General Information
Preference Documentation
Log Data Documentation
- Log Data Examples
- Interesting Types of Events
  - SSH Logins and Activity
Related Tech and Configurations
- macOS
Compliance
- cmdReporter and US Govt Standards Details
  - How cmdReporter Meets CMMC, DFARS, and NIST 800-171 Requirements
  - NIST 800-53r4 (high) controls met by using cmdReporter
- Security Baseline Reporting Preferences
  - Security Benchmark Reporting Logs

HARDWARE_EVENT

Eric Metzger

Modified on: Wed, 16 Oct, 2019 at 5:15 PM

{
  "_event_score": 0,
  "hardware_event_info": {
    "device_attributes": {
      "IOCFPlugInTypes": {
        "9dc7b780-9ec0-11d4-a54f-000a27052861": "IOUSBHostFamily.kext/Contents/PlugIns/IOUSBLib.bundle"
      },
      "IOClassNameOverride": "IOUSBDevice",
      "IOPowerManagement": {
        "CapabilityFlags": 65536,
        "CurrentPowerState": 3,
        "DevicePowerState": 0,
        "DriverPowerState": 3,
        "MaxPowerState": 4
      },
      "Removable": "no",
      "USB Product Name": "Hub Controller",
      "USB Vendor Name": "Microchip Tech",
      "iSerialNumber": 0
    },
    "device_class": "IOUSBDevice",
    "device_name": "Hub Controller",
    "device_status": "connected"
  },
  "header": {
    "event_name": "HARDWARE_EVENT",
    "time_seconds_epoch": 1571015730
  },
  "host_info": {
    "host_name": "Dan_macbook_pro",
    "host_uuid": "3F6E4B3A-9285-4E7E-9A0C-C3B62DC379DF",
    "osversion": "Version 10.15 (Build 19A582a)",
    "primary_mac_address": "38:f9:e8:15:5a:82",
    "serial_number": "C03XY889JHG3"
  }
}