ca privileged access manager server control

Expression

product = "ca privileged access manager server control"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
endpoint-authentication	user_ou	Default			✓
	src_ip	Default		✓
	protocol	Default			✓
	group_name	Default			✓
	group_ou	Default			✓
	event_name	Default			✓
	dest_port	Default			✓
endpoint-login	user_ou	Default			✓
	src_ip	Default		✓
	protocol	Default			✓
	group_name	Default			✓
	group_ou	Default			✓
	event_name	Default			✓
	dest_port	Default			✓
user-switch	user_ou
	src_ip
	protocol
	group_name
	group_ou
	event_name
	src_host
	dest_port