{ "@context": { "@version": 1.1, "pan": "https://pan.dev/schema/", "schema": "https://schema.org/", "dcterms": "http://purl.org/dc/terms/", "xsd": "http://www.w3.org/2001/XMLSchema#", "Alert": "pan:Alert", "Asset": "pan:Asset", "AuditLog": "pan:AuditLog", "Endpoint": "pan:Endpoint", "Filter": "pan:Filter", "Incident": "pan:Incident", "SortOrder": "pan:SortOrder", "action": { "@id": "pan:action", "@type": "xsd:string" }, "actorEmail": { "@id": "pan:actor_email", "@type": "xsd:string" }, "actorPrimaryUsername": { "@id": "pan:actor_primary_username", "@type": "xsd:string" }, "actorType": { "@id": "pan:actor_type", "@type": "xsd:string" }, "alertCount": { "@id": "pan:alert_count", "@type": "xsd:integer" }, "alertId": { "@id": "pan:alert_id", "@type": "xsd:string" }, "alertType": { "@id": "pan:alert_type", "@type": "xsd:string" }, "assetId": { "@id": "pan:asset_id", "@type": "xsd:string" }, "assetName": { "@id": "pan:asset_name", "@type": "xsd:string" }, "assetType": { "@id": "pan:asset_type", "@type": "xsd:string" }, "assignedUserMail": { "@id": "pan:assigned_user_mail", "@type": "xsd:string" }, "assignedUserPrettyName": { "@id": "pan:assigned_user_pretty_name", "@type": "xsd:string" }, "category": { "@id": "pan:category", "@type": "xsd:string" }, "contentVersion": { "@id": "pan:content_version", "@type": "xsd:string" }, "creationTime": { "@id": "schema:dateCreated", "@type": "xsd:integer" }, "description": { "@id": "schema:description", "@type": "xsd:string" }, "detectionTime": { "@id": "pan:detection_time", "@type": "xsd:integer" }, "detectionTimestamp": { "@id": "pan:detection_timestamp", "@type": "xsd:integer" }, "domain": { "@id": "pan:domain", "@type": "xsd:string" }, "endpointId": { "@id": "pan:endpoint_id", "@type": "xsd:string" }, "endpointName": { "@id": "pan:endpoint_name", "@type": "xsd:string" }, "endpointStatus": { "@id": "pan:endpoint_status", "@type": "xsd:string" }, "endpointType": { "@id": "pan:endpoint_type", "@type": "xsd:string" }, "endpointVersion": { "@id": "pan:endpoint_version", "@type": "xsd:string" }, "field": { "@id": "pan:field", "@type": "xsd:string" }, "firstSeen": { "@id": "pan:first_seen", "@type": "xsd:integer" }, "hostName": { "@id": "pan:host_name", "@type": "xsd:string" }, "incidentId": { "@id": "pan:incident_id", "@type": "xsd:string" }, "incidentName": { "@id": "pan:incident_name", "@type": "xsd:string" }, "ip": { "@id": "pan:ip", "@type": "xsd:string" }, "ipAddresses": { "@id": "pan:ip_addresses", "@container": "@set", "@type": "xsd:string" }, "isIsolated": { "@id": "pan:is_isolated", "@type": "xsd:string" }, "keyword": { "@id": "pan:keyword", "@type": "xsd:string" }, "lastSeen": { "@id": "pan:last_seen", "@type": "xsd:integer" }, "mitreTacticsIdsAndNames": { "@id": "pan:mitre_tactics_ids_and_names", "@container": "@set", "@type": "xsd:string" }, "mitreTechniquesIdsAndNames": { "@id": "pan:mitre_techniques_ids_and_names", "@container": "@set", "@type": "xsd:string" }, "modificationTime": { "@id": "schema:dateModified", "@type": "xsd:integer" }, "name": { "@id": "schema:name", "@type": "xsd:string" }, "operatingSystem": { "@id": "pan:operating_system", "@type": "xsd:string" }, "operator": { "@id": "pan:operator", "@type": "xsd:string" }, "osType": { "@id": "pan:os_type", "@type": "xsd:string" }, "reason": { "@id": "pan:reason", "@type": "xsd:string" }, "resolutionStatus": { "@id": "pan:resolution_status", "@type": "xsd:string" }, "result": { "@id": "pan:result", "@type": "xsd:string" }, "riskScore": { "@id": "pan:risk_score", "@type": "xsd:decimal" }, "scanStatus": { "@id": "pan:scan_status", "@type": "xsd:string" }, "severity": { "@id": "pan:severity", "@type": "xsd:string" }, "source": { "@id": "pan:source", "@type": "xsd:string" }, "sources": { "@id": "pan:sources", "@container": "@set", "@type": "xsd:string" }, "starred": { "@id": "pan:starred", "@type": "xsd:boolean" }, "status": { "@id": "pan:status", "@type": "xsd:string" }, "subType": { "@id": "pan:sub_type", "@type": "xsd:string" }, "tags": { "@id": "pan:tags", "@container": "@set", "@type": "xsd:string" }, "timestamp": { "@id": "pan:timestamp", "@type": "xsd:integer" }, "userName": { "@id": "pan:user_name", "@type": "xsd:string" }, "users": { "@id": "pan:users", "@container": "@set", "@type": "xsd:string" }, "value": "pan:value", "xdrUrl": { "@id": "pan:xdr_url", "@type": "xsd:string" } } }