peripheral_storage-activity
April 24, 2024 · View on GitHub
Description
An activity on a peripheral storage device
Parameters
| Parameter | Value |
|---|---|
| Subject | peripheral_storage |
| Activity | activity |
| Activity Type | peripheral_storage-activity |
| Pretty Name | Peripheral_storage Activity |
Legacy Names
| Success | Fail |
|---|---|
| usb-activity | failed-usb-activity |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
peripheral_storage-activity:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| operation | ✓ | ✓ | |
| cid | ✓ |
peripheral_storage-activity:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| failure_reason | ✓ | ||
| operation | ✓ | ✓ | |
| cid | ✓ |