endpoint-domain-join.md

endpoint-domain-join

Description

An endpoint added to a domain

Parameters

Parameter	Value
Subject	endpoint
Activity	domain-join
Activity Type	endpoint-domain-join
Pretty Name	Endpoint Domain Join

Fields

The possible fields for this activity type will vary depending on whether the activity was a success or a fail.

endpoint-domain-join:success

Field	Core	Detection	Informational
domain			✓
dest_host		✓

endpoint-domain-join:fail

Field	Core	Detection	Informational
failure_code		✓
domain			✓
dest_host		✓
failure_reason		✓