suspicionsMap Object

The suspicionsMap object can contains these fields:

Parameter

Type

Description

“<suspicion name>”

String

The name of the suspicion.

potentialEvidence

Array

A list of names of the Evidences associated with this Suspicion.

firstTimestamp

Long

The earliest time, in milliseconds since epoch, that this Suspicion was raised by Cybereason.

totalSuspicions

Integer

The total number of this Suspicion.