# Deep Security Manager REST API

## Name: antiMalwareEvent

XML Example:
    <antiMalwareEvent>
      <antiMalwareConfigID>xsd:int</antiMalwareConfigID>
      <antiMalwareEventID>xsd:long</antiMalwareEventID>
      <errorCode>xsd:int</errorCode>
      <hostID>xsd:int</hostID>
      <hostName>xsd:string</hostName>
      <infectedFilePath>xsd:string</infectedFilePath>
      <infectionSource>xsd:string</infectionSource>
      <logTime>xsd:datetime</logTime>
      <malwareName>xsd:string</malwareName>
      <malwareType>GENERAL | SPYWARE</malwareType>
      <origin>UNKNOWN | AGENT | GUESTAGENT | APPLIANCEAGENT | MANAGER</origin>
      <protocol>xsd:int</protocol>
      <quarantineRecordID>xsd:int</quarantineRecordID>
      <scanAction1>xsd:int</scanAction1>
      <scanAction2>xsd:int</scanAction2>
      <scanResultAction1>xsd:int</scanResultAction1>
      <scanResultAction2>xsd:int</scanResultAction2>
      <scanType>REALTIME | MANUAL | SCHEDULED | QUICK</scanType>
      zero or N[<spywareItems>antiMalwareSpywareItem</spywareItems>]
      <summaryScanResult>xsd:string</summaryScanResult>
      <tags>xsd:string</tags>
    </antiMalwareEvent>
| JSON Example:
    {"antiMalwareEvent":
     {
       "antiMalwareConfigID": Number,
       "antiMalwareEventID": Number,
       "errorCode": Number,
       "hostID": Number,
       "hostName": String,
       "infectedFilePath": String,
       "infectionSource": String,
       "logTime": Date,
       "malwareName": String,
       "malwareType": 'GENERAL' | 'SPYWARE',
       "origin": 'UNKNOWN' | 'AGENT' | 'GUESTAGENT' | 'APPLIANCEAGENT' | 'MANAGER',
       "protocol": Number,
       "quarantineRecordID": Number,
       "scanAction1": Number,
       "scanAction2": Number,
       "scanResultAction1": Number,
       "scanResultAction2": Number,
       "scanType": 'REALTIME' | 'MANUAL' | 'SCHEDULED' | 'QUICK',
       "spywareItems": [antiMalwareSpywareItem],
       "summaryScanResult": String,
       "tags": String,
     }
    }

Elements
Name | Type | Required | Nillable | Default Value | Description
--- | --- | --- | --- | --- | ---
antiMalwareConfigID | xsd:int | false | false |  | The primary key of AntiMalwareID.
antiMalwareEventID | xsd:long | false | false |  | The primary key of the event entry.
errorCode | xsd:int | false | false |  | The VSAPI error code indicates the reason of the actions of failure.
hostID | xsd:int | false | false |  | The id of the host the event was recorded on
hostName | xsd:string | false | false |  | The host name of the event was recorded on
infectedFilePath | xsd:string | false | false |  | The infected file full path
infectionSource | xsd:string | false | false |  | The source computer of the infection
logTime | xsd:datetime | false | false |  | The time of the event as recorded by the agent.
malwareName | xsd:string | false | false |  | The name of the malware
malwareType | GENERAL | SPYWARE | false | false |  | The Malware Type of Event
origin | UNKNOWN | AGENT | GUESTAGENT | APPLIANCEAGENT | MANAGER | false | false |  | the location where the event originated
protocol | xsd:int | false | false |  | The protocols: Local Files(0), Network shared folder(1), etc. However, currently Agent only support local files.
quarantineRecordID | xsd:int | false | false |  | The Record ID referring to the record in QuarantineFile Table
scanAction1 | xsd:int | false | false |  | The actual first scan action being taken: e.g. Pass, Delete, Quarantined...etc
scanAction2 | xsd:int | false | false |  | The actual second scan action being taken: e.g. Pass, Delete, Quarantined...etc
scanResultAction1 | xsd:int | false | false |  | The result of the first scan action: represent whether the action is successful (0) or failed (Error Code)
scanResultAction2 | xsd:int | false | false |  | The result of the second scan action: represent whether the action is successful (0) or failed (Error Code)
scanType | REALTIME | MANUAL | SCHEDULED | QUICK | false | false |  | The scan types include Real time, Manual, Scheduled, Quick etc.
spywareItems | zero or N[antiMalwareSpywareItem] | false | false |  | Lists of spyware items if this is a spyware event.
summaryScanResult | xsd:string | false | false |  | Scan result description.
tags | xsd:string | false | false |  | the event's tags.

Copyright © 2015 Trend Micro Inc. All Rights Reserved.