moveit transfer

Expression

product = "moveit transfer"

Fields

Field	Core	Detection	Informational
src_ip		✓
operation			✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	file_ext	Default			✓
	user_id	Default			✓
	additional_info	Default			✓
	file_name	Default			✓
	dest_ip	Default		✓
	file_id	Default			✓
	file_dir	Default			✓
	dest_host	Default		✓
	user_agent	Default			✓
app-authentication
app-login	src_ip	Default		✓
	user_id	Default			✓
	src_host	Default		✓
	user_agent	Default			✓
file-delete	bytes
	file_id
file-download	bytes	Legacy		✓
	file_id
file-read	src_ip
	user_id
	additional_info
	src_host	Legacy		✓
	user_agent
file-upload	bytes
	file_id
file-write	src_ip
	user_id
	additional_info
	bytes	Legacy		✓
	file_id
	src_host
	user_agent
group-member-add	dest_user_id
group-member-remove	dest_user_id
user-password-modify	dest_user_id	Default			✓