Professional.",
"type": "string_t"
},
+ "eid": {
+ "caption": "EID",
+ "description": "An Embedded Identity Document, is a unique serial number that identifies an eSIM-enabled device.",
+ "type": "string_t"
+ },
"email": {
"caption": "Email",
"description": "The email object.",
@@ -2565,6 +2570,11 @@
"description": "The name of the hypervisor running on the device. For example, Xen, VMware, Hyper-V, VirtualBox, etc.",
"type": "string_t"
},
+ "iccid": {
+ "caption": "ICCID",
+ "description": "The Integrated Circuit Card Identification of a mobile device. Typically it is a unique 18 to 22 digit number that identifies a SIM card.",
+ "type": "string_t"
+ },
"identifier_cookie": {
"caption": "Identifier Cookie",
"description": "The client identifier cookie during client/server exchange.",
@@ -2806,6 +2816,11 @@
"description": "A determination if a policy, rule, or enforcement action was applied.",
"type": "boolean_t"
},
+ "is_backed_up": {
+ "caption": "Back Ups Configured",
+ "description": "Indicates whether the device or resource has a backup enabled, such as an automated snapshot or a cloud backup. For example, this is indicated by the cloudBackupEnabled value within JAMF Pro mobile devices or the registration of an AWS ARN with the AWS Backup service.",
+ "type": "boolean_t"
+ },
"is_cleartext": {
"caption": "Cleartext Credentials",
"description": "Indicates whether the credentials were passed in clear text.Note: True if the credentials were passed in a clear text protocol such as FTP or TELNET, or if Windows detected that a user's logon password was passed to the authentication package in clear text.
", @@ -2871,6 +2886,11 @@ "description": "Indicates whether Multi Factor Authentication was used during authentication.", "type": "boolean_t" }, + "is_mobile_account_active": { + "caption": "Mobile Account Active", + "description": "Indicates whether the device has an active mobile account. For example, this is indicated by theitunesStoreAccountActive value within JAMF Pro mobile devices.",
+ "type": "boolean_t"
+ },
"is_new_logon": {
"caption": "New Logon",
"description": "Indicates logon is from a device not seen before or a first time account logon.",
@@ -2911,6 +2931,11 @@
"description": "Denotes whether a digital certificate is self-signed or signed by a known certificate authority (CA).",
"type": "boolean_t"
},
+ "is_shared": {
+ "caption": "Shared Device",
+ "description": "The event occurred on a shared device.",
+ "type": "boolean_t"
+ },
"is_superseded": {
"caption": "The patch is superseded.",
"description": "The vendor patch has been replaced by another.",
@@ -2921,6 +2946,11 @@
"description": "A determination based on analytics as to whether a potential breach was found.",
"type": "boolean_t"
},
+ "is_supervised": {
+ "caption": "Supervised Device",
+ "description": "The event occurred on a supervised device. Devices that are supervised are typically mobile devices managed by a Mobile Device Management solution and are restricted from specific behaviors such as Apple AirDrop.",
+ "type": "boolean_t"
+ },
"is_system": {
"caption": "System",
"description": "The indication of whether the object is part of the operating system.",
@@ -3350,6 +3380,11 @@
"description": "The location of the matched data in the source which resulted in the triggered firewall rule. For example: HEADER.",
"type": "string_t"
},
+ "meid": {
+ "caption": "MEID",
+ "description": "The Mobile Equipment Identifier. It's a unique number that identifies a Code Division Multiple Access (CDMA) mobile device.",
+ "type": "string_t"
+ },
"message": {
"caption": "Message",
"description": "The description of the event/finding, as defined by the source.",
@@ -5456,6 +5491,11 @@
"type": "string_t",
"is_array": true
},
+ "udid": {
+ "caption": "Unique Device Identifier",
+ "description": "The Unique Device Identifier, used for iOS and macOS devices.",
+ "type": "string_t"
+ },
"uid": {
"caption": "Unique ID",
"description": "The unique identifier. See specific usage.",
diff --git a/objects/device.json b/objects/device.json
index 9bc8b3810..38fc60b3c 100644
--- a/objects/device.json
+++ b/objects/device.json
@@ -24,6 +24,9 @@
"description": "The network domain where the device resides. For example: work.example.com.",
"requirement": "optional"
},
+ "eid": {
+ "requirement": "optional"
+ },
"first_seen_time": {
"description": "The initial discovery time of the device.",
"requirement": "optional"
@@ -43,6 +46,9 @@
"description": "The image used as a template to run the virtual machine.",
"requirement": "optional"
},
+ "iccid": {
+ "requirement": "optional"
+ },
"imei": {
"requirement": "optional"
},
@@ -53,15 +59,27 @@
"description": "The device IP address, in either IPv4 or IPv6 format.",
"requirement": "optional"
},
+ "is_backed_up": {
+ "requirement": "optional"
+ },
"is_compliant": {
"requirement": "optional"
},
"is_managed": {
"requirement": "optional"
},
+ "is_mobile_account_active": {
+ "requirement": "optional"
+ },
"is_personal": {
"requirement": "optional"
},
+ "is_shared": {
+ "requirement": "optional"
+ },
+ "is_supervised": {
+ "requirement": "optional"
+ },
"is_trusted": {
"requirement": "optional"
},
@@ -73,6 +91,9 @@
"description": "The geographical location of the device.",
"requirement": "optional"
},
+ "meid": {
+ "requirement": "optional"
+ },
"model": {
"description": "The model of the device. For example ThinkPad X1 Carbon.",
"requirement": "optional"
@@ -119,6 +140,9 @@
"description": "The device type ID.",
"requirement": "required"
},
+ "udid": {
+ "requirement": "optional"
+ },
"uid": {
"description": "The unique identifier of the device. For example the Windows TargetSID or AWS EC2 ARN.",
"requirement": "recommended"
diff --git a/objects/resource_details.json b/objects/resource_details.json
index 2b672bca6..811bf61ba 100644
--- a/objects/resource_details.json
+++ b/objects/resource_details.json
@@ -27,6 +27,9 @@
"description": "The IP address of the resource, in either IPv4 or IPv6 format.",
"requirement": "recommended"
},
+ "is_backed_up": {
+ "requirement": "optional"
+ },
"name": {
"observable": 38,
"requirement": "recommended"