rightcrowd
October 15, 2025 · View on GitHub
Expression
product = "rightcrowd"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ | ||
| site_name | ✓ | ||
| badge_reader | ✓ | ||
| event_code | ✓ | ||
| badge_status | ✓ | ||
| event_name | ✓ | ||
| last_name | ✓ | ||
| first_name | ✓ | ||
| site_state | ✓ | ||
| area_classification | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| physical_location-access |