{
  "idx_to_label": {
    "0": "aws|cloudtrail",
    "1": "azure|activitylogs",
    "2": "azure|auditlogs",
    "3": "azure|pim",
    "4": "azure|riskdetection",
    "5": "azure|signinlogs",
    "6": "bitbucket|audit",
    "7": "category:antivirus",
    "8": "category:database",
    "9": "category:dns_query",
    "10": "cisco|duo",
    "11": "gcp|gcp.audit",
    "12": "gcp|google_workspace.admin",
    "13": "gcp|google_workspace.login",
    "14": "github|audit",
    "15": "jvm|application",
    "16": "kubernetes|audit",
    "17": "linux",
    "18": "linux|auditd",
    "19": "linux|clamav",
    "20": "linux|file_event",
    "21": "linux|guacamole",
    "22": "linux|network_connection",
    "23": "linux|process_creation",
    "24": "linux|sshd",
    "25": "linux|syslog",
    "26": "linux|vsftpd",
    "27": "m365|audit",
    "28": "m365|exchange",
    "29": "m365|threat_management",
    "30": "nodejs|application",
    "31": "okta|okta",
    "32": "onelogin|onelogin.events",
    "33": "opencanary|application",
    "34": "python|application",
    "35": "rpc_firewall|application",
    "36": "ruby_on_rails|application",
    "37": "spring|application",
    "38": "sql|application",
    "39": "velocity|application",
    "40": "windows|process_creation",
    "41": "windows|security",
    "42": "windows|sysmon"
  },
  "labels": [
    "aws|cloudtrail",
    "azure|activitylogs",
    "azure|auditlogs",
    "azure|pim",
    "azure|riskdetection",
    "azure|signinlogs",
    "bitbucket|audit",
    "category:antivirus",
    "category:database",
    "category:dns_query",
    "cisco|duo",
    "gcp|gcp.audit",
    "gcp|google_workspace.admin",
    "gcp|google_workspace.login",
    "github|audit",
    "jvm|application",
    "kubernetes|audit",
    "linux",
    "linux|auditd",
    "linux|clamav",
    "linux|file_event",
    "linux|guacamole",
    "linux|network_connection",
    "linux|process_creation",
    "linux|sshd",
    "linux|syslog",
    "linux|vsftpd",
    "m365|audit",
    "m365|exchange",
    "m365|threat_management",
    "nodejs|application",
    "okta|okta",
    "onelogin|onelogin.events",
    "opencanary|application",
    "python|application",
    "rpc_firewall|application",
    "ruby_on_rails|application",
    "spring|application",
    "sql|application",
    "velocity|application",
    "windows|process_creation",
    "windows|security",
    "windows|sysmon"
  ]
}