officescan

Expression

product = "officescan"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
http-session	src_host	Default		✓
	operation	Default			✓
peripheral_storage-activity	device_product				✓
	device_pid				✓
	device_description				✓
	device_class				✓
	device_vendor				✓
	device_vid				✓