EndpointFileDetectionEventModelScanInfo

Provides details about the type of scan which led to the detection.

NameDescriptionTypeAdditional Information
ScanId

The unique identifier of the scan execution.

 string

None.
ScanType

The type code of scan that was carried out. Most common scan types for example are:

  • AL: Anti-Exploit learning scan
  • AM: Anti-Exploit meta scan
  • AR: Anti-Exploit realtime scan
  • AU: Anti-Exploit update scan
  • DS: WSA Deep Scan
  • FS: WSA fast scan
  • MS: WSA manual scan
  • QS: WSA quick scan
  • RT: WSA realtime scan

 string

None.