Data Classification

The name of the data classification category that data matched into, e.g. Financial, Personal, Governmental, etc.

The normalized identifier of the data classification category.

• 0: Unknown (UNKNOWN)
• 1: Personal (PERSONAL)
• 2: Governmental (GOVERNMENTAL)
• 3: Financial (FINANCIAL)
• 4: Business (BUSINESS)
• 5: Military and Law Enforcement (MILITARY_AND_LAW_ENFORCEMENT)
• 6: Security (SECURITY)
• 99: Other (OTHER)

Describes details about the classifier used for data classification.

The file content confidentiality, normalized to the confidentiality_id value. In the case of 'Other', it is defined by the event source.

The normalized identifier of the file content confidentiality indicator.

• 0: Unknown (UNKNOWN)
• 1: Not Confidential (NOT_CONFIDENTIAL)
• 2: Confidential (CONFIDENTIAL)
• 3: Secret (SECRET)
• 4: Top Secret (TOP_SECRET)
• 5: Private (PRIVATE)
• 6: Restricted (RESTRICTED)
• 99: Other (OTHER)

Details about the data discovered by classification job.

Details about the data policy that governs data handling and security measures related to classification.

Group:context
The event data as received from the event source.

Group:primary
Unique identifier for the object

Size of the data classified.

Entity:URL_STRING
The source URL pointing towards the full classifcation job details.

The resultant status of the classification job normalized to the caption of the status_id value. In the case of 'Other', it is defined by the event source.

The contextual description of the status, status_id value.

The normalized status identifier of the classification job.

• 0: Unknown (UNKNOWN)
• 1: Complete (COMPLETE)
• 2: Partial (PARTIAL)
• 3: Fail (FAIL)
• 99: Other (OTHER)

The total count of discovered entities, by the classification job.

The unique identifier of the classification job.

Data from the source that was not mapped into the schema.