cwp — Cloud Workload Protection
cwp · type
ReverseShell
23 fields
| Field | Type | Description |
|---|---|---|
| Id | integer | ID primary key |
| Uuid | string | CWPP UUID |
| Quuid | string | Server ID |
| Hostip | string | Host private IP address |
| DstIp | string | Target IP |
| DstPort | integer | Target port |
| ProcessName | string | Process name |
| FullPath | string | Process path |
| CmdLine | string | Command details |
| UserName | string | Executing user |
| UserGroup | string | Executing user group |
| ParentProcName | string | Parent process name |
| ParentProcUser | string | Parent process user |
| ParentProcGroup | string | Parent process user group |
| ParentProcPath | string | Parent process path |
| Status | integer | Processing status: 0 - pending; 2 - allowlisted; 3 - processed; 4 - ignored |
| CreateTime | string | Occurrence time |
| MachineName | string | Server name |
| ProcTree | string | Process tree |
| DetectBy | integer | Detection method: 0: behavior analysis; 1 command feature detection |
| MachineExtraInfo | MachineExtraInfo | Host Additional Information |
| Pid | integer | Process ID |
| RiskLevel | integer | Threat level: 0 - medium-risk; 1 - high-risk |