Threat Events Stream Event Types

Event Type	Event and Name (in CEF Header)	EventId (in CEF Header)
MALICIOUS_APP_IN_INVENTORY	Malware	101
ADWARE_APP_IN_INVENTORY	Malware	101
BANKER_MALWARE_APP_IN_INVENTORY	Malware	101
POTENTIALLY_UNWANTED_APP_IN_INVENTORY	Malware	101
RANSOMWARE_APP_IN_INVENTORY	Malware	101
ROOTING_MALWARE_APP_IN_INVENTORY	Malware	101
SMS_MALWARE_APP_IN_INVENTORY	Malware	101
SPYWARE_APP_IN_INVENTORY	Malware	101
TROJAN_MALWARE_APP_IN_INVENTORY	Malware	101
THIRD_PARTY_APP_STORES_IN_INVENTORY	Third-Party App Stores Installed	102
ADMIN_APP_IN_INVENTORY	Device Admin App Installed	103
SIDE_LOADED_APP_IN_INVENTORY	Sideloaded App Installed	104
VULNERABLE_APP_IN_INVENTORY	Vulnerable App	105
SSL_TRUST_COMPROMISE	Dangerous Certificate	201
JAILBREAK	Jailbreak/Root	202
IOS_PROFILE	Risky iOS Profile	203
OUTDATED_OS	Vulnerable O/S	204
OUTDATED_OS_LOW	Vulnerable O/S	205
OUT_OF_DATE_OS	Out-Of-Date OS	213
LOCK_SCREEN_DISABLED	Lock screen disabled	206
STORAGE_ENCRYPTION_DISABLED	Device encryption disabled	207
UNKNOWN_SOURCES_ENABLED	Unknown app sources enabled	208
DEVELOPER_MODE_ENABLED	Developer mode enabled	209
USB_DEBUGGING_ENABLED	USB debugging enabled	210
USB_APP_VERIFICATION_DISABLED	USB app verification disabled	211
FIREWALL_DISABLED	Firewall Disabled	214
USER_PASSWORD_DISABLED	User Password Disabled	215
ANTIVIRUS_DISABLED	Antivirus Protection Disabled	216
APP_INACTIVITY	Inactive Device - App	217
MISSING_ANDROID_SECURITY_PATCHES	Android security patches missing	212
ACCESS_SPAM_HOST	Risky Host/Domain - Spam	301
ACCESS_PHISHING_HOST	Risky Host/Domain - Phishing	302
ACCESS_BAD_HOST	Risky Host/Domain - Malware	303
RISKY_APP_DOWNLOAD	Third-Party App Store Traffic	304
ACCESS_CRYPTOJACKING_HOST	Risky Host/Domain - Cryptojacking	305
SSL_MITM_TRUSTED_VALID_CERT	Man-in-the-Middle	401
SSL_MITM_UNTRUSTED_VALID_CERT	Man-in-the-Middle	401
SSL_STRIP_MITM	Man-in-the-Middle	401
SSL_MITM_UNTRUSTED_INVALID_CERT	Risky Hotspot	402
SSL_MITM_TRUSTED_INVALID_CERT	Risky Hotspot	402
LEAK_CREDIT_CARD	Credit Card Leak	501
LEAK_PASSWORD	Password Leak	502
LEAK_EMAIL	E-Mail Address Leak	503
LEAK_USERID	Username Leak	504
LEAK_LOCATION	Location Leak	505