HostAgent.json

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$id": "#HostAgent",
  "description": "A software agent or sensor that runs on a host/endpoint.",
  "type": "object",
  "allOf": [
    {
      "$ref": "#Entity"
    },
    {
      "properties": {
        "function": {
          "description": "The function of sensor/agent",
          "type": "array",
          "items": {
            "type": "string",
            "enum": [
              "endpoint-compliance",
              "endpoint-configuration",
              "endpoint-protection",
              "anti-malware",
              "DLP",
              "FIM",
              "host-firewall",
              "HIDS",
              "log-monitor",
              "activity-monitor",
              "vulnerability-detection",
              "container-security",
              "other"
            ]
          }
        },
        "lastSeenOn": {
          "description": "The timestamp (in milliseconds since epoch) when the device either last checked in or was scanned.",
          "type": ["number", "null"],
          "format": "date-time"
        }
      },
      "required": ["function", "lastSeenOn"]
    }
  ]
}