Security ContentExabeam Security Content in the Legacy Structure

Enrichment refers to adding contextual information to an event that is otherwise not already parsed or not available in the log.

Most enrichment adds new values, modifies them, or creates new fields based on existing fields or context table lookups.