user-token-revoke
May 20, 2025 · View on GitHub
Description
A user token was revoked in a process
Parameters
| Parameter | Value |
|---|---|
| Subject | user |
| Activity | token-revoke |
| Activity Type | user-token-revoke |
| Pretty Name | User Token Revoke |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
user-token-revoke:success
There are no fields for this activity type.
user-token-revoke:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| failure_reason | ✓ |