password-checkout
April 24, 2024 · View on GitHub
Description
A password was checked out from a vault, a checkout is a one timed access of a password, that blocks other users from accessing it at that time
Parameters
| Parameter | Value |
|---|---|
| Subject | password |
| Activity | checkout |
| Activity Type | password-checkout |
| Pretty Name | Password Checkout |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
password-checkout:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| local_user_name | |||
| src_host | ✓ | ||
| safe_value | ✓ |
password-checkout:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| local_user_name | |||
| failure_reason | ✓ | ||
| src_host | ✓ | ||
| safe_value | ✓ |