thycotic software secret server
April 24, 2024 · View on GitHub
Expression
product = "thycotic software secret server"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| src_ip | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| app-activity | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| domain_user_name | |||||
| user | Default | ✓ | |||
| app-login | |||||
| group-member-add | resource | ||||
| additional_info | |||||
| domain | Legacy | ✓ | |||
| domain_user_name | |||||
| operation | |||||
| user | Legacy | ✓ | ✓ | ||
| object | |||||
| group-member-remove | resource | ||||
| additional_info | |||||
| domain | Legacy | ✓ | |||
| domain_user_name | |||||
| operation | |||||
| user | Legacy | ✓ | ✓ | ||
| object | |||||
| password-checkin | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| operation | Default | ✓ | |||
| password-checkout | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| operation | Default | ✓ | |||
| password-copy | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| operation | Default | ✓ | |||
| object | Default | ✓ | |||
| policy-create | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| domain_user_name | |||||
| operation | Default | ✓ | |||
| user | Default | ✓ | |||
| policy-modify | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| domain_user_name | |||||
| operation | Default | ✓ | |||
| user | Default | ✓ | |||
| secret-copy | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| domain_user_name | |||||
| operation | Default | ✓ | |||
| user | Default | ✓ | |||
| secret-create | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| domain_user_name | |||||
| operation | Default | ✓ | |||
| user | Default | ✓ | |||
| secret-modify | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| domain_user_name | |||||
| operation | Default | ✓ | |||
| user | Default | ✓ | |||
| user-create | resource | ||||
| additional_info | |||||
| domain | Legacy | ✓ | |||
| domain_user_name | |||||
| operation | |||||
| user | Legacy | ✓ | ✓ | ||
| object | |||||
| user-disable | resource | ||||
| additional_info | |||||
| domain | Legacy | ✓ | |||
| domain_user_name | |||||
| operation | |||||
| user | Legacy | ✓ | ✓ | ||
| object | |||||
| user-modify | resource | ||||
| additional_info | |||||
| domain | Legacy | ✓ | |||
| domain_user_name | |||||
| operation | |||||
| user | Legacy | ✓ | |||
| object | |||||
| user-password-modify | resource | Default | ✓ | ||
| additional_info | Default | ✓ | |||
| domain | Default | ✓ | |||
| operation | Default | ✓ | |||
| object | Default | ✓ |