endpoint-policy-verify
March 22, 2023 · View on GitHub
Description
An endpoint policy was verified
Parameters
| Parameter | Value |
|---|---|
| Subject | endpoint |
| Activity | policy-verify |
| Activity Type | endpoint-policy-verify |
| Pretty Name | Endpoint Policy Verify |
Legacy Names
| Success | Fail |
|---|---|
| nac-logon | nac-failed-logon |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
endpoint-policy-verify:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ |
endpoint-policy-verify:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ | ||
| failure_code | ✓ | ||
| failure_reason | ✓ |