormHistoryItem/HostName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "SystemInfoItem/productName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/RegionStart": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "CookieHistoryItem/BrowserVersion": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "TaskItem/MaxRunTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "EventLogItem/ExecutionThreadId": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "int"}, "CookieHistoryItem/HostName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedSignatureKeys/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "RouteEntryItem/RouteType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "FileDownloadHistoryItem/BytesDownloaded": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileDownloadHistoryItem/FileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/EpJumpCodes/Depth": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/FormFieldName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooking/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "ServiceItem/arguments": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "ProcessItem/pid": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/Description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/DetectedCharacteristics": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "DnsEntryItem/Host": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "CookieHistoryItem/LastModifiedDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "date"}, "ServiceItem/description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "ArpEntryItem/CacheType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ArpEntryItem", "content_type": "string"}, "DriverItem/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "UserItem/homedirectory": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/ExportedFunctions/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "RouteEntryItem/Gateway": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "IP"}, "EventLogItem/reserved": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "SystemInfoItem/hostname": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "SystemInfoItem/directory": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/MAC": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailTo": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/Sections/Section/DetectedSignatureKeys/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "FileDownloadHistoryItem/BrowserVersion": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "bool"}, "FileDownloadHistoryItem/StartDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "date"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedCharacteristics": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "PrefetchItem/Created": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "date"}, "EventLogItem/categoryNum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "DriverItem/Md5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "md5"}, "DriverItem/PEInfo/Sections/Section/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "SystemRestoreItem/FileAttributes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Language": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileDownloadHistoryItem/LastCheckedDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "date"}, "ServiceItem/pathSignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "bool"}, "DriverItem/PEInfo/PEChecksum/PEFileRaw": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/subnetMask": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "IP"}, "UserItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerBegin": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "date"}, "Email/References": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/Language": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerSessionChangeType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerUsername": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/DllName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "RegistryItem/Hive": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Subsystem": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "PrefetchItem/TimesExecuted": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "int"}, "TaskItem/VirtualPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/parentpid": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "DriverItem/PEInfo/Sections/Section/SizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "TaskItem/ActionList/Action/ExecProgramPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/RawFlags": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "DriverItem/PEInfo/ImportedModules/Module/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "Email/Received": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "TaskItem/WorkingDirectory": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "CookieHistoryItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "FormHistoryItem/FormSubmitURL": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "FileItem/PEInfo/DetectedEntryPointSignature/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "PrefetchItem/SizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileRaw": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "FormHistoryItem/UsernameFieldName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "FileItem/PEInfo/Exports/NumberOfNames": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "UserItem/lockedout": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "bool"}, "RouteEntryItem/Metric": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "int"}, "HookItem/HookedFunction": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/SizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "DriverItem/PEInfo/DigitalSignature/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "bool"}, "DnsEntryItem/RecordData/Host": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/InternalName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/dhcpLeaseExpires": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "date"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/SizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "UrlHistoryItem/URL": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "ServiceItem/pathSignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "bool"}, "TaskItem/ActionList/Action/ExecProgramSha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "sha256"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductVersion": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "Email/From": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "UrlHistoryItem/IndexedContent": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/ExtraneousBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/FilenameChanged": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "DriverItem/PEInfo/Sections/Section/DetectedCharacteristics": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "UrlHistoryItem/BrowserName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "TaskItem/ActionList/Action/ActionType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "HookItem/HookingAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "Email/MIME-Version": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "UserItem/userpasswordage": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "PortItem/localPort": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "int"}, "Email/Return-Path": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "PrefetchItem/ApplicationFileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "string"}, "Network/String": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Network", "content_type": "string"}, "UserItem/grouplist/groupname": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDeviceName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/protocol": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemInfoItem/regOrg": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "FileDownloadHistoryItem/TargetDirectory": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "TaskItem/ExitCode": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "Network/DNS": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Network", "content_type": "string"}, "PrefetchItem/PrefetchHash": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "string"}, "FileItem/PEInfo/ExtraneousBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ServiceItem/serviceDLLSignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "bool"}, "TaskItem/AccountRunLevel": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailBody": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ServiceItem/mode": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "HookItem/DigitalSignatureHooking/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "bool"}, "DriverItem/DriverStartIo": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "DriverItem/PEInfo/DigitalSignature/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "UserItem/description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "RegistryItem/Value": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/arguments": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/Exports/DllName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/Creator": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/PEInfo/ImportedModules/Module/NumberOfFunctions": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "bool"}, "Email/ReceivedFromHost": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "ProcessItem/userTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemRestoreItem/AclChangeUsername": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/DllName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/startTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "date"}, "UrlHistoryItem/LastVisitDateLocal": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "date"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfFunctions": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "FileDownloadHistoryItem/Referrer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "DriverItem/DriverInit": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/EncryptionType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "RouteEntryItem/Netmask": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "IP"}, "ProcessItem/PortList/PortItem/localIP": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "IP"}, "SystemRestoreItem/ChangeLogEntryFlags": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/state": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/Accessed": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "TaskItem/ActionList/Action/EmailServer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "CookieHistoryItem/FilePath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "EventLogItem/index": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "int"}, "RegistryItem/Modified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "date"}, "ProcessItem/path": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "PortItem/protocol": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "string"}, "TaskItem/Parameters": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FileDownloadHistoryItem/DownloadType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooked/Description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionOffset": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DiskItem", "content_type": "int"}, "DriverItem/ImageSize": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FileDownloadHistoryItem/LastAccessedDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "date"}, "RegistryItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/DetectedEntryPointSignature/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/PEChecksum/PEComputedAPI": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "DriverItem/PEInfo/PEChecksum/PEFileAPI": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "TaskItem/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "EventLogItem/genTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "date"}, "ProcessItem/SectionList/MemorySection/Md5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "md5"}, "SystemRestoreItem/ChangeLogFileName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FormHistoryItem/FormType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/ipAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "IP"}, "ProcessItem/HandleList/Handle/PointerCount": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileDownloadHistoryItem/EndDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "date"}, "RouteEntryItem/Destination": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RouteEntryItem", "content_type": "IP"}, "TaskItem/ActionList/Action/EmailAttachments": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "PrefetchItem/ApplicationFullPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "string"}, "FileItem/FilenameCreated": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "UrlHistoryItem/VisitFrom": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooking/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "TaskItem/md5sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "md5"}, "UserItem/fullname": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UserItem", "content_type": "string"}, "FileItem/FileAttributes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ServiceItem/serviceDLLSignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "bool"}, "VolumeItem/VolumeName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "RegistryItem/KeyPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "FileDownloadHistoryItem/CacheFlags": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerMaxRunTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/CompanyName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "PrefetchItem/VolumeList/VolumeItem/CreationTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "date"}, "ModuleItem/ModuleBase": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ModuleItem", "content_type": "int"}, "ProcessItem/hidden": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerDelay": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "Email/BCC": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PEInfo/ImportedModules/Module/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "RegistryItem/Path": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "DriverItem/DeviceItem/DeviceObject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "SystemInfoItem/date": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "date"}, "DnsEntryItem/TimeToLive": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "EventLogItem/CorrelationRelatedActivityId": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "EventLogItem", "content_type": "string"}, "DriverItem/DriverUnload": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "FileItem/PeakCodeEntropy": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "float"}, "UrlHistoryItem/Thumbnail": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "ServiceItem/serviceDLLCertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "ServiceItem/name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "FileDownloadHistoryItem/BrowserName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "VolumeItem/FileSystemName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "FileItem/StringList/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "VolumeItem/DriveLetter": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/Description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/StreamList/Stream/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/Description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerSubscription": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemInfoItem/uptime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "UrlHistoryItem/HostName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/PEChecksum/PEComputedAPI": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "int"}, "HookItem/HookingModule": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "SystemInfoItem/productID": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "UrlHistoryItem/FirstBookmarkDate": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "FileDownloadHistoryItem/FullHttpHeader": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "CookieHistoryItem/CookieValue": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerEnd": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/process": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Sha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "sha256"}, "RegistryItem/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedDeviceName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "SystemInfoItem/MAC": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/ActionList/Action/ExecWorkingDirectory": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "UrlHistoryItem/Typed": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DiskItem/DiskName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DiskItem", "content_type": "string"}, "FileDownloadHistoryItem/State": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "SystemInfoItem/processor": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/ExtraneousBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/PETimeStamp": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "date"}, "TaskItem/MostRecentRunTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "date"}, "TaskItem/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "RegistryItem/ReportedLengthInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/localPort": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "Email/Attachment/MIMEType": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "ServiceItem/pathsha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "sha256"}, "FileItem/PEInfo/EpJumpCodes/Opcodes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "VolumeItem/SectorsPerAllocationUnit": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEComputedAPI": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "int"}, "FormHistoryItem/Guid": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "FormHistoryItem/TimesUsed": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "int"}, "RegistryItem/Text": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/CreationTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "date"}, "DriverItem/SignatureExists": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "bool"}, "HookItem/DigitalSignatureHooking/Description": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "DriverItem/PEInfo/EpJumpCodes/Opcodes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "Email/Attachment/SizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "int"}, "DriverItem/DeviceItem/DeviceName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "TaskItem/ActionList/Action/COMData": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemRestoreItem/RestorePointName": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Data": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/Username": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemRestoreItem/ChangeLogEntrySequenceNumber": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemRestoreItem", "content_type": "int"}, "FileItem/Sha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "sha1"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/Comments": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/Priority": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/DigitalSignature/CertificateSubject": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/kernelTime": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "HiveItem/Path": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HiveItem", "content_type": "string"}, "HookItem/DigitalSignatureHooked/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "bool"}, "FileItem/PEInfo/EpJumpCodes/Depth": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "TaskItem/sha256sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "sha256"}, "HiveItem/Name": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HiveItem", "content_type": "string"}, "TaskItem/sha1sum": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "sha1"}, "PrefetchItem/FullPath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "string"}, "TaskItem/ActionList/Action/ShowMessageBody": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/ObjectAddress": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "DriverItem/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "FormHistoryItem/BrowserVersion": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/AccessMask": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ProcessItem", "content_type": "string"}, "ServiceItem/status": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalCopyright": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "PrefetchItem/LastRun": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PrefetchItem", "content_type": "date"}, "CookieHistoryItem/IsHttpOnly": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "FileItem/FilenameModified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "date"}, "SystemInfoItem/buildNumber": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ServiceItem/type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/PEInfo/PETimeStamp": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "date"}, "Email/Content-Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "Email", "content_type": "string"}, "HookItem/DigitalSignatureHooked/CertificateIssuer": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "HookItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/adapter": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "VolumeItem/TotalAllocationUnits": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "VolumeItem", "content_type": "string"}, "DriverItem/PEInfo/Sections/Section/Type": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "DriverItem", "content_type": "string"}, "PortItem/process": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "string"}, "FileItem/DevicePath": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/SizeInBytes": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "int"}, "FileItem/PEInfo/DigitalSignature/SignatureVerified": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "FileItem", "content_type": "bool"}, "PortItem/pid": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "PortItem", "content_type": "int"}, "TaskItem/TriggerList/Trigger/TriggerEnabled": {"last_modified": "2013-05-14T16:15:00Z", "context_doc": "TaskItem", "content_type": "bool"}}, "splunk": {"Storage/storage_used_percent": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Network/thruput_max": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "int"}, "Web/duration": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "int"}, "JVM/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "string"}, "Datamodel_Acceleration/mod_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "timestamp"}, "Datamodel_Acceleration/datamodel": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "Threading/cpu_time_enabled": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "boolean"}, "IDS_Attacks/signature": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Changes/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "All_Traffic/dest_translated_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "OS/max_file_descriptors": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "Datamodel_Acceleration/app": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "Session_Info/table_scans": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "Email/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Storage/parent": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "string"}, "User/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "string"}, "Authentication/dest_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "All_Traffic/action": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Email/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Alerts/id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "All_Ticket_Management/severity": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "All_Inventory/hypervisor_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Instance_Stats/sga_shared_pool": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Network/node": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "All_Ticket_Management/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "Datamodel_Acceleration/is_inprogress": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "boolean"}, "All_Changes/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Vulnerabilities/category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "Services/service": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Services", "content_type": "string"}, "All_Application_State/process": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "Email/vendor_product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Lock_Info/obj_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Lock_Info", "content_type": "String"}, "Email/recipient_status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "MVstring"}, "IDS_Attacks/src_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Interprocess_Messaging/rpc_protocol": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Changes/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "All_Inventory/dest_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "OS/free_swap": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "All_Interprocess_Messaging/payload_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Traffic/tcp_flag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Network/lb_method": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "All_Changes/status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "OS/physical_memory": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "Vulnerabilities/severity": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "OS/os_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "string"}, "Memory/mem_free": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Web/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Malware_Operations/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "string"}, "Facilities/fan_speed": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Facilities", "content_type": "int"}, "Instance_Stats/avg_executions": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Query_Stats/indexes_hit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Query_Stats", "content_type": "String"}, "Malware_Operations/product_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "string"}, "OS/system_load": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "Memory/non_heap_committed": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Lock_Info/lock_mode": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Lock_Info", "content_type": "String"}, "Updates/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "Memory/heap_max": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "All_Changes/object": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Classloading/total_unloaded": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Classloading", "content_type": "int"}, "Web/url": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Processes/cpu_load_percent": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Processes", "content_type": "number"}, "All_Sessions/dest_nt_host": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Storage/write_ops": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "All_Sessions/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Session_Info/wait_state": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "String"}, "Malware_Attacks/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Ticket_Management/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "Malware_Attacks/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "Authentication/src_user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Session_Info/session_status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "String"}, "Alerts/severity_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "OS/os": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "string"}, "All_Application_State/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "Datamodel_Acceleration/retention": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "int"}, "All_Changes/object_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Email/orig_src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Datamodel_Acceleration/access_count": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "int"}, "Web/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "All_Interprocess_Messaging/message": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "User/user_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "number"}, "All_Databases/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Databases", "content_type": "string"}, "Malware_Attacks/product_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Application_State/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "Datamodel_Acceleration/last_error": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "Web/http_user_agent": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "All_Interprocess_Messaging/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Updates/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "Filesystem_Changes/file_path": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "string"}, "Runtime/uptime": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Runtime", "content_type": "int"}, "Memory/swap_free": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "OS/free_physical_memory": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "All_Changes/dvc": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "All_Application_State/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "All_Interprocess_Messaging/message_expiration_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "DHCP/lease_duration": {"last_modified": "2014-09-26T21:45:01", "context_doc": "DHCP", "content_type": "int"}, "Update_Errors/event_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Update_Errors", "content_type": "string"}, "Snapshot/snapshot": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Snapshot", "content_type": "string"}, "All_Interprocess_Messaging/endpoint": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Email/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Authentication/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "All_Changes/change_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Registry_Changes/object_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Registry_Changes", "content_type": "string"}, "All_Interprocess_Messaging/response_received_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Ticket_Management/affect_dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "All_Traffic/src_interface": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "All_Interprocess_Messaging/endpoint_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Traffic/packets": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "All_Interprocess_Messaging/message_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Storage/blocksize": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Email/file_hash": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Services/service_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Services", "content_type": "int"}, "Threading/thread_count": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "int"}, "Threading/threads_started": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "int"}, "All_Application_State/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "Web/http_user_agent_length": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "int"}, "All_Application_State/dest_should_update": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "boolean"}, "Search_Activity/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Search_Activity", "content_type": "string"}, "Web/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Email/process_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "int"}, "All_Traffic/src_tos": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Email/message_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Interprocess_Messaging/status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "boolean"}, "Malware_Attacks/file_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "Network/name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "All_Traffic/packets_in": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "All_Traffic/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Email/size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "int"}, "All_Sessions/src_nt_host": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Alerts/severity": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "All_Traffic/src_translated_ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Vulnerabilities/bugtraq": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "All_Ticket_Management/priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "Query_Stats/tables_hit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Query_Stats", "content_type": "String"}, "Classloading/current_loaded": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Classloading", "content_type": "int"}, "All_Traffic/packets_out": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "All_Ticket_Management/time_submitted": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "All_Changes/action": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Web/status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "int"}, "Alerts/body": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "Vulnerabilities/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "IDS_Attacks/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "Storage/cluster": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "string"}, "Network/dest_ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "Database_Instance/instance_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Database_Instance", "content_type": "string"}, "Email/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Storage/fd_max": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Account_Management/src_user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Account_Management", "content_type": "string"}, "Instance_Stats/sga_buffer_cache_size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Lock_Info/lock_session_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Lock_Info", "content_type": "String"}, "IDS_Attacks/severity": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Interprocess_Messaging/payload": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Ticket_Management/description": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "All_Sessions/src_mac": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Authentication/user_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Memory/heap_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "JVM/jvm_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "string"}, "Authentication/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Malware_Attacks/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "IDS_Attacks/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Interprocess_Messaging/request_sent_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Databases/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Databases", "content_type": "string"}, "All_Sessions/src_ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "All_Traffic/dest_mac": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Email/recipient_count": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Storage/storage_free": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Web/bytes": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "int"}, "Database_Instance/instance_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Database_Instance", "content_type": "string"}, "Threading/current_cpu_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "int"}, "Instance_Stats/sga_buffer_hit_limit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Email/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Email/retries": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "int"}, "All_Traffic/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Network/ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "Instance_Stats/tablespace_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "String"}, "Ports/transport_dest_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Ports", "content_type": "MVstring"}, "Malware_Attacks/signature": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "IDS_Attacks/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "Authentication/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Alerts/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "Memory/mem_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Malware_Attacks/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Performance/dest_should_timesync": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "boolean"}, "Lock_Info/logon_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Lock_Info", "content_type": "Number"}, "Storage/read_latency": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Authentication/src_user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Session_Info/elapsed_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "Malware_Operations/dest_nt_domain": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "string"}, "All_Traffic/wifi_tech": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "MVstring"}, "Malware_Attacks/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Traffic/bytes_out": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Authentication/dest_nt_domain": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "All_Traffic/rule": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "All_Traffic/dvc_ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "OS/cpu_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "User/interactive": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "boolean"}, "Vulnerabilities/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "All_Interprocess_Messaging/response_code": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Malware_Operations/dest_requires_av": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "boolean"}, "Classloading/total_loaded": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Classloading", "content_type": "int"}, "Storage/write_blocks": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Datamodel_Acceleration/latest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "timestamp"}, "Alerts/subject": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "Authentication/src_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "All_Interprocess_Messaging/message_received_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Web/category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "OS/swap_space": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "Runtime/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Runtime", "content_type": "string"}, "CPU/cpu_mhz": {"last_modified": "2014-09-26T21:45:01", "context_doc": "CPU", "content_type": "int"}, "Database_Query/query_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Database_Query", "content_type": "String"}, "Instance_Stats/instance_reads": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Web/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Updates/signature_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "int"}, "Email/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "int"}, "Threading/cpu_time_supported": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "boolean"}, "Instance_Stats/instance_writes": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "All_Interprocess_Messaging/message_redelivered": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "boolean"}, "Storage/read_blocks": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Malware_Attacks/file_hash": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Inventory/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Network/dns": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "Vulnerabilities/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "Web/http_content_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "All_Changes/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Email/src_user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Performance/dest_should_update": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "boolean"}, "All_Traffic/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Storage/read_ops": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "All_Inventory/family": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Change/change": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Change", "content_type": "string"}, "Filesystem_Changes/file_hash": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "string"}, "User/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "string"}, "All_Traffic/dvc": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Malware_Operations/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "string"}, "Network/thruput": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "int"}, "Database_Instance/session_limit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Database_Instance", "content_type": "Number"}, "Email/message_info": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Malware_Attacks/category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Traffic/transport": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Storage/storage": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "All_Traffic/tos": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Ports/dest_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Ports", "content_type": "MVstring"}, "All_Traffic/protocol": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Threading/daemon_thread_count": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "int"}, "Threading/sync_supported": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "boolean"}, "All_Traffic/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Authentication/response_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Malware_Attacks/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "Email/orig_recipient": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "MVstring"}, "All_Inventory/status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Alerts/app": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "CPU/cpu_user_percent": {"last_modified": "2014-09-26T21:45:01", "context_doc": "CPU", "content_type": "int"}, "Datamodel_Acceleration/earliest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "timestamp"}, "Updates/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "int"}, "Session_Info/cursor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "Network/mac": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "Email/src_user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Instance_Stats/dump_area_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "String"}, "Filesystem_Changes/file_modify_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "timestamp"}, "Processes/cpu_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Processes", "content_type": "string"}, "Network/node_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "int"}, "All_Inventory/vendor_product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Threading/thread_peak": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "int"}, "Authentication/src_user_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Vulnerabilities/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "Email/subject": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Tablespace/tablespace_writes": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Tablespace", "content_type": "Number"}, "All_Changes/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "All_Sessions/signature": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "View_Activity/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "View_Activity", "content_type": "string"}, "Authentication/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "All_Interprocess_Messaging/return_message": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Changes/src_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Database_Instance/process_limit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Database_Instance", "content_type": "Number"}, "Email/src_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Interprocess_Messaging/duration": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "int"}, "OS/committed_memory": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "Memory/non_heap_init": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Email/orig_dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Email/process": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "int"}, "User/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "string"}, "Vulnerabilities/xref": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "OS/os_architecture": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "string"}, "Account_Management/src_user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Account_Management", "content_type": "string"}, "Snapshot/time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Snapshot", "content_type": "string"}, "Datamodel_Acceleration/bucket_size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "Instance_Stats/sga_redo_log_buffer": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Malware_Attacks/src_nt_domain": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Traffic/vlan_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Updates/status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "Authentication/src_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "IDS_Attacks/ids_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "Storage/latency": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "All_Traffic/src_svc": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "CPU/cpu_count": {"last_modified": "2014-09-26T21:45:01", "context_doc": "CPU", "content_type": "int"}, "Web/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "All_Traffic/direction": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Search_Activity/search_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Search_Activity", "content_type": "string"}, "IDS_Attacks/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "IDS_Attacks/category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Ticket_Management/ticket_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "Instance_Stats/sga_sql_area_size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "JVM/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "string"}, "Web/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "IDS_Attacks/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "JVM/jvm_description": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "string"}, "Web/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Threading/cm_supported": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "boolean"}, "Threading/peak_thread_count": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "int"}, "Search_Activity/info": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Search_Activity", "content_type": "string"}, "Session_Info/memory_sorts": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "All_Changes/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Web/bytes_in": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "int"}, "Email/internal_message_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Traffic/bytes": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Web/site": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "OS/total_processors": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "All_Ticket_Management/status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "Storage/storage_free_percent": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Malware_Attacks/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "Instance_Stats/availability": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "String"}, "Runtime/version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Runtime", "content_type": "string"}, "Malware_Attacks/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "IDS_Attacks/dvc_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Changes/object_attrs": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "MVstring"}, "All_Interprocess_Messaging/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "IDS_Attacks/src_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "IDS_Attacks/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "JVM/jvm_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "string"}, "Filesystem_Changes/file_access_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "timestamp"}, "Threading/current_user_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "int"}, "All_Sessions/src_dns": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "All_Databases/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Databases", "content_type": "string"}, "IDS_Attacks/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Sessions/vendor_product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "All_Traffic/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Session_Info/wait_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "All_Application_State/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "All_Traffic/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "All_Inventory/serial": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Malware_Attacks/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Performance/dest_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "string"}, "All_Sessions/dest_mac": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Filesystem_Changes/file_size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "int"}, "All_Sessions/dest_ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Tablespace/tablespace_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Tablespace", "content_type": "String"}, "Web/src_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "OS/signature": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "string"}, "Snapshot/size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Snapshot", "content_type": "int"}, "CPU/cpu_load_mhz": {"last_modified": "2014-09-26T21:45:01", "context_doc": "CPU", "content_type": "int"}, "All_Changes/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "All_Ticket_Management/src_user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "Datamodel_Acceleration/last_sid": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "View_Activity/app": {"last_modified": "2014-09-26T21:45:01", "context_doc": "View_Activity", "content_type": "string"}, "Authentication/app": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Session_Info/session_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "String"}, "All_Performance/hypervisor_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "string"}, "Authentication/action": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Session_Info/seconds_in_wait": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "All_Performance/resource_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "string"}, "Web/bytes_out": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "int"}, "All_Application_State/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "Authentication/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Malware_Attacks/action": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "DHCP/lease_scope": {"last_modified": "2014-09-26T21:45:01", "context_doc": "DHCP", "content_type": "string"}, "All_Changes/object_path": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Vulnerabilities/cert": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "Web/app": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "All_Traffic/vlan_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Services/status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Services", "content_type": "string"}, "All_Interprocess_Messaging/message_properties": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Web_Service_Errors/event_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web_Service_Errors", "content_type": "string"}, "Session_Info/machine": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "String"}, "All_Application_State/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "string"}, "JVM/jvm_uptime": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "int"}, "All_Databases/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Databases", "content_type": "string"}, "JVM/jvm_vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "string"}, "Query_Stats/query_plan_hit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Query_Stats", "content_type": "String"}, "Updates/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "All_Interprocess_Messaging/request_payload": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Malware_Attacks/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Databases/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Databases", "content_type": "string"}, "All_Interprocess_Messaging/response_payload_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Memory/non_heap_max": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "All_Traffic/app": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Email/xdelay": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Instance_Stats/start_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "String"}, "Instance_Stats/sga_free_memory": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "All_Sessions/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Filesystem_Changes/file_create_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "timestamp"}, "Email/protocol": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Instance_Stats/sga_fixed_area_size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Tablespace/tablespace_status": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Tablespace", "content_type": "String"}, "All_Interprocess_Messaging/message_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Database_Query/query_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Database_Query", "content_type": "String"}, "Threading/omu_supported": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "boolean"}, "Datamodel_Acceleration/access_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "timestamp"}, "Datamodel_Acceleration/buckets": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "Virtual_OS/hypervisor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Virtual_OS", "content_type": "string"}, "All_Inventory/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "All_Traffic/src_translated_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Alerts/type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "All_Interprocess_Messaging/request_payload_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Session_Info/logical_reads": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "Vulnerabilities/msft": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "Network/vip_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "int"}, "Memory/objects_pending": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Vulnerabilities/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "IDS_Attacks/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "Authentication/src_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Vulnerabilities/signature": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "All_Interprocess_Messaging/parameters": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Sessions/action": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Web/http_referrer": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Runtime/process_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Runtime", "content_type": "string"}, "Web/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Email/dest_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Ports/transport": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Ports", "content_type": "MVstring"}, "Web/cookie": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Datamodel_Acceleration/cron": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "System/Uptime": {"last_modified": "2014-09-26T21:45:01", "context_doc": "System", "content_type": "uptime"}, "Memory/heap_init": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Email/xref": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Web/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "IDS_Attacks/dvc_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "Search_Activity/search": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Search_Activity", "content_type": "string"}, "All_Traffic/flow_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Malware_Operations/signature_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "string"}, "All_Interprocess_Messaging/message_delivered_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Changes/command": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Datamodel_Acceleration/summary_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "All_Ticket_Management/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "Storage/mount": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "string"}, "Time/Synchronization": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Time", "content_type": "action"}, "Memory/swap_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Memory/mem": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Lock_Info/os_pid": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Lock_Info", "content_type": "String"}, "All_Interprocess_Messaging/message_type": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Web/action": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Updates/file_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "All_Traffic/dest_translated_ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "All_Inventory/version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Instance_Stats/sga_data_dict_hit_ratio": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Updates/dest_should_update": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "boolean"}, "Malware_Attacks/signature_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "Authentication/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "CPU/cpu_cores": {"last_modified": "2014-09-26T21:45:01", "context_doc": "CPU", "content_type": "int"}, "All_Application_State/dest_should_timesync": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "boolean"}, "Incident/incident": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Incident", "content_type": "string"}, "Session_Info/commits": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "Web/url_length": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "int"}, "All_Traffic/src_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "All_Changes/result_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Session_Info/physical_reads": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "All_Traffic/channel": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Updates/dvc": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "All_Traffic/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "CPU/cpu_load_percent": {"last_modified": "2014-09-26T21:45:01", "context_doc": "CPU", "content_type": "int"}, "All_Traffic/dest_port": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Web/user_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Session_Info/user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "String"}, "IDS_Attacks/product": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "Updates/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "Email/file_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Application_State/process_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "int"}, "Vulnerabilities/mskb": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "Storage/fd_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Malware_Attacks/dest_requires_av": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "boolean"}, "Lock_Info/last_call_minute": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Lock_Info", "content_type": "Number"}, "All_Inventory/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Datamodel_Acceleration/digest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "Instance_Stats/sga_library_cache_size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Session_Info/buffer_cache_hit_ratio": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "Alerts/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Alerts", "content_type": "string"}, "Email/return_addr": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Interprocess_Messaging/message_consumed_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Web/http_method": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Email/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Email/src_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Threading/cm_enabled": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "boolean"}, "Memory/mem_committed": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Authentication/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "OS/open_file_descriptors": {"last_modified": "2014-09-26T21:45:01", "context_doc": "OS", "content_type": "int"}, "Compilation/compilation_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Compilation", "content_type": "int"}, "Web/src_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "All_Sessions/dest_dns": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Sessions", "content_type": "string"}, "Email/user_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Instance_Stats/processes": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Filesystem_Changes/file_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "string"}, "Authentication/src_nt_domain": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "All_Performance/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "string"}, "Query_Stats/stored_procedures_called": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Query_Stats", "content_type": "String"}, "Tablespace/free_bytes": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Tablespace", "content_type": "Number"}, "Updates/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "Vulnerabilities/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "User/user_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "string"}, "Runtime/start_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Runtime", "content_type": "timestamp"}, "Facilities/temperature": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Facilities", "content_type": "int"}, "All_Traffic/ip_version": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Memory/swap": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Instance_Stats/sessions": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "View_Activity/view": {"last_modified": "2014-09-26T21:45:01", "context_doc": "View_Activity", "content_type": "string"}, "All_Interprocess_Messaging/message_reply_dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Facilities/power": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Facilities", "content_type": "int"}, "All_Traffic/ttl": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Threading/started_at": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Threading", "content_type": "timestamp"}, "Storage/write_latency": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Tablespace/tablespace_reads": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Tablespace", "content_type": "Number"}, "Email/recipient": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "MVstring"}, "All_Databases/object": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Databases", "content_type": "string"}, "Network/src_ip": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "Filesystem_Changes/file_acl": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Filesystem_Changes", "content_type": "string"}, "CPU/cpu_time": {"last_modified": "2014-09-26T21:45:01", "context_doc": "CPU", "content_type": "int"}, "All_Performance/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "string"}, "All_Interprocess_Messaging/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Services/start_mode": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Services", "content_type": "string"}, "All_Performance/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "string"}, "Processes/mem_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Processes", "content_type": "number"}, "Processes/cpu_load_mhz": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Processes", "content_type": "number"}, "Storage/storage_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "int"}, "Network/inline_nat": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "string"}, "All_Traffic/dest_interface": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Datamodel_Acceleration/size": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "int"}, "Email/src_user_priority": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Changes/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "All_Interprocess_Messaging/message_correlation_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "All_Inventory/enabled": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "boolean"}, "All_Traffic/src_mac": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Email/src_user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Performance/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Performance", "content_type": "string"}, "Lock_Info/serial_num": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Lock_Info", "content_type": "String"}, "All_Application_State/dest_requires_av": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Application_State", "content_type": "boolean"}, "All_Inventory/dest_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "Email/src_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "All_Traffic/bytes_in": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "int"}, "Web/uri_path": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Memory/heap_committed": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Session_Info/cpu_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Session_Info", "content_type": "Number"}, "Memory/non_heap_used": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Memory", "content_type": "int"}, "Updates/file_hash": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "Email/tag": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "IDS_Attacks/user_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "Authentication/src": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "Authentication/src_user": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Authentication", "content_type": "string"}, "All_Interprocess_Messaging/message_delivery_mode": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Interprocess_Messaging", "content_type": "string"}, "Network/interface": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Network", "content_type": "MVstring"}, "Updates/signature": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Updates", "content_type": "string"}, "Vulnerabilities/cve": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "Vulnerabilities/dvc": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Vulnerabilities", "content_type": "string"}, "All_Traffic/session_id": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "Instance_Stats/number_of_users": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Instance_Stats", "content_type": "Number"}, "Runtime/vendor": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Runtime", "content_type": "string"}, "Malware_Operations/dest_bunit": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "string"}, "IDS_Attacks/dvc": {"last_modified": "2014-09-26T21:45:01", "context_doc": "IDS_Attacks", "content_type": "string"}, "All_Changes/src_category": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}, "Web/uri_query": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Web", "content_type": "string"}, "Malware_Attacks/dest_nt_domain": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "All_Inventory/description": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Inventory", "content_type": "string"}, "All_Traffic/ssid": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Traffic", "content_type": "string"}, "All_Ticket_Management/comments": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Ticket_Management", "content_type": "string"}, "User/password": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "string"}, "JVM/jvm_process_name": {"last_modified": "2014-09-26T21:45:01", "context_doc": "JVM", "content_type": "string"}, "Account_Management/dest_nt_domain": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Account_Management", "content_type": "string"}, "User/shell": {"last_modified": "2014-09-26T21:45:01", "context_doc": "User", "content_type": "string"}, "Email/action": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "string"}, "Malware_Operations/dest": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Operations", "content_type": "string"}, "Datamodel_Acceleration/complete": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Datamodel_Acceleration", "content_type": "string"}, "Malware_Attacks/file_path": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Malware_Attacks", "content_type": "string"}, "Storage/array": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Storage", "content_type": "string"}, "Email/delay": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Email", "content_type": "int"}, "Problem/problem": {"last_modified": "2014-09-26T21:45:01", "context_doc": "Problem", "content_type": "string"}, "All_Changes/result": {"last_modified": "2014-09-26T21:45:01", "context_doc": "All_Changes", "content_type": "string"}}, "volatility": {"ProcessItem/ParentProcessName": {"last_modified": "2014-09-30T08:31:38", "context_doc": "ProcessItem", "content_type": "string"}, "ServiceItem/cmdLine": {"last_modified": "2014-09-30T08:34:17", "context_doc": "ServiceItem", "content_type": "string"}, "RegistryItem/ShimCache/ExecutablePath": {"last_modified": "2014-09-30T08:33:39", "context_doc": "RegistryItem", "content_type": "string"}, "DriverItem/StringList/string": {"last_modified": "2014-09-30T08:30:41", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/localIP": {"last_modified": "2014-09-30T08:31:44", "context_doc": "ProcessItem", "content_type": "string"}, "DriverItem/TimerRoutineIncluded": {"last_modified": "2014-09-30T08:30:45", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/hidden": {"last_modified": "2014-09-30T08:32:36", "context_doc": "ProcessItem", "content_type": "string"}, "HookItem/SSDT/HookedFunctionName": {"last_modified": "2014-09-30T08:30:55", "context_doc": "HookItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/localPort": {"last_modified": "2014-09-30T08:31:51", "context_doc": "ProcessItem", "content_type": "int"}, "RegistryItem/Path": {"last_modified": "2014-09-30T08:33:08", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/path": {"last_modified": "2014-09-30T08:32:59", "context_doc": "ProcessItem", "content_type": "string"}, "DriverItem/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2014-09-30T08:30:38", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/remoteIP": {"last_modified": "2014-09-30T08:31:56", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/arguments": {"last_modified": "2014-09-30T08:32:28", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/StringList/string": {"last_modified": "2014-09-30T08:32:22", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/EnabledPrivilege/Name": {"last_modified": "2014-09-30T08:31:10", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/Hooked/API/FunctionName": {"last_modified": "2014-09-30T08:31:33", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/Type": {"last_modified": "2014-09-30T08:31:22", "context_doc": "ProcessItem", "content_type": "string"}, "ServiceItem/descriptiveName": {"last_modified": "2014-09-30T08:34:23", "context_doc": "ServiceItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/remotePort": {"last_modified": "2014-09-30T08:32:02", "context_doc": "ProcessItem", "content_type": "int"}, "ServiceItem/name": {"last_modified": "2014-09-30T08:34:29", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/IRP/HookingModuleName": {"last_modified": "2014-09-30T08:30:35", "context_doc": "DriverItem", "content_type": "string"}, "DriverItem/DriverName": {"last_modified": "2014-09-30T08:30:32", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2014-09-30T08:32:15", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/Name": {"last_modified": "2014-09-30T08:31:15", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/DllPath": {"last_modified": "2014-09-30T08:31:06", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Injected": {"last_modified": "2014-09-30T08:32:07", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/name": {"last_modified": "2014-09-30T08:32:50", "context_doc": "ProcessItem", "content_type": "string"}, "DriverItem/CallbackRoutine/Type": {"last_modified": "2014-09-30T08:30:29", "context_doc": "DriverItem", "content_type": "string"}}}