STEALTHbits
Use the IBM Security QRadar STEALTHbits Content Extension to closely monitor your STEALTHbits deployment.
Important: To avoid content errors in this content extension, keep the associated DSMs
up to date. DSMs are updated as a part of the automatic updates. If automatic updates are not
enabled, download the most recent version of the associated DSMs from IBM® Fix Central (https://www.ibm.com/support/fixcentral).
IBM Security QRadar STEALTHbits Content Extension V1.0.1
Updated descriptions for custom properties.
IBM Security QRadar STEALTHbits Content Extension V1.0.0
The following table shows the custom properties in IBM Security QRadar STEALTHbits Content Extension V1.0.0.
| Name | Optimized | Capture Group | Regex |
|---|---|---|---|
| Affected Object | No | 1 | AffectedObject=(.*?)(?:\t|$) |
| Attribute Name | No | 1 | AttrName=(.*?)(?:\t|$) |
| Attribute New Value | No | 1 | AttrNewValue=(.*?)(?:\t|$) |
| Attribute Old Value | No | 1 | AttrOldValue=(.*?)(?:\t|$) |
| Class Name | No | 1 | ClassName=(.*?)(?:\t|$) |
| Distinguished Name | No | 1 | DistinguishedName=(.*?)(?:\t|$) |
| Operation Type | No | 1 | Operation=(.*?)(?:\t|$) |
| Setting Name | No | 1 | SettingName=(.*?)(?:\t|$) |