A policy document was created or modified, only used as a catch all if create or modify cannot be determined
| Parameter | Value |
|---|---|
| Subject | policy |
| Activity | write |
| Activity Type | policy-write |
| Pretty Name | Policy Write |
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
There are no fields for this activity type.
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| failure_reason | ✓ |