microsoft rras
March 22, 2023 · View on GitHub
Expression
product = "microsoft rras"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| session_id | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| vpn-authentication | |||||
| vpn-login | |||||
| vpn-logout | bytes_out | Legacy | ✓ | ||
| bytes_in | |||||
| session_sec | |||||
| session_min |