egnyte

Expression

product = "egnyte"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-authentication	additional_info	Default			✓
	domain	Default			✓
	operation	Default			✓
app-login	app	Default			✓
	src_ip	Default		✓
	event_name	Default			✓
	event_subtype	Default			✓
	operation	Default			✓
	dproc	Default			✓
file-permission-modify	access	Legacy		✓
	service_name				✓
	domain				✓
	domain_user_name
	user	Legacy	✓	✓
	object				✓
group-member-add	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓	✓
	operation
group-member-remove	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓	✓
	operation
user-create	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓	✓
	operation
user-delete	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓	✓
	operation
user-disable	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓	✓
	operation
user-enable	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓	✓
	operation
user-mfa-disable	additional_info	Default			✓
	domain	Default			✓
	domain_user_name
	user	Default		✓
	operation	Default			✓
user-mfa-enable	additional_info	Default			✓
	domain	Default			✓
	domain_user_name
	user	Default		✓
	operation	Default			✓
user-modify	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓
	operation
user-password-modify	additional_info	Default			✓
	domain	Default			✓
	domain_user_name
	user	Default		✓
	operation	Default			✓
user-password-reset	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓	✓
	operation
user-permission-modify	additional_info
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓
	operation