https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema 1 2026-07-14T07:58:46.606Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases 1 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/ipv4 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/ipv6 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/ip 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/user 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/identity-type 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/file 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/file-hash 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/domain 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/hostname 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/country 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/resource 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/cloud-project 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/cloud-provider 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/aliases/cloud-zone 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts 1 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/deployment-status 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/deployment-provisioning-status 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/deployment-launch-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/event-tag 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/outcome 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/privilege-level 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/user-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/format-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kubernetes-resource-category 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kubernetes-connector-status 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kubernetes-profile-capability-status 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kubernetes-pod-container-type 0.84 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kubernetes-distribution 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kubernetes-settings-auto-upgrade-policy 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/ip-protocol 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/provider 0.84 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/cloud-provider 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/development-cycle-stage 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/os-family 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/agent-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/signature-status 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/secret-validation 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/appsec-impact 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/image-specification-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/host-state-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/registry-value-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/image-visibility 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/http-method 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/http-rsp-code 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/dhcp-message-type 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/dcerpc-operation 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kerberos-msg-type 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kerberos-principal-type 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kerberos-kdc-option 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kerberos-encryption-type 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kerberos-pa-type 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/kerberos-error-code 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/ldap-operation 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/ldap-scope 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/ldap-bind-auth-type 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/logon-type 0.84 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/logon-impersonation-level 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/logon-assigned-right 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/db-operation 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/mitre-tactic 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/mitre-technique 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/threat-category 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/url-category 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/dns-response-code 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/dns-record-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/operation-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/identity-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/scope-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/log-level 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/backup-asset-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/package-installation-type 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/identity-provider 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/identity-secret-status 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/identity-account-access 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/identity-secret-service-scope 0.84 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/identity-access-level 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/license-category 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/asset-group-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/operational-risk 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/model-endpoint-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/model-kind 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/model-family 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/scan-source 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/arch 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/database-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/backlog-status 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/finding-source 0.84 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/partition-id-type 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/alert-status 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/security-control-effectiveness 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/domain-modes 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/trust-direction 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/encryption-type 0.84 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fieldsets 1 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fieldsets/xdm-core 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fieldsets/xdm-cloud 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fieldsets/xdm-endpoint 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fieldsets/xdm-identity 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fieldsets/xdm-network 0.84 2026-07-09T10:20:37.950Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields 1 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/session-context-id 0.84 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/event 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/host 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/agent 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity 0.7 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/idp 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/app-registration 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/app-registration/owners 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/group 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/policy 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/policy/security-properties 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/secret 0.59 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/access-keys 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/access-statistics 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/identity/key-management 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user 0.7 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/idp 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/app-registration 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/app-registration/owners 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/group 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/policy 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/policy/security-properties 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/secret 0.59 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/access-keys 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/access-statistics 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/user/key-management 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/location 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/process 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/process/executable 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/process/executable/permissions 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/process/executable/position 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/process/executable/position/start 0.42 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/process/executable/position/end 0.42 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/application 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/asn 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/cloud 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/cloud/function 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/virtualization 0.7 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/virtualization/data-center 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/virtualization/data-store 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/virtualization/task 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/source/virtualization/vm 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/host 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/location 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/agent 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity 0.7 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/idp 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/app-registration 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/app-registration/owners 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/group 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/policy 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/policy/security-properties 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/secret 0.59 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/access-keys 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/access-statistics 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/identity/key-management 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user 0.7 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/idp 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/app-registration 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/app-registration/owners 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/group 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/policy 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/policy/security-properties 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/secret 0.59 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/access-keys 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/access-statistics 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/user/key-management 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/process 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/process/executable 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/process/executable/permissions 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/process/executable/position 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/process/executable/position/start 0.42 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/process/executable/position/end 0.42 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/application 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/asn 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/cloud 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/intermediate/cloud/function 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/host 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/agent 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity 0.7 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/idp 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/app-registration 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/app-registration/owners 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/group 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/policy 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/policy/security-properties 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/secret 0.59 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/access-keys 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/access-statistics 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/identity/key-management 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user 0.7 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/idp 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/app-registration 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/app-registration/owners 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/group 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/policy 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/policy/security-properties 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/secret 0.59 2026-08-09T08:53:57.106Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/access-keys 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/access-statistics 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/user/key-management 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/location 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/process 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/process/executable 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/process/executable/permissions 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/process/executable/position 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/process/executable/position/start 0.42 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/process/executable/position/end 0.42 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/application 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/asn 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/cloud 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/cloud/function 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/module 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/module/permissions 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/module/position 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/module/position/start 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/module/position/end 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/registry 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/registry-before 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file/permissions 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file/position 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file/position/start 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file/position/end 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file-before 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file-before/permissions 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file-before/position 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file-before/position/start 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/file-before/position/end 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/resource 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/resource-before 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/virtualization 0.7 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/virtualization/data-center 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/virtualization/data-store 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/virtualization/task 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/target/virtualization/vm 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/observer 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/alert 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/icmp 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/dhcp 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/dns 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/dns/dns-question 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/dns/dns-resource-record 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/http 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/http/request 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/http/request/headers 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/http/request/query-params 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/http/response 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/http/response/headers 0.5 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/http/http-header 0.59 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/tls 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/tls/client-certificate 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/tls/client-certificate/subject-details 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/tls/client-certificate/issuer-details 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/tls/server-certificate 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/tls/server-certificate/subject-details 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/tls/server-certificate/issuer-details 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/dcerpc 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/ldap 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/network/vpn 0.7 2026-07-08T17:52:31.528Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/auth 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/auth/kerberos-tgt 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/auth/kerberos-tgs 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/auth/ntlm 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/auth/mfa 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/logon 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/database 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/email 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/email/attachment 0.7 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/email/attachment/permissions 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/email/attachment/position 0.59 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/email/attachment/position/start 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/fields/email/attachment/position/end 0.5 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/system-fields 1 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/system-fields/insert-time 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/system-fields/time 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/system-fields/vendor 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/system-fields/product 0.84 2026-07-09T09:33:08.865Z https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/system-fields/reception-time 0.84 2026-07-09T09:33:08.865Z