citrix sharefile
October 17, 2024 · View on GitHub
Expression
product = "citrix sharefile"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ | ||
| country_code | ✓ | ||
| uri_path | ✓ | ||
| additional_info | ✓ | ||
| event_code | ✓ | ||
| domain | ✓ | ||
| action | ✓ | ||
| fallback_user_name | |||
| domain_user_name | |||
| company | ✓ | ||
| user | ✓ | ||
| operation | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| app-activity | file_path | Default | ✓ | ||
| file_ext | Default | ✓ | |||
| file_name | Default | ✓ | |||
| file_dir | Default | ✓ | |||
| app-login | |||||
| file-download | |||||
| file-share | app | Default | ✓ | ||
| operation | Default | ✓ | |||
| target | Default | ✓ | |||
| file-upload |