oracle access management

Expression

product = "oracle access management"

Fields

Field	Core	Detection	Informational
src_ip			✓
additional_info			✓
resource			✓
operation			✓
object			✓
target			✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-authentication	file_path	Default			✓
	file_ext	Default			✓
	file_name	Default			✓
	service_name	Default			✓
	event_code	Default			✓
	dest_ip	Default		✓
	file_dir	Default			✓
	dest_host	Default		✓
	event_name	Default			✓
	src_host	Default		✓
app-login	domain	Default			✓
app-logout	domain	Default			✓
app-notification	domain	Default			✓
	domain_user_name
	user	Default		✓