identitynow

Expression

product = "identitynow"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	src_ip	Default		✓
	operation_type	Default			✓
	additional_info	Default			✓
	fingerprint	Default			✓
	event_name	Default			✓
	event_subtype	Default			✓
	src_host	Default		✓
app-authentication	src_ip	Default		✓
	operation_type	Default			✓
	additional_info	Default			✓
	fingerprint	Default			✓
	event_name	Default			✓
	event_subtype	Default			✓
	src_host	Default		✓
	operation	Default			✓
app-login	src_ip	Default		✓
	operation_type	Default			✓
	additional_info	Default			✓
	fingerprint	Default			✓
	event_name	Default			✓
	event_subtype	Default			✓
	src_host	Default		✓
	operation	Default			✓
user-modify	src_ip
	additional_info
	local_user_name
	fingerprint
	src_host	Legacy			✓
	event_subtype
	user	Legacy	✓
	operation
user-password-modify	src_ip	Default		✓
	dest_user_ou	Default			✓
	operation_type	Default			✓
	event_name	Default			✓
	src_host	Default		✓
	operation	Default			✓
user-unlock	src_ip
	additional_info
	local_user_name
	fingerprint
	src_host
	event_subtype
	user	Legacy	✓	✓
	operation