rangeraudit
March 22, 2023 · View on GitHub
Expression
product = "rangeraudit"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| app-activity | app | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| resource | Default | ✓ | |||
| dest_host | Default | ✓ | |||
| user | Default | ✓ | |||
| object | Default | ✓ | |||
| app-login | resource | Default | ✓ | ||
| database-query | db_name | ||||
| resource | |||||
| file-read | access | Legacy | ✓ | ||
| dest_host | Legacy | ✓ | |||
| file-write | access | Legacy | ✓ | ||
| dest_host | Legacy | ✓ |