access_method
actions_taken
app_activity
app_activity_category
app_stack
bgp_peer_description
bgp_suberror_code
cato_app
classification
collaborator_name
collaborators
confidence_level
criticality
dest_group_id 
dest_group_name
detection_stage
directory_host_name
disinfect_result
edr_category
failure_reason
file_operation
incident_aggregation
incident_id
is_admin
is_admin_activity
is_managed
link_health_pkt_loss- W39
logged_in_user
network_rule
notification_api_error
notification_description
object_id 
object_name
object_type
out_of_band_access
processes_count
prompt_action
quarantine_folder_path
quarantine_uuid
reference_url
sam_account_name
sharing_scope
socket_interface_id
threat_confidence
threat_score
title
tls_certificate_error
trust_type
tunnel_ip_protocol
tunnel_protocol
user_object_id
user_principal_name
user_reference_id
vendor_collaborator_id
vendor_device_id
vendor_device_name
vendor_event_id
vendor_user_id
windows_domain_name