audit_policy-modify
March 22, 2023 · View on GitHub
Description
An audit policy was modified
Parameters
| Parameter | Value |
|---|---|
| Subject | audit_policy |
| Activity | modify |
| Activity Type | audit_policy-modify |
| Pretty Name | Audit_policy Modify |
Legacy Names
| Success | Fail |
|---|---|
| audit-policy-change | audit-policy-change |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
audit_policy-modify:success
There are no fields for this activity type.
audit_policy-modify:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| failure_reason | ✓ |