HAWK F.A.Q

• 1. Reference Guide
  • 1.1. Available Event Columns
  • 1.2. Available Audit Columns
  • 1.3. Available Vulnerability columns
  • 1.4. Available Incident columns
  • 1.5. Available Resource Columns
  • 1.6. Available Column Parameters
  • 1.7. Available Where Comparisons
  • 1.8. Event Alert Type Categories
  • 1.9. Resource OS Type Table
• 2. HAWK ID Descriptions
  • 2.1. Default Message
  • 2.2. Antivirus
  • 2.3. Application Control
  • 2.4. Firewall
  • 2.5. IPS/IDS/HIDS
  • 2.6. Spam Filter
  • 2.7. Router
  • 2.8. Switch
  • 2.9. VPN
  • 2.10. ActiveSync
  • 2.11. FTP
  • 2.12. Operating System
  • 2.13. Mail
  • 2.14. Database
  • 2.15. Web Server
  • 2.16. UPS
  • 2.17. MISC
  • 2.18. Microsoft
  • 2.19. System i
• 3. How to Create Custom Signtures
  • 3.1. Workflow for Existing Signatures
  • 3.2. Workflow for New Signatures
• 4. How to Create scores
  • 4.1. Module Keys
  • 4.2. Workflow for Existing Scores
  • 4.3. Workflow for New Scores
• 5. REST API Documentation
  • 5.1. Request and Response headers
  • 5.2. Scores
  • 5.3. Authentication
  • 5.4. Incidents
  • 5.5. Audit/Compliance
  • 5.6. Resources
  • 5.7. Events
  • 5.8. Vulnerabilities
  • 5.9. Users
  • 5.10. Groups
  • 5.11. Dashboards and Widgets
  • 5.12. Reports
  • 5.13. Widgets Templates
  • 5.14. Shard Management and Stats Gathering
  • 5.15. Archive Management
  • 5.16. Archive Availability & Import Management
  • 5.17. Notifications
  • 5.18. Saved Search
  • 5.19. Tools
  • 5.20. System Information
• 6. REST API Examples
  • 6.1. Authentication
  • 6.2. Retrieving Event Data.
• 7. V-Stream API Examples
  • 7.1. Authentication
  • 7.2. Stream Search
• 8. HAWK Load Balance API
• 9. Update SSL Certificate on Data Tier