share-access
September 3, 2025 · View on GitHub
Description
A network share was accessed
Parameters
| Parameter | Value |
|---|---|
| Subject | share |
| Activity | access |
| Activity Type | share-access |
| Pretty Name | Share Access |
Legacy Names
| Success | Fail |
|---|---|
| share-access | share-access-denied |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
share-access:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_port | ✓ | ||
| file_path | ✓ | ||
| src_zone | |||
| dest_zone |
share-access:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_port | ✓ | ||
| file_path | ✓ | ||
| failure_code | ✓ | ||
| src_zone | |||
| failure_reason | ✓ | ||
| dest_zone |