centrify authentication service

Expression

product = "centrify authentication service"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
endpoint-authentication	process_id	Default			✓
	protocol	Default			✓
	user_id	Default			✓
	additional_info	Default			✓
	event_code	Default			✓
	dest_ip	Default		✓
	event_name	Default			✓
endpoint-login	src_ip	Default		✓
	process_id	Default			✓
	protocol	Default			✓
	additional_info	Default			✓
	user_id	Default			✓
	process_name	Default			✓
	event_name	Default			✓
	src_host	Default		✓
user-password-reset	user_id
	additional_info
	event_code
	event_name
	src_host