policy-modify
July 31, 2024 · View on GitHub
Description
The content of a security policy document was changed
Parameters
| Parameter | Value |
|---|---|
| Subject | policy |
| Activity | modify |
| Activity Type | policy-modify |
| Pretty Name | Policy Modify |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
policy-modify:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| domain | ✓ | ||
| policy | ✓ |
policy-modify:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| domain | ✓ | ||
| failure_reason | ✓ | ||
| policy | ✓ |