catocli 1.0.19__py3-none-any.whl → 1.0.21__py3-none-any.whl

models/query.eventsTimeSeries.json

@@ -48,7 +48,7 @@
                                     "description": null,
                                     "enumValues": [
                                         {
-                                            "deprecationReason": "use src_site_id/src_site_name instead",
+                                            "deprecationReason": "use src_site_id/src_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of site or user initiating the connection",
                                             "isDeprecated": true,
                                             "name": "src_site"
@@ -72,7 +72,7 @@
                                             "name": "user_id"
                                         },
                                         {
-                                            "deprecationReason": "use dest_site_id/dest_site_name instead",
+                                            "deprecationReason": "use dest_site_id/dest_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For WAN traffic, name of destination site or SDP user",
                                             "isDeprecated": true,
                                             "name": "dest_site"
@@ -84,13 +84,13 @@
                                             "name": "dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "please use src_site_id and dest_site_id instead. Planned end-of-life (EoL) date: June 30, 2025.",
                                             "description": "Source or destination site or remote user ID.\nThis field can only be used in filter.",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "src_or_dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": "use rule_name instead",
+                                            "deprecationReason": "use rule_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of security rule related to the event",
                                             "isDeprecated": true,
                                             "name": "rule"
@@ -108,7 +108,7 @@
                                             "name": "socket_interface"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name for the custom category defined in the Cato Management Application",
                                             "isDeprecated": true,
                                             "name": "custom_category"
@@ -121,7 +121,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host port",
+                                            "description": "Destination port",
                                             "isDeprecated": false,
                                             "name": "dest_port"
                                         },
@@ -181,7 +181,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "Destination IP address",
                                             "isDeprecated": false,
                                             "name": "dest_ip"
                                         },
@@ -258,7 +258,7 @@
                                             "name": "configured_host_name"
                                         },
                                         {
-                                            "deprecationReason": "use event_id instead",
+                                            "deprecationReason": "use event_id instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Cato Internal-use only",
                                             "isDeprecated": true,
                                             "name": "internalId"
@@ -330,9 +330,9 @@
                                             "name": "bgp_error_code"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "Planned end-of-life (EoL) date: April 15, 2025.",
                                             "description": "Description from Cato Management Application for BGP peer",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "bgp_peer_description"
                                         },
                                         {
@@ -397,7 +397,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data that measures the latency for a specific link",
+                                            "description": "Round Trip Delay in Milliseconds that it takes a packet to travel between the source and the PoP",
                                             "isDeprecated": false,
                                             "name": "link_health_latency"
                                         },
@@ -552,14 +552,14 @@
                                             "name": "incident_id"
                                         },
                                         {
-                                            "deprecationReason": "use application_id/application_name instead",
+                                            "deprecationReason": "use application_id/application_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For Internet firewall, app for this event",
                                             "isDeprecated": true,
                                             "name": "application"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Application of the flow",
+                                            "description": "The name of the application associated with the flow",
                                             "isDeprecated": false,
                                             "name": "application_name"
                                         },
@@ -582,7 +582,7 @@
                                             "name": "socket_interface_id"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Unique Cato ID for the custom category",
                                             "isDeprecated": true,
                                             "name": "custom_categories"
@@ -661,7 +661,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "The name of the destination site",
                                             "isDeprecated": false,
                                             "name": "dest_site_name"
                                         },
@@ -720,7 +720,7 @@
                                             "name": "device_posture_profile"
                                         },
                                         {
-                                            "deprecationReason": "use device_posture_profile instead",
+                                            "deprecationReason": "use device_posture_profile instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Device posture profiles",
                                             "isDeprecated": true,
                                             "name": "device_posture_profiles"
@@ -793,7 +793,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "DLP fail mode",
+                                            "description": "Describes the behavior when the DLP system encounters a failure",
                                             "isDeprecated": false,
                                             "name": "dlp_fail_mode"
                                         },
@@ -851,6 +851,24 @@
                                             "isDeprecated": false,
                                             "name": "is_sinkhole"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The ID for the endpoint",
+                                            "isDeprecated": false,
+                                            "name": "endpoint_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The Endpoint Protection Engine that detected the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_engine_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The file operation when this event occurred",
+                                            "isDeprecated": false,
+                                            "name": "file_operation"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
@@ -883,7 +901,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "The vendor that identified the incident, such as Cato or Microsoft",
                                             "isDeprecated": false,
                                             "name": "vendor"
                                         },
@@ -924,19 +942,19 @@
                                             "name": "recommended_actions"
                                         },
                                         {
-                                            "deprecationReason": "use src_pid instead",
+                                            "deprecationReason": "use src_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_parent_pid instead",
+                                            "deprecationReason": "use src_process_parent_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "parent_pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_path instead",
+                                            "deprecationReason": "use src_process_path instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "process_path"
@@ -953,12 +971,96 @@
                                             "isDeprecated": false,
                                             "name": "out_of_band_access"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A Unique ID for the quarantined file",
+                                            "isDeprecated": false,
+                                            "name": "quarantine_uuid"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
                                             "isDeprecated": false,
                                             "name": "logged_in_user"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The profile assigned to the endpoint upon detection of the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_profile"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process command line",
+                                            "isDeprecated": false,
+                                            "name": "src_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The destination process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process command line",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "If policy is set to disinfect, return the result of this action",
+                                            "isDeprecated": false,
+                                            "name": "disinfect_result"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Indicate how many processes are part of this event",
+                                            "isDeprecated": false,
+                                            "name": "processes_count"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": "HTTP request method (ie. Get, Post)",
@@ -1033,7 +1135,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Cato App",
+                                            "description": "Cato application name",
                                             "isDeprecated": false,
                                             "name": "cato_app"
                                         },
@@ -1087,7 +1189,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Tenant Id",
+                                            "description": "Unique identifier for the tenant within a multi-tenant environment",
                                             "isDeprecated": false,
                                             "name": "tenant_id"
                                         },
@@ -1147,7 +1249,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data Classifiers",
+                                            "description": "Defines the scanning methods used by the DLP system",
                                             "isDeprecated": false,
                                             "name": "dlp_scan_types"
                                         },
@@ -1225,7 +1327,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Used Public IP",
+                                            "description": "Public source IP",
                                             "isDeprecated": false,
                                             "name": "public_ip"
                                         },
@@ -1396,6 +1498,54 @@
                                             "description": "Device Type",
                                             "isDeprecated": false,
                                             "name": "device_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Tenant Restriction Rule Name",
+                                            "isDeprecated": false,
+                                            "name": "tenant_restriction_rule_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Connection Origin",
+                                            "isDeprecated": false,
+                                            "name": "connection_origin"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Server IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_server_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Client IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_client_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "IoC Container Name",
+                                            "isDeprecated": false,
+                                            "name": "container_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "An external system identifier used for correlation between related Cato entities. Example: external ticket id that correlates Cato XDR stories.",
+                                            "isDeprecated": false,
+                                            "name": "correlation_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Precedence",
+                                            "isDeprecated": false,
+                                            "name": "precedence"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A list of labels providing additional context for the event",
+                                            "isDeprecated": false,
+                                            "name": "labels"
                                         }
                                     ],
                                     "fields": null,
@@ -1460,7 +1610,7 @@
                                     "description": null,
                                     "enumValues": [
                                         {
-                                            "deprecationReason": "use src_site_id/src_site_name instead",
+                                            "deprecationReason": "use src_site_id/src_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of site or user initiating the connection",
                                             "isDeprecated": true,
                                             "name": "src_site"
@@ -1484,7 +1634,7 @@
                                             "name": "user_id"
                                         },
                                         {
-                                            "deprecationReason": "use dest_site_id/dest_site_name instead",
+                                            "deprecationReason": "use dest_site_id/dest_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For WAN traffic, name of destination site or SDP user",
                                             "isDeprecated": true,
                                             "name": "dest_site"
@@ -1496,13 +1646,13 @@
                                             "name": "dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "please use src_site_id and dest_site_id instead. Planned end-of-life (EoL) date: June 30, 2025.",
                                             "description": "Source or destination site or remote user ID.\nThis field can only be used in filter.",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "src_or_dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": "use rule_name instead",
+                                            "deprecationReason": "use rule_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of security rule related to the event",
                                             "isDeprecated": true,
                                             "name": "rule"
@@ -1520,7 +1670,7 @@
                                             "name": "socket_interface"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name for the custom category defined in the Cato Management Application",
                                             "isDeprecated": true,
                                             "name": "custom_category"
@@ -1533,7 +1683,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host port",
+                                            "description": "Destination port",
                                             "isDeprecated": false,
                                             "name": "dest_port"
                                         },
@@ -1593,7 +1743,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "Destination IP address",
                                             "isDeprecated": false,
                                             "name": "dest_ip"
                                         },
@@ -1670,7 +1820,7 @@
                                             "name": "configured_host_name"
                                         },
                                         {
-                                            "deprecationReason": "use event_id instead",
+                                            "deprecationReason": "use event_id instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Cato Internal-use only",
                                             "isDeprecated": true,
                                             "name": "internalId"
@@ -1742,9 +1892,9 @@
                                             "name": "bgp_error_code"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "Planned end-of-life (EoL) date: April 15, 2025.",
                                             "description": "Description from Cato Management Application for BGP peer",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "bgp_peer_description"
                                         },
                                         {
@@ -1809,7 +1959,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data that measures the latency for a specific link",
+                                            "description": "Round Trip Delay in Milliseconds that it takes a packet to travel between the source and the PoP",
                                             "isDeprecated": false,
                                             "name": "link_health_latency"
                                         },
@@ -1964,14 +2114,14 @@
                                             "name": "incident_id"
                                         },
                                         {
-                                            "deprecationReason": "use application_id/application_name instead",
+                                            "deprecationReason": "use application_id/application_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For Internet firewall, app for this event",
                                             "isDeprecated": true,
                                             "name": "application"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Application of the flow",
+                                            "description": "The name of the application associated with the flow",
                                             "isDeprecated": false,
                                             "name": "application_name"
                                         },
@@ -1994,7 +2144,7 @@
                                             "name": "socket_interface_id"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Unique Cato ID for the custom category",
                                             "isDeprecated": true,
                                             "name": "custom_categories"
@@ -2073,7 +2223,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "The name of the destination site",
                                             "isDeprecated": false,
                                             "name": "dest_site_name"
                                         },
@@ -2132,7 +2282,7 @@
                                             "name": "device_posture_profile"
                                         },
                                         {
-                                            "deprecationReason": "use device_posture_profile instead",
+                                            "deprecationReason": "use device_posture_profile instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Device posture profiles",
                                             "isDeprecated": true,
                                             "name": "device_posture_profiles"
@@ -2205,7 +2355,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "DLP fail mode",
+                                            "description": "Describes the behavior when the DLP system encounters a failure",
                                             "isDeprecated": false,
                                             "name": "dlp_fail_mode"
                                         },
@@ -2263,6 +2413,24 @@
                                             "isDeprecated": false,
                                             "name": "is_sinkhole"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The ID for the endpoint",
+                                            "isDeprecated": false,
+                                            "name": "endpoint_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The Endpoint Protection Engine that detected the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_engine_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The file operation when this event occurred",
+                                            "isDeprecated": false,
+                                            "name": "file_operation"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
@@ -2295,7 +2463,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "The vendor that identified the incident, such as Cato or Microsoft",
                                             "isDeprecated": false,
                                             "name": "vendor"
                                         },
@@ -2336,19 +2504,19 @@
                                             "name": "recommended_actions"
                                         },
                                         {
-                                            "deprecationReason": "use src_pid instead",
+                                            "deprecationReason": "use src_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_parent_pid instead",
+                                            "deprecationReason": "use src_process_parent_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "parent_pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_path instead",
+                                            "deprecationReason": "use src_process_path instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "process_path"
@@ -2365,12 +2533,96 @@
                                             "isDeprecated": false,
                                             "name": "out_of_band_access"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A Unique ID for the quarantined file",
+                                            "isDeprecated": false,
+                                            "name": "quarantine_uuid"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
                                             "isDeprecated": false,
                                             "name": "logged_in_user"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The profile assigned to the endpoint upon detection of the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_profile"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process command line",
+                                            "isDeprecated": false,
+                                            "name": "src_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The destination process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process command line",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "If policy is set to disinfect, return the result of this action",
+                                            "isDeprecated": false,
+                                            "name": "disinfect_result"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Indicate how many processes are part of this event",
+                                            "isDeprecated": false,
+                                            "name": "processes_count"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": "HTTP request method (ie. Get, Post)",
@@ -2445,7 +2697,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Cato App",
+                                            "description": "Cato application name",
                                             "isDeprecated": false,
                                             "name": "cato_app"
                                         },
@@ -2499,7 +2751,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Tenant Id",
+                                            "description": "Unique identifier for the tenant within a multi-tenant environment",
                                             "isDeprecated": false,
                                             "name": "tenant_id"
                                         },
@@ -2559,7 +2811,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data Classifiers",
+                                            "description": "Defines the scanning methods used by the DLP system",
                                             "isDeprecated": false,
                                             "name": "dlp_scan_types"
                                         },
@@ -2637,7 +2889,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Used Public IP",
+                                            "description": "Public source IP",
                                             "isDeprecated": false,
                                             "name": "public_ip"
                                         },
@@ -2808,6 +3060,54 @@
                                             "description": "Device Type",
                                             "isDeprecated": false,
                                             "name": "device_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Tenant Restriction Rule Name",
+                                            "isDeprecated": false,
+                                            "name": "tenant_restriction_rule_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Connection Origin",
+                                            "isDeprecated": false,
+                                            "name": "connection_origin"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Server IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_server_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Client IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_client_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "IoC Container Name",
+                                            "isDeprecated": false,
+                                            "name": "container_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "An external system identifier used for correlation between related Cato entities. Example: external ticket id that correlates Cato XDR stories.",
+                                            "isDeprecated": false,
+                                            "name": "correlation_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Precedence",
+                                            "isDeprecated": false,
+                                            "name": "precedence"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A list of labels providing additional context for the event",
+                                            "isDeprecated": false,
+                                            "name": "labels"
                                         }
                                     ],
                                     "fields": null,
@@ -3088,7 +3388,7 @@
                                     "description": null,
                                     "enumValues": [
                                         {
-                                            "deprecationReason": "use src_site_id/src_site_name instead",
+                                            "deprecationReason": "use src_site_id/src_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of site or user initiating the connection",
                                             "isDeprecated": true,
                                             "name": "src_site"
@@ -3112,7 +3412,7 @@
                                             "name": "user_id"
                                         },
                                         {
-                                            "deprecationReason": "use dest_site_id/dest_site_name instead",
+                                            "deprecationReason": "use dest_site_id/dest_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For WAN traffic, name of destination site or SDP user",
                                             "isDeprecated": true,
                                             "name": "dest_site"
@@ -3124,13 +3424,13 @@
                                             "name": "dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "please use src_site_id and dest_site_id instead. Planned end-of-life (EoL) date: June 30, 2025.",
                                             "description": "Source or destination site or remote user ID.\nThis field can only be used in filter.",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "src_or_dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": "use rule_name instead",
+                                            "deprecationReason": "use rule_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of security rule related to the event",
                                             "isDeprecated": true,
                                             "name": "rule"
@@ -3148,7 +3448,7 @@
                                             "name": "socket_interface"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name for the custom category defined in the Cato Management Application",
                                             "isDeprecated": true,
                                             "name": "custom_category"
@@ -3161,7 +3461,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host port",
+                                            "description": "Destination port",
                                             "isDeprecated": false,
                                             "name": "dest_port"
                                         },
@@ -3221,7 +3521,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "Destination IP address",
                                             "isDeprecated": false,
                                             "name": "dest_ip"
                                         },
@@ -3298,7 +3598,7 @@
                                             "name": "configured_host_name"
                                         },
                                         {
-                                            "deprecationReason": "use event_id instead",
+                                            "deprecationReason": "use event_id instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Cato Internal-use only",
                                             "isDeprecated": true,
                                             "name": "internalId"
@@ -3370,9 +3670,9 @@
                                             "name": "bgp_error_code"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "Planned end-of-life (EoL) date: April 15, 2025.",
                                             "description": "Description from Cato Management Application for BGP peer",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "bgp_peer_description"
                                         },
                                         {
@@ -3437,7 +3737,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data that measures the latency for a specific link",
+                                            "description": "Round Trip Delay in Milliseconds that it takes a packet to travel between the source and the PoP",
                                             "isDeprecated": false,
                                             "name": "link_health_latency"
                                         },
@@ -3592,14 +3892,14 @@
                                             "name": "incident_id"
                                         },
                                         {
-                                            "deprecationReason": "use application_id/application_name instead",
+                                            "deprecationReason": "use application_id/application_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For Internet firewall, app for this event",
                                             "isDeprecated": true,
                                             "name": "application"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Application of the flow",
+                                            "description": "The name of the application associated with the flow",
                                             "isDeprecated": false,
                                             "name": "application_name"
                                         },
@@ -3622,7 +3922,7 @@
                                             "name": "socket_interface_id"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Unique Cato ID for the custom category",
                                             "isDeprecated": true,
                                             "name": "custom_categories"
@@ -3701,7 +4001,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "The name of the destination site",
                                             "isDeprecated": false,
                                             "name": "dest_site_name"
                                         },
@@ -3760,7 +4060,7 @@
                                             "name": "device_posture_profile"
                                         },
                                         {
-                                            "deprecationReason": "use device_posture_profile instead",
+                                            "deprecationReason": "use device_posture_profile instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Device posture profiles",
                                             "isDeprecated": true,
                                             "name": "device_posture_profiles"
@@ -3833,7 +4133,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "DLP fail mode",
+                                            "description": "Describes the behavior when the DLP system encounters a failure",
                                             "isDeprecated": false,
                                             "name": "dlp_fail_mode"
                                         },
@@ -3891,6 +4191,24 @@
                                             "isDeprecated": false,
                                             "name": "is_sinkhole"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The ID for the endpoint",
+                                            "isDeprecated": false,
+                                            "name": "endpoint_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The Endpoint Protection Engine that detected the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_engine_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The file operation when this event occurred",
+                                            "isDeprecated": false,
+                                            "name": "file_operation"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
@@ -3923,7 +4241,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "The vendor that identified the incident, such as Cato or Microsoft",
                                             "isDeprecated": false,
                                             "name": "vendor"
                                         },
@@ -3964,19 +4282,19 @@
                                             "name": "recommended_actions"
                                         },
                                         {
-                                            "deprecationReason": "use src_pid instead",
+                                            "deprecationReason": "use src_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_parent_pid instead",
+                                            "deprecationReason": "use src_process_parent_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "parent_pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_path instead",
+                                            "deprecationReason": "use src_process_path instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "process_path"
@@ -3993,6 +4311,12 @@
                                             "isDeprecated": false,
                                             "name": "out_of_band_access"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A Unique ID for the quarantined file",
+                                            "isDeprecated": false,
+                                            "name": "quarantine_uuid"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
@@ -4001,61 +4325,139 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "HTTP request method (ie. Get, Post)",
+                                            "description": "The profile assigned to the endpoint upon detection of the malware",
                                             "isDeprecated": false,
-                                            "name": "http_request_method"
+                                            "name": "epp_profile"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "XFF HTTP header indicates the original IP address for the connections",
+                                            "description": "Source process ID",
                                             "isDeprecated": false,
-                                            "name": "xff"
+                                            "name": "src_pid"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Domain queried in the DNS request",
+                                            "description": "Source process file path",
                                             "isDeprecated": false,
-                                            "name": "dns_query"
+                                            "name": "src_process_path"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Name defined for the public API Key in the Cato Management Application",
+                                            "description": "Source process command line",
                                             "isDeprecated": false,
-                                            "name": "key_name"
+                                            "name": "src_process_cmdline"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "Source process parent process ID",
                                             "isDeprecated": false,
-                                            "name": "api_type"
+                                            "name": "src_process_parent_pid"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "Source process parent file path",
                                             "isDeprecated": false,
-                                            "name": "api_name"
+                                            "name": "src_process_parent_path"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Related Apps",
+                                            "description": "The destination process ID",
                                             "isDeprecated": false,
-                                            "name": "app_stack"
+                                            "name": "dest_pid"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "TLS Inspection rule name",
+                                            "description": "Destination process file path",
                                             "isDeprecated": false,
-                                            "name": "tls_rule_name"
+                                            "name": "dest_process_path"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "TLS Certificate Error",
+                                            "description": "Destination process command line",
                                             "isDeprecated": false,
-                                            "name": "tls_certificate_error"
+                                            "name": "dest_process_cmdline"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "TLS Version",
+                                            "description": "Destination process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "If policy is set to disinfect, return the result of this action",
+                                            "isDeprecated": false,
+                                            "name": "disinfect_result"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Indicate how many processes are part of this event",
+                                            "isDeprecated": false,
+                                            "name": "processes_count"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "HTTP request method (ie. Get, Post)",
+                                            "isDeprecated": false,
+                                            "name": "http_request_method"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "XFF HTTP header indicates the original IP address for the connections",
+                                            "isDeprecated": false,
+                                            "name": "xff"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Domain queried in the DNS request",
+                                            "isDeprecated": false,
+                                            "name": "dns_query"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Name defined for the public API Key in the Cato Management Application",
+                                            "isDeprecated": false,
+                                            "name": "key_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": null,
+                                            "isDeprecated": false,
+                                            "name": "api_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": null,
+                                            "isDeprecated": false,
+                                            "name": "api_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Related Apps",
+                                            "isDeprecated": false,
+                                            "name": "app_stack"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "TLS Inspection rule name",
+                                            "isDeprecated": false,
+                                            "name": "tls_rule_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "TLS Certificate Error",
+                                            "isDeprecated": false,
+                                            "name": "tls_certificate_error"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "TLS Version",
                                             "isDeprecated": false,
                                             "name": "tls_version"
                                         },
@@ -4073,7 +4475,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Cato App",
+                                            "description": "Cato application name",
                                             "isDeprecated": false,
                                             "name": "cato_app"
                                         },
@@ -4127,7 +4529,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Tenant Id",
+                                            "description": "Unique identifier for the tenant within a multi-tenant environment",
                                             "isDeprecated": false,
                                             "name": "tenant_id"
                                         },
@@ -4187,7 +4589,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data Classifiers",
+                                            "description": "Defines the scanning methods used by the DLP system",
                                             "isDeprecated": false,
                                             "name": "dlp_scan_types"
                                         },
@@ -4265,7 +4667,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Used Public IP",
+                                            "description": "Public source IP",
                                             "isDeprecated": false,
                                             "name": "public_ip"
                                         },
@@ -4436,6 +4838,54 @@
                                             "description": "Device Type",
                                             "isDeprecated": false,
                                             "name": "device_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Tenant Restriction Rule Name",
+                                            "isDeprecated": false,
+                                            "name": "tenant_restriction_rule_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Connection Origin",
+                                            "isDeprecated": false,
+                                            "name": "connection_origin"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Server IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_server_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Client IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_client_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "IoC Container Name",
+                                            "isDeprecated": false,
+                                            "name": "container_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "An external system identifier used for correlation between related Cato entities. Example: external ticket id that correlates Cato XDR stories.",
+                                            "isDeprecated": false,
+                                            "name": "correlation_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Precedence",
+                                            "isDeprecated": false,
+                                            "name": "precedence"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A list of labels providing additional context for the event",
+                                            "isDeprecated": false,
+                                            "name": "labels"
                                         }
                                     ],
                                     "fields": null,
@@ -4510,7 +4960,7 @@
         }
     },
     "deprecationReason": null,
-    "description": "BETA",
+    "description": null,
     "fieldTypes": {
         "DimensionData": true,
         "DimensionKey": true,
@@ -4588,7 +5038,7 @@
                                     "description": null,
                                     "enumValues": [
                                         {
-                                            "deprecationReason": "use src_site_id/src_site_name instead",
+                                            "deprecationReason": "use src_site_id/src_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of site or user initiating the connection",
                                             "isDeprecated": true,
                                             "name": "src_site"
@@ -4612,7 +5062,7 @@
                                             "name": "user_id"
                                         },
                                         {
-                                            "deprecationReason": "use dest_site_id/dest_site_name instead",
+                                            "deprecationReason": "use dest_site_id/dest_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For WAN traffic, name of destination site or SDP user",
                                             "isDeprecated": true,
                                             "name": "dest_site"
@@ -4624,13 +5074,13 @@
                                             "name": "dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "please use src_site_id and dest_site_id instead. Planned end-of-life (EoL) date: June 30, 2025.",
                                             "description": "Source or destination site or remote user ID.\nThis field can only be used in filter.",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "src_or_dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": "use rule_name instead",
+                                            "deprecationReason": "use rule_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of security rule related to the event",
                                             "isDeprecated": true,
                                             "name": "rule"
@@ -4648,7 +5098,7 @@
                                             "name": "socket_interface"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name for the custom category defined in the Cato Management Application",
                                             "isDeprecated": true,
                                             "name": "custom_category"
@@ -4661,7 +5111,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host port",
+                                            "description": "Destination port",
                                             "isDeprecated": false,
                                             "name": "dest_port"
                                         },
@@ -4721,7 +5171,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "Destination IP address",
                                             "isDeprecated": false,
                                             "name": "dest_ip"
                                         },
@@ -4798,7 +5248,7 @@
                                             "name": "configured_host_name"
                                         },
                                         {
-                                            "deprecationReason": "use event_id instead",
+                                            "deprecationReason": "use event_id instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Cato Internal-use only",
                                             "isDeprecated": true,
                                             "name": "internalId"
@@ -4870,9 +5320,9 @@
                                             "name": "bgp_error_code"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "Planned end-of-life (EoL) date: April 15, 2025.",
                                             "description": "Description from Cato Management Application for BGP peer",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "bgp_peer_description"
                                         },
                                         {
@@ -4937,7 +5387,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data that measures the latency for a specific link",
+                                            "description": "Round Trip Delay in Milliseconds that it takes a packet to travel between the source and the PoP",
                                             "isDeprecated": false,
                                             "name": "link_health_latency"
                                         },
@@ -5092,14 +5542,14 @@
                                             "name": "incident_id"
                                         },
                                         {
-                                            "deprecationReason": "use application_id/application_name instead",
+                                            "deprecationReason": "use application_id/application_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For Internet firewall, app for this event",
                                             "isDeprecated": true,
                                             "name": "application"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Application of the flow",
+                                            "description": "The name of the application associated with the flow",
                                             "isDeprecated": false,
                                             "name": "application_name"
                                         },
@@ -5122,7 +5572,7 @@
                                             "name": "socket_interface_id"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Unique Cato ID for the custom category",
                                             "isDeprecated": true,
                                             "name": "custom_categories"
@@ -5201,7 +5651,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "The name of the destination site",
                                             "isDeprecated": false,
                                             "name": "dest_site_name"
                                         },
@@ -5260,7 +5710,7 @@
                                             "name": "device_posture_profile"
                                         },
                                         {
-                                            "deprecationReason": "use device_posture_profile instead",
+                                            "deprecationReason": "use device_posture_profile instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Device posture profiles",
                                             "isDeprecated": true,
                                             "name": "device_posture_profiles"
@@ -5333,7 +5783,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "DLP fail mode",
+                                            "description": "Describes the behavior when the DLP system encounters a failure",
                                             "isDeprecated": false,
                                             "name": "dlp_fail_mode"
                                         },
@@ -5391,6 +5841,24 @@
                                             "isDeprecated": false,
                                             "name": "is_sinkhole"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The ID for the endpoint",
+                                            "isDeprecated": false,
+                                            "name": "endpoint_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The Endpoint Protection Engine that detected the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_engine_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The file operation when this event occurred",
+                                            "isDeprecated": false,
+                                            "name": "file_operation"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
@@ -5423,7 +5891,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "The vendor that identified the incident, such as Cato or Microsoft",
                                             "isDeprecated": false,
                                             "name": "vendor"
                                         },
@@ -5464,19 +5932,19 @@
                                             "name": "recommended_actions"
                                         },
                                         {
-                                            "deprecationReason": "use src_pid instead",
+                                            "deprecationReason": "use src_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_parent_pid instead",
+                                            "deprecationReason": "use src_process_parent_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "parent_pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_path instead",
+                                            "deprecationReason": "use src_process_path instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "process_path"
@@ -5493,12 +5961,96 @@
                                             "isDeprecated": false,
                                             "name": "out_of_band_access"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A Unique ID for the quarantined file",
+                                            "isDeprecated": false,
+                                            "name": "quarantine_uuid"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
                                             "isDeprecated": false,
                                             "name": "logged_in_user"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The profile assigned to the endpoint upon detection of the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_profile"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process command line",
+                                            "isDeprecated": false,
+                                            "name": "src_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The destination process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process command line",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "If policy is set to disinfect, return the result of this action",
+                                            "isDeprecated": false,
+                                            "name": "disinfect_result"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Indicate how many processes are part of this event",
+                                            "isDeprecated": false,
+                                            "name": "processes_count"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": "HTTP request method (ie. Get, Post)",
@@ -5573,7 +6125,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Cato App",
+                                            "description": "Cato application name",
                                             "isDeprecated": false,
                                             "name": "cato_app"
                                         },
@@ -5627,7 +6179,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Tenant Id",
+                                            "description": "Unique identifier for the tenant within a multi-tenant environment",
                                             "isDeprecated": false,
                                             "name": "tenant_id"
                                         },
@@ -5687,7 +6239,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data Classifiers",
+                                            "description": "Defines the scanning methods used by the DLP system",
                                             "isDeprecated": false,
                                             "name": "dlp_scan_types"
                                         },
@@ -5765,7 +6317,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Used Public IP",
+                                            "description": "Public source IP",
                                             "isDeprecated": false,
                                             "name": "public_ip"
                                         },
@@ -5936,6 +6488,54 @@
                                             "description": "Device Type",
                                             "isDeprecated": false,
                                             "name": "device_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Tenant Restriction Rule Name",
+                                            "isDeprecated": false,
+                                            "name": "tenant_restriction_rule_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Connection Origin",
+                                            "isDeprecated": false,
+                                            "name": "connection_origin"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Server IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_server_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Client IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_client_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "IoC Container Name",
+                                            "isDeprecated": false,
+                                            "name": "container_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "An external system identifier used for correlation between related Cato entities. Example: external ticket id that correlates Cato XDR stories.",
+                                            "isDeprecated": false,
+                                            "name": "correlation_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Precedence",
+                                            "isDeprecated": false,
+                                            "name": "precedence"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A list of labels providing additional context for the event",
+                                            "isDeprecated": false,
+                                            "name": "labels"
                                         }
                                     ],
                                     "fields": null,
@@ -6000,7 +6600,7 @@
                                     "description": null,
                                     "enumValues": [
                                         {
-                                            "deprecationReason": "use src_site_id/src_site_name instead",
+                                            "deprecationReason": "use src_site_id/src_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of site or user initiating the connection",
                                             "isDeprecated": true,
                                             "name": "src_site"
@@ -6024,7 +6624,7 @@
                                             "name": "user_id"
                                         },
                                         {
-                                            "deprecationReason": "use dest_site_id/dest_site_name instead",
+                                            "deprecationReason": "use dest_site_id/dest_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For WAN traffic, name of destination site or SDP user",
                                             "isDeprecated": true,
                                             "name": "dest_site"
@@ -6036,13 +6636,13 @@
                                             "name": "dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "please use src_site_id and dest_site_id instead. Planned end-of-life (EoL) date: June 30, 2025.",
                                             "description": "Source or destination site or remote user ID.\nThis field can only be used in filter.",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "src_or_dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": "use rule_name instead",
+                                            "deprecationReason": "use rule_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of security rule related to the event",
                                             "isDeprecated": true,
                                             "name": "rule"
@@ -6060,7 +6660,7 @@
                                             "name": "socket_interface"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name for the custom category defined in the Cato Management Application",
                                             "isDeprecated": true,
                                             "name": "custom_category"
@@ -6073,7 +6673,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host port",
+                                            "description": "Destination port",
                                             "isDeprecated": false,
                                             "name": "dest_port"
                                         },
@@ -6133,7 +6733,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "Destination IP address",
                                             "isDeprecated": false,
                                             "name": "dest_ip"
                                         },
@@ -6210,7 +6810,7 @@
                                             "name": "configured_host_name"
                                         },
                                         {
-                                            "deprecationReason": "use event_id instead",
+                                            "deprecationReason": "use event_id instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Cato Internal-use only",
                                             "isDeprecated": true,
                                             "name": "internalId"
@@ -6282,9 +6882,9 @@
                                             "name": "bgp_error_code"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "Planned end-of-life (EoL) date: April 15, 2025.",
                                             "description": "Description from Cato Management Application for BGP peer",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "bgp_peer_description"
                                         },
                                         {
@@ -6349,7 +6949,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data that measures the latency for a specific link",
+                                            "description": "Round Trip Delay in Milliseconds that it takes a packet to travel between the source and the PoP",
                                             "isDeprecated": false,
                                             "name": "link_health_latency"
                                         },
@@ -6504,14 +7104,14 @@
                                             "name": "incident_id"
                                         },
                                         {
-                                            "deprecationReason": "use application_id/application_name instead",
+                                            "deprecationReason": "use application_id/application_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For Internet firewall, app for this event",
                                             "isDeprecated": true,
                                             "name": "application"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Application of the flow",
+                                            "description": "The name of the application associated with the flow",
                                             "isDeprecated": false,
                                             "name": "application_name"
                                         },
@@ -6534,7 +7134,7 @@
                                             "name": "socket_interface_id"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Unique Cato ID for the custom category",
                                             "isDeprecated": true,
                                             "name": "custom_categories"
@@ -6613,7 +7213,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "The name of the destination site",
                                             "isDeprecated": false,
                                             "name": "dest_site_name"
                                         },
@@ -6672,7 +7272,7 @@
                                             "name": "device_posture_profile"
                                         },
                                         {
-                                            "deprecationReason": "use device_posture_profile instead",
+                                            "deprecationReason": "use device_posture_profile instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Device posture profiles",
                                             "isDeprecated": true,
                                             "name": "device_posture_profiles"
@@ -6745,7 +7345,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "DLP fail mode",
+                                            "description": "Describes the behavior when the DLP system encounters a failure",
                                             "isDeprecated": false,
                                             "name": "dlp_fail_mode"
                                         },
@@ -6803,6 +7403,24 @@
                                             "isDeprecated": false,
                                             "name": "is_sinkhole"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The ID for the endpoint",
+                                            "isDeprecated": false,
+                                            "name": "endpoint_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The Endpoint Protection Engine that detected the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_engine_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The file operation when this event occurred",
+                                            "isDeprecated": false,
+                                            "name": "file_operation"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
@@ -6835,7 +7453,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "The vendor that identified the incident, such as Cato or Microsoft",
                                             "isDeprecated": false,
                                             "name": "vendor"
                                         },
@@ -6876,19 +7494,19 @@
                                             "name": "recommended_actions"
                                         },
                                         {
-                                            "deprecationReason": "use src_pid instead",
+                                            "deprecationReason": "use src_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_parent_pid instead",
+                                            "deprecationReason": "use src_process_parent_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "parent_pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_path instead",
+                                            "deprecationReason": "use src_process_path instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "process_path"
@@ -6905,12 +7523,96 @@
                                             "isDeprecated": false,
                                             "name": "out_of_band_access"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A Unique ID for the quarantined file",
+                                            "isDeprecated": false,
+                                            "name": "quarantine_uuid"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
                                             "isDeprecated": false,
                                             "name": "logged_in_user"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The profile assigned to the endpoint upon detection of the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_profile"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process command line",
+                                            "isDeprecated": false,
+                                            "name": "src_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The destination process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process command line",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "If policy is set to disinfect, return the result of this action",
+                                            "isDeprecated": false,
+                                            "name": "disinfect_result"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Indicate how many processes are part of this event",
+                                            "isDeprecated": false,
+                                            "name": "processes_count"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": "HTTP request method (ie. Get, Post)",
@@ -6985,7 +7687,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Cato App",
+                                            "description": "Cato application name",
                                             "isDeprecated": false,
                                             "name": "cato_app"
                                         },
@@ -7039,7 +7741,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Tenant Id",
+                                            "description": "Unique identifier for the tenant within a multi-tenant environment",
                                             "isDeprecated": false,
                                             "name": "tenant_id"
                                         },
@@ -7099,7 +7801,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data Classifiers",
+                                            "description": "Defines the scanning methods used by the DLP system",
                                             "isDeprecated": false,
                                             "name": "dlp_scan_types"
                                         },
@@ -7177,7 +7879,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Used Public IP",
+                                            "description": "Public source IP",
                                             "isDeprecated": false,
                                             "name": "public_ip"
                                         },
@@ -7348,6 +8050,54 @@
                                             "description": "Device Type",
                                             "isDeprecated": false,
                                             "name": "device_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Tenant Restriction Rule Name",
+                                            "isDeprecated": false,
+                                            "name": "tenant_restriction_rule_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Connection Origin",
+                                            "isDeprecated": false,
+                                            "name": "connection_origin"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Server IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_server_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Client IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_client_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "IoC Container Name",
+                                            "isDeprecated": false,
+                                            "name": "container_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "An external system identifier used for correlation between related Cato entities. Example: external ticket id that correlates Cato XDR stories.",
+                                            "isDeprecated": false,
+                                            "name": "correlation_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Precedence",
+                                            "isDeprecated": false,
+                                            "name": "precedence"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A list of labels providing additional context for the event",
+                                            "isDeprecated": false,
+                                            "name": "labels"
                                         }
                                     ],
                                     "fields": null,
@@ -7628,7 +8378,7 @@
                                     "description": null,
                                     "enumValues": [
                                         {
-                                            "deprecationReason": "use src_site_id/src_site_name instead",
+                                            "deprecationReason": "use src_site_id/src_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of site or user initiating the connection",
                                             "isDeprecated": true,
                                             "name": "src_site"
@@ -7652,7 +8402,7 @@
                                             "name": "user_id"
                                         },
                                         {
-                                            "deprecationReason": "use dest_site_id/dest_site_name instead",
+                                            "deprecationReason": "use dest_site_id/dest_site_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For WAN traffic, name of destination site or SDP user",
                                             "isDeprecated": true,
                                             "name": "dest_site"
@@ -7664,13 +8414,13 @@
                                             "name": "dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "please use src_site_id and dest_site_id instead. Planned end-of-life (EoL) date: June 30, 2025.",
                                             "description": "Source or destination site or remote user ID.\nThis field can only be used in filter.",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "src_or_dest_site_id"
                                         },
                                         {
-                                            "deprecationReason": "use rule_name instead",
+                                            "deprecationReason": "use rule_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name of security rule related to the event",
                                             "isDeprecated": true,
                                             "name": "rule"
@@ -7688,7 +8438,7 @@
                                             "name": "socket_interface"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Name for the custom category defined in the Cato Management Application",
                                             "isDeprecated": true,
                                             "name": "custom_category"
@@ -7701,7 +8451,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host port",
+                                            "description": "Destination port",
                                             "isDeprecated": false,
                                             "name": "dest_port"
                                         },
@@ -7761,7 +8511,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "Destination IP address",
                                             "isDeprecated": false,
                                             "name": "dest_ip"
                                         },
@@ -7838,7 +8588,7 @@
                                             "name": "configured_host_name"
                                         },
                                         {
-                                            "deprecationReason": "use event_id instead",
+                                            "deprecationReason": "use event_id instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Cato Internal-use only",
                                             "isDeprecated": true,
                                             "name": "internalId"
@@ -7910,9 +8660,9 @@
                                             "name": "bgp_error_code"
                                         },
                                         {
-                                            "deprecationReason": null,
+                                            "deprecationReason": "Planned end-of-life (EoL) date: April 15, 2025.",
                                             "description": "Description from Cato Management Application for BGP peer",
-                                            "isDeprecated": false,
+                                            "isDeprecated": true,
                                             "name": "bgp_peer_description"
                                         },
                                         {
@@ -7977,7 +8727,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data that measures the latency for a specific link",
+                                            "description": "Round Trip Delay in Milliseconds that it takes a packet to travel between the source and the PoP",
                                             "isDeprecated": false,
                                             "name": "link_health_latency"
                                         },
@@ -8132,14 +8882,14 @@
                                             "name": "incident_id"
                                         },
                                         {
-                                            "deprecationReason": "use application_id/application_name instead",
+                                            "deprecationReason": "use application_id/application_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "For Internet firewall, app for this event",
                                             "isDeprecated": true,
                                             "name": "application"
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Application of the flow",
+                                            "description": "The name of the application associated with the flow",
                                             "isDeprecated": false,
                                             "name": "application_name"
                                         },
@@ -8162,7 +8912,7 @@
                                             "name": "socket_interface_id"
                                         },
                                         {
-                                            "deprecationReason": "use custom_category_id/custom_category_name instead",
+                                            "deprecationReason": "use custom_category_id/custom_category_name instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Unique Cato ID for the custom category",
                                             "isDeprecated": true,
                                             "name": "custom_categories"
@@ -8241,7 +8991,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "For Internet traffic, destination host IP address",
+                                            "description": "The name of the destination site",
                                             "isDeprecated": false,
                                             "name": "dest_site_name"
                                         },
@@ -8300,7 +9050,7 @@
                                             "name": "device_posture_profile"
                                         },
                                         {
-                                            "deprecationReason": "use device_posture_profile instead",
+                                            "deprecationReason": "use device_posture_profile instead. Planned end-of-life (EoL) date: May 1, 2025.",
                                             "description": "Device posture profiles",
                                             "isDeprecated": true,
                                             "name": "device_posture_profiles"
@@ -8373,7 +9123,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "DLP fail mode",
+                                            "description": "Describes the behavior when the DLP system encounters a failure",
                                             "isDeprecated": false,
                                             "name": "dlp_fail_mode"
                                         },
@@ -8431,6 +9181,24 @@
                                             "isDeprecated": false,
                                             "name": "is_sinkhole"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The ID for the endpoint",
+                                            "isDeprecated": false,
+                                            "name": "endpoint_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The Endpoint Protection Engine that detected the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_engine_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The file operation when this event occurred",
+                                            "isDeprecated": false,
+                                            "name": "file_operation"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
@@ -8463,7 +9231,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": null,
+                                            "description": "The vendor that identified the incident, such as Cato or Microsoft",
                                             "isDeprecated": false,
                                             "name": "vendor"
                                         },
@@ -8504,19 +9272,19 @@
                                             "name": "recommended_actions"
                                         },
                                         {
-                                            "deprecationReason": "use src_pid instead",
+                                            "deprecationReason": "use src_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_parent_pid instead",
+                                            "deprecationReason": "use src_process_parent_pid instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "parent_pid"
                                         },
                                         {
-                                            "deprecationReason": "use src_process_path instead",
+                                            "deprecationReason": "use src_process_path instead. Planned end-of-life (EoL) date: March 1, 2025.",
                                             "description": null,
                                             "isDeprecated": true,
                                             "name": "process_path"
@@ -8533,12 +9301,96 @@
                                             "isDeprecated": false,
                                             "name": "out_of_band_access"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A Unique ID for the quarantined file",
+                                            "isDeprecated": false,
+                                            "name": "quarantine_uuid"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": null,
                                             "isDeprecated": false,
                                             "name": "logged_in_user"
                                         },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The profile assigned to the endpoint upon detection of the malware",
+                                            "isDeprecated": false,
+                                            "name": "epp_profile"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process command line",
+                                            "isDeprecated": false,
+                                            "name": "src_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Source process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "src_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "The destination process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process command line",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_cmdline"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent process ID",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_pid"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Destination process parent file path",
+                                            "isDeprecated": false,
+                                            "name": "dest_process_parent_path"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "If policy is set to disinfect, return the result of this action",
+                                            "isDeprecated": false,
+                                            "name": "disinfect_result"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Indicate how many processes are part of this event",
+                                            "isDeprecated": false,
+                                            "name": "processes_count"
+                                        },
                                         {
                                             "deprecationReason": null,
                                             "description": "HTTP request method (ie. Get, Post)",
@@ -8613,7 +9465,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Cato App",
+                                            "description": "Cato application name",
                                             "isDeprecated": false,
                                             "name": "cato_app"
                                         },
@@ -8667,7 +9519,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Tenant Id",
+                                            "description": "Unique identifier for the tenant within a multi-tenant environment",
                                             "isDeprecated": false,
                                             "name": "tenant_id"
                                         },
@@ -8727,7 +9579,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Data Classifiers",
+                                            "description": "Defines the scanning methods used by the DLP system",
                                             "isDeprecated": false,
                                             "name": "dlp_scan_types"
                                         },
@@ -8805,7 +9657,7 @@
                                         },
                                         {
                                             "deprecationReason": null,
-                                            "description": "Used Public IP",
+                                            "description": "Public source IP",
                                             "isDeprecated": false,
                                             "name": "public_ip"
                                         },
@@ -8976,6 +9828,54 @@
                                             "description": "Device Type",
                                             "isDeprecated": false,
                                             "name": "device_type"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Tenant Restriction Rule Name",
+                                            "isDeprecated": false,
+                                            "name": "tenant_restriction_rule_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Connection Origin",
+                                            "isDeprecated": false,
+                                            "name": "connection_origin"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Server IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_server_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Translated Client IP",
+                                            "isDeprecated": false,
+                                            "name": "translated_client_ip"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "IoC Container Name",
+                                            "isDeprecated": false,
+                                            "name": "container_name"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "An external system identifier used for correlation between related Cato entities. Example: external ticket id that correlates Cato XDR stories.",
+                                            "isDeprecated": false,
+                                            "name": "correlation_id"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "Precedence",
+                                            "isDeprecated": false,
+                                            "name": "precedence"
+                                        },
+                                        {
+                                            "deprecationReason": null,
+                                            "description": "A list of labels providing additional context for the event",
+                                            "isDeprecated": false,
+                                            "name": "labels"
                                         }
                                     ],
                                     "fields": null,
@@ -9066,6 +9966,24 @@
             },
             "varName": "timeFrame"
         },
+        "useDefaultSizeBucket": {
+            "defaultValue": "false",
+            "description": "In case we want to have the default size bucket (from properties)",
+            "id_str": "data___useDefaultSizeBucket",
+            "name": "useDefaultSizeBucket",
+            "path": "data.useDefaultSizeBucket",
+            "requestStr": "$useDefaultSizeBucket:Boolean ",
+            "required": false,
+            "responseStr": "useDefaultSizeBucket:$useDefaultSizeBucket ",
+            "type": {
+                "kind": [
+                    "SCALAR"
+                ],
+                "name": "Boolean",
+                "non_null": false
+            },
+            "varName": "useDefaultSizeBucket"
+        },
         "withMissingData": {
             "defaultValue": "false",
             "description": "If false, the data field will be set to '0' for buckets with no reported data. Otherwise it will be set to -1",
@@ -9207,6 +10125,24 @@
                                             },
                                             "varName": "perSecond"
                                         },
+                                        "data___useDefaultSizeBucket": {
+                                            "defaultValue": "false",
+                                            "description": "In case we want to have the default size bucket (from properties)",
+                                            "id_str": "data___useDefaultSizeBucket",
+                                            "name": "useDefaultSizeBucket",
+                                            "path": "data.useDefaultSizeBucket",
+                                            "requestStr": "$useDefaultSizeBucket:Boolean ",
+                                            "required": false,
+                                            "responseStr": "useDefaultSizeBucket:$useDefaultSizeBucket ",
+                                            "type": {
+                                                "kind": [
+                                                    "SCALAR"
+                                                ],
+                                                "name": "Boolean",
+                                                "non_null": false
+                                            },
+                                            "varName": "useDefaultSizeBucket"
+                                        },
                                         "data___withMissingData": {
                                             "defaultValue": "false",
                                             "description": "If false, the data field will be set to '0' for buckets with no reported data. Otherwise it will be set to -1",
@@ -9699,6 +10635,7 @@
         },
         "perSecond": "Boolean",
         "timeFrame": "TimeFrame",
+        "useDefaultSizeBucket": "Boolean",
         "withMissingData": "Boolean"
     }
 }