policy-disable
March 22, 2023 · View on GitHub
Description
The enforcement status of a security policy was changed to disabled
Parameters
| Parameter | Value |
|---|---|
| Subject | policy |
| Activity | disable |
| Activity Type | policy-disable |
| Pretty Name | Policy Disable |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
policy-disable:success
There are no fields for this activity type.
policy-disable:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| failure_reason | ✓ |