-
Notifications
You must be signed in to change notification settings - Fork 7
/
indicator_terms.legacy
1 lines (1 loc) · 79.5 KB
/
indicator_terms.legacy
1
{"mir": {"DriverItem/PEInfo/Exports/NumberOfNames": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "EventLogItem/writeTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "dateTime"}, "CookieHistoryItem/IsSecure": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "PortItem/CreationTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "dateTime"}, "ServiceItem/pathsha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "SystemInfoItem/timezoneStandard": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedDeviceObject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FileItem/PEInfo/BaseAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "VolumeItem/BytesPerSector": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Entropy/CurveData/float": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "SystemInfoItem/networkArray/networkInfo/dhcpLeaseObtained": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "dateTime"}, "DriverItem/DriverObjectAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerValueQueries": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "VolumeItem/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Sha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ServiceItem/path": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "UrlHistoryItem/PageTitle": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooked/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "FileItem/FileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "CookieHistoryItem/Profile": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "RouteEntryItem/IsIPv6": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "ArpEntryItem/IPv4Address": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ArpEntryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/remoteIP": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/Sections/ActualNumberOfSections": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "DnsEntryItem/RecordData/IPv4Address": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "FileItem/Created": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "FormHistoryItem/FormFieldValue": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "EventLogItem/CorrelationActivityId": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "FileDownloadHistoryItem/CacheHitCount": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "int"}, "SystemRestoreItem/ChangeLogEntryType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "DiskItem/DiskSize": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DiskItem", "content_type": "int"}, "PortItem/path": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/OriginalFilename": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "Email/X-filetypes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "EventLogItem/category": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "CookieHistoryItem/LastAccessedDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "dateTime"}, "TaskItem/AccountName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemInfoItem/OS": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "RouteEntryItem/RouteAge": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailCC": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/Sections/Section/Entropy/CurveData/float": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "EventLogItem/EID": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "int"}, "ProcessItem/HandleList/Handle/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/PETimeStamp": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "EventLogItem/unformattedMessage/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "DnsEntryItem/DataLength": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "int"}, "ArpEntryItem/Interface": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ArpEntryItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedDriverObject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "HookItem/DigitalSignatureHooking/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileDescription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfNames": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "Snort/Snort": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Snort", "content_type": "string"}, "Email/Subject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "FormHistoryItem/PasswordFieldName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Mapped": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "Email/X-filenames": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/dhcpServerArray/dhcpServer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/StringList/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "UserItem/SecurityType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "RegistryItem/NumValues": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "int"}, "FileItem/Changed": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "SystemInfoItem/patchLevel": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "EventLogItem/blob": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailFrom": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "CookieHistoryItem/BrowserName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "FileDownloadHistoryItem/MaxBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "int"}, "Network/HTTP_Referr": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Network", "content_type": "string"}, "TaskItem/SignatureDescription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FormHistoryItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Opcodes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FormHistoryItem/BrowserName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/DetectedAnomalies/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "SystemInfoItem/domain": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDriverObject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FileItem/FileExtension": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/Sections/NumberOfSections": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "SystemRestoreItem/RestorePointDescription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "ServiceItem/serviceDLLsha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/ImageBase": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "DriverItem/DeviceItem/DriverName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "RegistryItem/detectedAnomaly": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "SystemInfoItem/availphysical": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "int"}, "TaskItem/Flag": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileDownloadHistoryItem/SourceURL": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "DriverItem/StringList/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/FilePath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ServiceItem/pathSignatureDescription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/PEInfo/DigitalSignature/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/ipGatewayArray/ipGateway": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "VolumeItem/SerialNumber": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "FileItem/SecurityID": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileDownloadHistoryItem/Profile": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "FileItem/PEInfo/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/Drive": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/Exports/ExportedFunctions/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "CookieHistoryItem/CookiePath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDriverName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "PortItem/remotePort": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "int"}, "UrlHistoryItem/VisitCount": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "int"}, "ProcessItem/detectedAnomaly": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "UrlHistoryItem/FirstVisitDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "dateTime"}, "Email/CC": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PeakEntropy": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "FileDownloadHistoryItem/LastCacheSynchDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "dateTime"}, "FileItem/PEInfo/Exports/NumberOfFunctions": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "CookieHistoryItem/ExpirationDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "dateTime"}, "FileItem/PEInfo/Sections/Section/Entropy/CurveData/float": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "HookItem/DigitalSignatureHooked/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DiskItem", "content_type": "string"}, "FileItem/PEInfo/PEChecksum/PEFileRaw": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "SystemRestoreItem/RestorePointFullPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "SystemRestoreItem/RegistryHives/String": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "RegistryItem/NumSubKeys": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "int"}, "PrefetchItem/VolumeList/VolumeItem/SerialNumber": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "string"}, "DriverItem/PEInfo/DetectedEntryPointSignature/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/StreamList/Stream/SizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "FileDownloadHistoryItem/LastModifiedDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "dateTime"}, "FileItem/FullPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "SystemInfoItem/totalphysical": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "int"}, "SystemInfoItem/biosInfo/biosVersion": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "SystemInfoItem/biosInfo/biosDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "FileItem/detectedAnomaly": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/Modified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "ProcessItem/HandleList/Handle/HandleCount": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "ServiceItem/serviceDLLsha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/PEInfo/DigitalSignature/Description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "DriverItem/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/BaseAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "PortItem/state": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "string"}, "CookieHistoryItem/CookieName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "SystemRestoreItem/OriginalFileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "VolumeItem/FileSystemFlags": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "VolumeItem/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "FileItem/PEInfo/DigitalSignature/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ArpEntryItem/PhysicalAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ArpEntryItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/SpecialBuild": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDeviceObject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/UsernameFieldValue": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "SystemRestoreItem/OriginalShortFileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "ServiceItem/pid": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "int"}, "SystemRestoreItem/Created": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "DnsEntryItem/RecordName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "SystemInfoItem/machine": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "EventLogItem/message": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "UrlHistoryItem/VisitType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileAPI": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "CookieHistoryItem/CookieFlags": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/path": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionNumber": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DiskItem", "content_type": "int"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileVersion": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "DriverItem/Sha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "VolumeItem/IsMounted": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "Email/Body": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "EventLogItem/source": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "TaskItem/ActionList/Action/COMClassId": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/PEInfo/PEChecksum/PEFileAPI": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "FileItem/PEInfo/Sections/Section/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/ApplicationName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemInfoItem/timezoneDST": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/remotePort": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "ServiceItem/serviceDLLCertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "UserItem/disabled": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailBCC": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "Email/AttachmentCount": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "int"}, "Email/Date": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "dateTime"}, "FormHistoryItem/Profile": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/DetectedAnomalies/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "UrlHistoryItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/NumberOfFunctions": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/Protection": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalTrademarks": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/DetectedSignatureKeys/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SecurityID": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "Email/Thread-Topic": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "Email/X-MS-Has-Attach": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Injected": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/ActionList/Action/ExecArguments": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FormHistoryItem/CreationDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "dateTime"}, "FileItem/PEInfo/DigitalSignature/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "CookieHistoryItem/FileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "Email/In-Reply-To": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "ServiceItem/pathmd5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "ServiceItem/serviceDLLmd5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "EventLogItem/ExecutionProcessId": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "int"}, "Email/To": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "UrlHistoryItem/BrowserVersion": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/Subsystem": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ModuleItem/ModuleSize": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ModuleItem", "content_type": "int"}, "TaskItem/CreationDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "dateTime"}, "TaskItem/NextRunTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "dateTime"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Size": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "CookieHistoryItem/CreationDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "dateTime"}, "FileItem/FilenameAccessed": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "ServiceItem/pathCertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "TaskItem/Comment": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/DetectedEntryPointSignature/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/INode": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "TaskItem/WorkItemData": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "RegistryItem/ValueName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/pid": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "Email/X-filesizes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "int"}, "UserItem/LastLogin": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "dateTime"}, "ProcessItem/SectionList/MemorySection/RegionSize": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "ModuleItem/ModulePath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ModuleItem", "content_type": "string"}, "FormHistoryItem/HttpRealm": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportsTimeStamp": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "dateTime"}, "EventLogItem/machine": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "SystemInfoItem/procType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "PortItem/remoteIP": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "string"}, "FormHistoryItem/LastUsedDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "dateTime"}, "Network/UserAgent": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Network", "content_type": "string"}, "SystemRestoreItem/BackupFileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "RouteEntryItem/Protocol": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "ModuleItem/ModuleName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ModuleItem", "content_type": "string"}, "TaskItem/ActionList/Action/ShowMessageTitle": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "HookItem/HookedModule": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/Index": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "PrefetchItem/ReportedSizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "int"}, "RouteEntryItem/Interface": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "FileItem/PEInfo/Subsystem": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailReplyTo": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "UrlHistoryItem/LastVisitDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "dateTime"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "VolumeItem/ActualAvailableAllocationUnits": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "int"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/PrivateBuild": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "PortItem/localIP": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "string"}, "TaskItem/ActionList/Action/ExecProgramSha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "Email/Thread-Index": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PEInfo/DigitalSignature/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "DriverItem/DriverName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerFrequency": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileDownloadHistoryItem/MimeType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "ServiceItem/descriptiveName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportedFunctions/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/AccountLogonType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FormHistoryItem/FirstUsedDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "dateTime"}, "SystemRestoreItem/AclChangeSecurityID": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "DriverItem/PEInfo/BaseAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/EncryptedPassword": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedDriverName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "VolumeItem/DevicePath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionLength": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DiskItem", "content_type": "int"}, "Email/Attachment/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "PrefetchItem/AccessedFileList/AccessedFile": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "string"}, "SystemRestoreItem/RestorePointType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FileItem/StreamList/Stream/Md5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "DnsEntryItem/Flags": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "DriverItem/SignatureDescription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "UserItem/passwordrequired": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "Email/Attachment/Content": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Depth": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/StreamList/Stream/Sha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "DnsEntryItem/RecordType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "UserItem/scriptpath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "FileItem/PEInfo/DigitalSignature/Description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/DetectedAnomalies/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "DriverItem/Sha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "DriverItem/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/ExportsTimeStamp": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "dateTime"}, "PrefetchItem/VolumeList/VolumeItem/DevicePath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "string"}, "FileDownloadHistoryItem/AutoResume": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "TaskItem/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ModuleItem/ModuleInit": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ModuleItem", "content_type": "int"}, "TaskItem/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "ServiceItem/serviceDLL": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "EventLogItem/user": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "UrlHistoryItem/Profile": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "TaskItem/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "HookItem/HookDescription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "FileItem/StreamList/Stream/Sha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "EventLogItem/log": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "Email/ReceivedFromIP": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "ServiceItem/serviceDLLSignatureDescription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "FileItem/Md5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/ActionList/Action/ExecProgramMd5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/Sha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ServiceItem/startedAs": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "SystemInfoItem/installDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "dateTime"}, "ProcessItem/SecurityType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "Network/URI": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Network", "content_type": "string"}, "ServiceItem/pathCertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "SystemInfoItem/regOwner": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "FileDownloadHistoryItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "SystemInfoItem/user": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/Status": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ModuleItem/ModuleAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ModuleItem", "content_type": "int"}, "FileDownloadHistoryItem/TemporaryPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "FileItem/SecurityType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "UserItem/SecurityID": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "EventLogItem/type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "FileItem/PEInfo/Exports/ExportsTimeStamp": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "UrlHistoryItem/Hidden": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "VolumeItem/CreationTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "dateTime"}, "FormHistoryItem/HostName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "SystemInfoItem/productName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/RegionStart": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "CookieHistoryItem/BrowserVersion": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "TaskItem/MaxRunTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "EventLogItem/ExecutionThreadId": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "int"}, "CookieHistoryItem/HostName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedSignatureKeys/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "RouteEntryItem/RouteType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "FileDownloadHistoryItem/BytesDownloaded": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileDownloadHistoryItem/FileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/EpJumpCodes/Depth": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/FormFieldName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooking/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "ServiceItem/arguments": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "ProcessItem/pid": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/Description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/DetectedCharacteristics": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "DnsEntryItem/Host": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "CookieHistoryItem/LastModifiedDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "dateTime"}, "ServiceItem/description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "ArpEntryItem/CacheType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ArpEntryItem", "content_type": "string"}, "DriverItem/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "UserItem/homedirectory": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/ExportedFunctions/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "RouteEntryItem/Gateway": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "EventLogItem/reserved": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "SystemInfoItem/hostname": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "SystemInfoItem/directory": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/MAC": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailTo": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/Sections/Section/DetectedSignatureKeys/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "FileDownloadHistoryItem/BrowserVersion": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileDownloadHistoryItem/StartDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "dateTime"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedCharacteristics": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "PrefetchItem/Created": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "dateTime"}, "EventLogItem/categoryNum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "DriverItem/Md5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "DriverItem/PEInfo/Sections/Section/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "SystemRestoreItem/FileAttributes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Language": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileDownloadHistoryItem/LastCheckedDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "dateTime"}, "ServiceItem/pathSignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/PEInfo/PEChecksum/PEFileRaw": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/subnetMask": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "UserItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerBegin": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "dateTime"}, "Email/References": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/Language": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerSessionChangeType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerUsername": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "RegistryItem/Hive": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/Subsystem": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "PrefetchItem/TimesExecuted": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "int"}, "TaskItem/VirtualPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/parentpid": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "DriverItem/PEInfo/Sections/Section/SizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "TaskItem/ActionList/Action/ExecProgramPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/RawFlags": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "DriverItem/PEInfo/ImportedModules/Module/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "Email/Received": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "TaskItem/WorkingDirectory": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "CookieHistoryItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "FormHistoryItem/FormSubmitURL": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "FileItem/PEInfo/DetectedEntryPointSignature/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "PrefetchItem/SizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileRaw": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "FormHistoryItem/UsernameFieldName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "FileItem/PEInfo/Exports/NumberOfNames": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "UserItem/lockedout": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "RouteEntryItem/Metric": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "int"}, "HookItem/HookedFunction": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/SizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "DriverItem/PEInfo/DigitalSignature/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "DnsEntryItem/RecordData/Host": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/InternalName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/dhcpLeaseExpires": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "dateTime"}, "ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/SizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "UrlHistoryItem/URL": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "ServiceItem/pathSignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "TaskItem/ActionList/Action/ExecProgramSha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductVersion": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "Email/From": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "UrlHistoryItem/IndexedContent": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/ExtraneousBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/FilenameChanged": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "DriverItem/PEInfo/Sections/Section/DetectedCharacteristics": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "UrlHistoryItem/BrowserName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "TaskItem/ActionList/Action/ActionType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "HookItem/HookingAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "Email/MIME-Version": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "UserItem/userpasswordage": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "PortItem/localPort": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "int"}, "Email/Return-Path": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "PrefetchItem/ApplicationFileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "string"}, "Network/String": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Network", "content_type": "string"}, "UserItem/grouplist/groupname": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedToDeviceName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/protocol": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemInfoItem/regOrg": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "FileDownloadHistoryItem/TargetDirectory": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "TaskItem/ExitCode": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "Network/DNS": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Network", "content_type": "string"}, "PrefetchItem/PrefetchHash": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "string"}, "FileItem/PEInfo/ExtraneousBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ServiceItem/serviceDLLSignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "TaskItem/AccountRunLevel": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailBody": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ServiceItem/mode": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "HookItem/DigitalSignatureHooking/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "DriverItem/DriverStartIo": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "DriverItem/PEInfo/DigitalSignature/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "UserItem/description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "RegistryItem/Value": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/arguments": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/Exports/DllName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/Creator": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/PEInfo/ImportedModules/Module/NumberOfFunctions": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "Email/ReceivedFromHost": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "ProcessItem/userTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemRestoreItem/AclChangeUsername": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "DriverItem/PEInfo/Exports/DllName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "ProcessItem/startTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "dateTime"}, "UrlHistoryItem/LastVisitDateLocal": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "dateTime"}, "ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfFunctions": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "FileDownloadHistoryItem/Referrer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "DriverItem/DriverInit": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FormHistoryItem/EncryptionType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "RouteEntryItem/Netmask": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/localIP": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemRestoreItem/ChangeLogEntryFlags": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/state": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/Accessed": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "TaskItem/ActionList/Action/EmailServer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "CookieHistoryItem/FilePath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "EventLogItem/index": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "int"}, "RegistryItem/Modified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "dateTime"}, "ProcessItem/path": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "PortItem/protocol": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "string"}, "TaskItem/Parameters": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileDownloadHistoryItem/DownloadType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooked/Description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "DiskItem/PartitionList/Partition/PartitionOffset": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DiskItem", "content_type": "int"}, "DriverItem/ImageSize": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FileDownloadHistoryItem/LastAccessedDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "dateTime"}, "RegistryItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/PEInfo/DetectedEntryPointSignature/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/PEChecksum/PEComputedAPI": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "DriverItem/PEInfo/PEChecksum/PEFileAPI": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "TaskItem/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "EventLogItem/genTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "dateTime"}, "ProcessItem/SectionList/MemorySection/Md5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemRestoreItem/ChangeLogFileName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FormHistoryItem/FormType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/ipAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/PointerCount": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileDownloadHistoryItem/EndDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "dateTime"}, "RouteEntryItem/Destination": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RouteEntryItem", "content_type": "string"}, "TaskItem/ActionList/Action/EmailAttachments": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "PrefetchItem/ApplicationFullPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "string"}, "FileItem/FilenameCreated": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "UrlHistoryItem/VisitFrom": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "HookItem/DigitalSignatureHooking/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "TaskItem/md5sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "UserItem/fullname": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UserItem", "content_type": "string"}, "FileItem/FileAttributes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ServiceItem/serviceDLLSignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "VolumeItem/VolumeName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "RegistryItem/KeyPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "FileDownloadHistoryItem/CacheFlags": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerMaxRunTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/CompanyName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "PrefetchItem/VolumeList/VolumeItem/CreationTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "dateTime"}, "ModuleItem/ModuleBase": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ModuleItem", "content_type": "int"}, "ProcessItem/hidden": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerDelay": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "Email/BCC": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "FileItem/PEInfo/ImportedModules/Module/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "RegistryItem/Path": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "DriverItem/DeviceItem/DeviceObject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "SystemInfoItem/date": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "dateTime"}, "DnsEntryItem/TimeToLive": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DnsEntryItem", "content_type": "string"}, "EventLogItem/CorrelationRelatedActivityId": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "EventLogItem", "content_type": "string"}, "DriverItem/DriverUnload": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "FileItem/PeakCodeEntropy": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "UrlHistoryItem/Thumbnail": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "ServiceItem/serviceDLLCertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "ServiceItem/name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "FileDownloadHistoryItem/BrowserName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "VolumeItem/FileSystemName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "FileItem/StringList/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "VolumeItem/DriveLetter": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/Description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "FileItem/StreamList/Stream/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/ActionList/Action/DigitalSignature/Description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerSubscription": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemInfoItem/uptime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "UrlHistoryItem/HostName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DriverItem/PEInfo/PEChecksum/PEComputedAPI": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "int"}, "HookItem/HookingModule": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "SystemInfoItem/productID": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "UrlHistoryItem/FirstBookmarkDate": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "FileDownloadHistoryItem/FullHttpHeader": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "CookieHistoryItem/CookieValue": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "TaskItem/TriggerList/Trigger/TriggerEnd": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/process": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/Sha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "RegistryItem/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "DriverItem/DeviceItem/AttachedDeviceName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "SystemInfoItem/MAC": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "TaskItem/ActionList/Action/ExecWorkingDirectory": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "UrlHistoryItem/Typed": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "UrlHistoryItem", "content_type": "string"}, "DiskItem/DiskName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DiskItem", "content_type": "string"}, "FileDownloadHistoryItem/State": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileDownloadHistoryItem", "content_type": "string"}, "SystemInfoItem/processor": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/ExtraneousBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/PETimeStamp": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "dateTime"}, "TaskItem/MostRecentRunTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "dateTime"}, "TaskItem/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "RegistryItem/ReportedLengthInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "int"}, "ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/localPort": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "Email/Attachment/MIMEType": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "ServiceItem/pathsha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "FileItem/PEInfo/EpJumpCodes/Opcodes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "VolumeItem/SectorsPerAllocationUnit": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEComputedAPI": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "int"}, "FormHistoryItem/Guid": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "FormHistoryItem/TimesUsed": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "int"}, "RegistryItem/Text": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "RegistryItem", "content_type": "string"}, "ProcessItem/PortList/PortItem/CreationTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "dateTime"}, "DriverItem/SignatureExists": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "HookItem/DigitalSignatureHooking/Description": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "DriverItem/PEInfo/EpJumpCodes/Opcodes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "Email/Attachment/SizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "int"}, "DriverItem/DeviceItem/DeviceName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "TaskItem/ActionList/Action/COMData": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "SystemRestoreItem/RestorePointName": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Data": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/Username": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "SystemRestoreItem/ChangeLogEntrySequenceNumber": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemRestoreItem", "content_type": "string"}, "FileItem/Sha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/Comments": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "TaskItem/Priority": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "DriverItem/PEInfo/DigitalSignature/CertificateSubject": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "FileItem/PEInfo/Sections/Section/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "ProcessItem/kernelTime": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "HiveItem/Path": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HiveItem", "content_type": "string"}, "HookItem/DigitalSignatureHooked/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "FileItem/PEInfo/EpJumpCodes/Depth": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "TaskItem/sha256sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "HiveItem/Name": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HiveItem", "content_type": "string"}, "TaskItem/sha1sum": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "PrefetchItem/FullPath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "string"}, "TaskItem/ActionList/Action/ShowMessageBody": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/ObjectAddress": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "DriverItem/PEInfo/ImportedModules/Module/ImportedFunctions/string": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "FormHistoryItem/BrowserVersion": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FormHistoryItem", "content_type": "string"}, "ProcessItem/HandleList/Handle/AccessMask": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ProcessItem", "content_type": "string"}, "ServiceItem/status": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalCopyright": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "PrefetchItem/LastRun": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PrefetchItem", "content_type": "dateTime"}, "CookieHistoryItem/IsHttpOnly": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "CookieHistoryItem", "content_type": "string"}, "FileItem/FilenameModified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "dateTime"}, "SystemInfoItem/buildNumber": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "ServiceItem/type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "ServiceItem", "content_type": "string"}, "DriverItem/PEInfo/PETimeStamp": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "dateTime"}, "Email/Content-Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "Email", "content_type": "string"}, "HookItem/DigitalSignatureHooked/CertificateIssuer": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "HookItem", "content_type": "string"}, "SystemInfoItem/networkArray/networkInfo/adapter": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "SystemInfoItem", "content_type": "string"}, "VolumeItem/TotalAllocationUnits": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "VolumeItem", "content_type": "string"}, "DriverItem/PEInfo/Sections/Section/Type": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "DriverItem", "content_type": "string"}, "PortItem/process": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "string"}, "FileItem/DevicePath": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "FileItem/SizeInBytes": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "int"}, "FileItem/PEInfo/DigitalSignature/SignatureVerified": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "FileItem", "content_type": "string"}, "PortItem/pid": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "PortItem", "content_type": "int"}, "TaskItem/TriggerList/Trigger/TriggerEnabled": {"last_modified": "2011-12-02T08:54:05Z", "context_doc": "TaskItem", "content_type": "string"}}}