citrix virtual desktop
March 22, 2023 · View on GitHub
Expression
product = "citrix virtual desktop"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ | ||
| login_type_text | ✓ | ||
| catalog | ✓ | ||
| dest_ip | ✓ | ||
| user_sid | ✓ | ||
| src_host | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| endpoint-login |