snowflake
April 24, 2024 · View on GitHub
Expression
product = "snowflake"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| query_id | ✓ | ||
| db_user | ✓ | ||
| database_user_name |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| database-login | |||||
| database-query | db_name | ||||
| db_operation | Legacy | ✓ | ✓ | ||
| db_schema |