{
    "$schema": "http://json-schema.org/draft-07/schema#",
    "$id": "#HostAgent",
    "description": "A software agent or sensor that runs on a host/endpoint.",
    "type": "object",
    "allOf": [
        {
            "$ref": "#Entity"
        },
        {
            "properties": {
                "function": {
                    "description": "The function of sensor/agent",
                    "type": "array",
                    "items": {
                        "type": "string",
                        "enum": [
                            "endpoint-compliance",
                            "endpoint-configuration",
                            "endpoint-protection",
                            "anti-malware",
                            "DLP",
                            "FIM",
                            "host-firewall",
                            "HIDS",
                            "log-monitor",
                            "activity-monitor",
                            "vulnerability-detection",
                            "container-security",
                            "other"
                        ]
                    }
                },
                "lastSeenOn": {
                    "description": "The timestamp (in milliseconds since epoch) when the device either last checked in or was scanned.",
                    "type": ["number", "null"],
                    "format": "date-time"
                }
            },
            "required": ["function", "lastSeenOn"]
        }
    ]
}