| carbonblack-app-activity |
vmware-carbonblack-sk4-app-activity-cbdefense |
| carbonblack-edr-auth-successful |
vmware-carbonblackedr-sk4-app-authentication-success-loginname |
| carbonblack-edr-crossproc |
vmware-carbonblackceedr-sk4-process-create-success-crossproc |
| carbonblack-edr-filemod |
vmware-carbonblackedr-cef-file-write-success-edr |
| carbonblack-edr-moduleload |
vmware-carbonblackedr-sk4-dll-load-actionloadmodule |
| carbonblack-edr-netconn |
vmware-carbonblackceedr-sk4-network-traffic-success-actionconncreate |
| carbonblack-edr-procstart |
vmware-carbonblackceedr-sk4-process-create-success-procstart |
| carbonblack-edr-procstart-1 |
vmware-carbonblackceedr-json-process-create-success-procstart |
| carbonblack-edr-regmod |
vmware-carbonblackedr-sk4-registry-registryoperation |
| carbonblack-endpoint-process-file |
vmware-carbonblackedr-mix-file-filemod |
| carbonblack-endpoint-process-network |
vmware-carbonblackedr-json-network-session-success-netconn-2 |
| carbonblack-endpoint-process-start |
vmware-carbonblackappctrl-json-process-create-success-procstart |
| carbonblack-file-activity |
vmware-carbonblackappctrl-kv-file-success-filedownload |
| carbonblack-file-operations |
vmware-carbonblackappctrl-kv-file-success-filethreat |
| carbonblack-file-operations-1 |
vmware-carbonblackappctrl-kv-file-success-subtype |
| carbonblack-process-alert |
vmware-carbonblackappctrl-kv-alert-trigger-success-execution |
| carbonblack-process-alert-1 |
vmware-carbonblackappctrl-kv-alert-trigger-success-execution-1 |
| carbonblack-process-created |
vmware-carbonblackappctrl-kv-process-create-success-allowed |
| carbonblack-process-created-1 |
vmware-carbonblackappctrl-kv-process-create-success-execution |
| carbonblack-security-alert-2 |
vmware-carbonblack-json-alert-trigger-success-threat |
| carbonblack-system-info |
vmware-carbonblackedr-kv-endpoint-activity-cbprotection |
| carbonblack-system-info-1 |
vmware-carbonblack-json-app-notification-cbdefense |
| carbonblack-system-info-2 |
vmware-carbonblack-sk4-app-activity-auditlogs |
| carbonblack-system-info-3 |
vmware-carbonblackedr-sk4-app-notification-success-carbonblackcloud |
| carbonblack-usb-insert |
vmware-carbonblackappctrl-kv-peripheral-storage-insert-success-cbprotection |
| carbonblack-usb-insert-1 |
vmware-carbonblackappctrl-kv-peripheral-storage-insert-success-deviceattached |
| carbonblack-usb-removed-1 |
vmware-carbonblackappctrl-kv-peripheral-storage-insert-success-devicedetached |
| cas-app-activity |
microsoft-mcas-str-app-activity-success-serviceaccessenforcementtriggered |
| cas-login-failed |
microsoft-mcas-kv-app-login-fail-failedauth |
| cas-login-success |
microsoft-mcas-kv-app-login-success-successauth |
| cassandra-db-activity-failed |
apache-cassandradb-str-database-activity-fail-auth |
| cassandra-db-login |
apache-cassandradb-kv-database-login-success-auth |
| cassandra-db-update |
apache-cassandradb-str-database-modify-success-ddl |
| cb-defense-app-login |
vmware-carbonblack-sk4-app-login-success-loggedinsuccessfully |
| cb-defense-auth-successfull |
vmware-carbonblack-sk4-endpoint-login-success-cbdefense |
| cb-defense-failed-app-login |
vmware-carbonblack-sk4-app-login-fail-loginfailed |
| cc-carbonblack-edr-apicall |
vmware-carbonblackedr-sk4-endpoint-activity-apicall |
| cc-carbonblack-edr-crossproc |
vmware-carbonblackedr-cef-process-create-success-crossproc |
| cc-carbonblack-edr-filemod |
vmware-edr-cef-file-write-success-filemod |
| cc-carbonblack-edr-moduleload |
vmware-carbonblackedr-sk4-dll-load-moduleload |
| cc-carbonblack-edr-netconn |
vmware-carbonblackedr-cef-network-session-success-netconn |
| cc-carbonblack-edr-procend |
vmware-carbonblackedr-sk4-process-close-success-endpointeventprocend |
| cc-carbonblack-edr-procstart |
vmware-carbonblackedr-cef-process-create-success-childproc |
| cc-carbonblack-edr-regmod |
vmware-carbonblackedr-sk4-registry-modify-success-requestclientapplication |
| cc-carbonblack-process-alert-1 |
vmware-carbonblackceedr-sk4-alert-trigger-success-watchlists |
| cc-pulsesecure-access-control |
juniper-ps-sk4-vpn-login-success-agentlogin |
| cc-pulsesecure-account-deleted |
juniper-ps-sk4-user-delete-success-accountmodified |
| cc-pulsesecure-authentication-failed |
juniper-ps-sk4-vpn-login-fail-authenticationfailed |
| cc-pulsesecure-authentication-failed-1 |
juniper-ps-sk4-vpn-login-fail-checkfailed |
| cc-pulsesecure-authentication-successful |
juniper-ps-sk4-vpn-authentication-success-authsuccess |
| cc-pulsesecure-authentication-successful-1 |
juniper-ps-sk4-vpn-authentication-success-authsuccess-1 |
| cc-pulsesecure-certificate-failed |
juniper-ps-sk4-vpn-login-fail-testingcertificate |
| cc-pulsesecure-certificate-passed |
juniper-ps-sk4-vpn-authentication-success-restrictionspassed |
| cc-pulsesecure-failed-vpn-login |
juniper-ps-sk4-vpn-login-fail-authloginfailed |
| cc-pulsesecure-failed-vpn-login-1 |
juniper-ps-sk4-vpn-login-fail-loginfailed |
| cc-pulsesecure-key-exchange |
juniper-ps-sk4-vpn-session-success-keyexchange |
| cc-pulsesecure-password-restriction-failed |
juniper-ps-sk4-vpn-login-fail-testingpasswordfailed |
| cc-pulsesecure-password-restriction-passed |
juniper-ps-sk4-vpn-login-success-passwordrestrictionspassed |
| cc-pulsesecure-ssl-negotiation-failed |
juniper-ps-sk4-network-traffic-fail-sslfailed |
| cc-pulsesecure-time-sync-failed |
juniper-ps-sk4-app-activity-fail-unabletosynctime |
| cc-pulsesecure-vpn-close |
juniper-ps-sk4-vpn-logout-success-closedconnection |
| cc-pulsesecure-vpn-end |
juniper-ps-sk4-vpn-logout-success-sessionended |
| cc-pulsesecure-vpn-end-1 |
juniper-ps-sk4-vpn-logout-success-sessionlogout |
| cc-pulsesecure-vpn-resume |
juniper-ps-sk4-vpn-login-success-sessionresumed |
| cc-pulsesecure-vpn-start |
juniper-ps-sk4-vpn-login-success-sessionstarted |
| cc-pulsesecure-vpn-start-1 |
juniper-ps-sk4-vpn-login-success-connectedwithip |
| cc-pulsesecure-vpn-timeout |
juniper-ps-sk4-vpn-logout-success-sessiontimedout |
| cc-sentinelone-security-alert |
sentinelone-singularityp-sk4-alert-trigger-malwaredetected |
| cc-sophos-dlp-alert |
sophos-ep-sk4-alert-trigger-success-peripheralblock |
| cc-sophos-security-alert |
sophos-ep-sk4-alert-trigger-success-privilegeexploitprevented |
| ccure-app-activity |
tyco-ccure-str-app-activity-success-activityconditions |
| ccure-app-activity-1 |
tyco-ccure-json-physical-location-modify-success-objectchangedstate |
| ccure-app-login |
tyco-ccure-cef-app-login-success-operatorlogin |
| ccure-app-login-1 |
tyco-ccure-json-app-login-success-loggedin |
| ccure-app-logout |
tyco-ccure-json-app-logout-success-operatorlogin |
| ccure-badge-access |
tyco-ccure-json-physical-location-access-fail-flexnumber |
| ccure-badge-access-1 |
"tyco-ccure-xml-physical-location-access-fail-card |
| ccure-badge-access-2 |
"tyco-ccure-xml-physical-location-access-objectname1 |
| ccure-badge-access-3 |
tyco-ccure-csv-physical-location-access-fail-cs6 |
| ccure-badge-access-4 |
tyco-ccure-kv-physical-location-access-vendoraction |
| cds-account-auth |
cds-cds-kv-endpoint-login-userauth |
| cds-process-creation |
unix-unix-kv-process-create-success-exe |
| cds-user-login |
cds-cds-kv-endpoint-login-userlogin |
| cef-1102 |
microsoft-evsecurity-cef-log-clear-success-auditlogcleared |
| cef-4624 |
microsoft-evsecurity-cef-endpoint-login-success-4624 |
| cef-4625 |
microsoft-evsecurity-cef-endpoint-login-fail-4625 |
| cef-4627 |
microsoft-evsecurity-cef-endpoint-notification-success-4627 |
| cef-4634 |
microsoft-evsecurity-cef-endpoint-logout-success-4634 |
| cef-4648 |
microsoft-evsecurity-cef-user-switch-success-4648 |
| cef-4656 |
microsoft-evsecurity-cef-handle-request-success-4656-1 |
| cef-4658 |
microsoft-evsecurity-cef-endpoint-authentication-success-4658 |
| cef-4663 |
microsoft-evsecurity-cef-file-success-4663 |
| cef-4670 |
microsoft-evsecurity-cef-file-permission-modify-success-4670 |
| cef-4672 |
microsoft-evsecurity-cef-user-privilege-assign-success-4672 |
| cef-4673 |
microsoft-evsecurity-cef-user-privilege-assign-success-4673 |
| cef-4674 |
microsoft-evsecurity-cef-user-privilege-use-success-4674 |
| cef-4688 |
microsoft-evsecurity-cef-process-create-success-4688 |
| cef-4689 |
microsoft-evsecurity-cef-process-close-success-4689 |
| cef-4690 |
microsoft-evsecurity-cef-handle-copy-success-4690 |
| cef-4720 |
microsoft-evsecurity-cef-user-create-success-4720 |
| cef-4722 |
microsoft-evsecurity-cef-user-enable-success-4722 |
| cef-4723 |
microsoft-evsecurity-cef-user-password-modify-4723 |
| cef-4724 |
microsoft-evsecurity-cef-user-password-reset-success-4724 |
| cef-4725 |
microsoft-evsecurity-cef-user-disable-success-4725 |
| cef-4735 |
microsoft-evsecurity-cef-group-modify-success-4735-2 |
| cef-4740 |
microsoft-evsecurity-cef-user-lock-success-4740 |
| cef-4768 |
microsoft-evsecurity-cef-endpoint-authentication-success-4768 |
| cef-4769 |
microsoft-evsecurity-cef-endpoint-authentication-success-4769 |
| cef-4770 |
microsoft-evsecurity-cef-endpoint-login-success-4770 |
| cef-4771 |
microsoft-evsecurity-cef-endpoint-login-fail-4771 |
| cef-4776 |
microsoft-evsecurity-cef-endpoint-login-4776 |
| cef-4799 |
microsoft-evsecurity-cef-group-member-list-success-4799 |
| cef-4800 |
microsoft-evsecurity-cef-endpoint-lock-success-4800 |
| cef-4801 |
microsoft-evsecurity-cef-endpoint-unlock-success-4801 |
| cef-4985 |
microsoft-evsecurity-cef-endpoint-notification-4985 |
| cef-5136 |
microsoft-evsecurity-cef-ds-object-modify-success-5136 |
| cef-5140 |
microsoft-evsecurity-cef-share-access-success-5140 |
| cef-5142 |
microsoft-evsecurity-cef-share-access-success-5142 |
| cef-5142-1 |
"microsoft-evsecurity-xml-share-create-success-5142 |
| cef-5143 |
microsoft-evsecurity-cef-share-access-success-5143 |
| cef-5144 |
microsoft-evsecurity-cef-share-access-success-5144 |
| cef-5145 |
microsoft-evsecurity-cef-share-access-5145 |
| cef-5152 |
microsoft-evsecurity-cef-network-traffic-success-5152 |
| cef-528 |
microsoft-evsecurity-cef-endpoint-login-success-528 |
| cef-540 |
microsoft-evsecurity-cef-endpoint-login-success-540 |
| cef-5447 |
microsoft-evsecurity-cef-policy-modify-success-5447 |
| cef-576 |
microsoft-evsecurity-cef-user-privilege-assign-success-576 |
| cef-624 |
microsoft-evsecurity-cef-user-create-success-624 |
| cef-672 |
microsoft-evsecurity-cef-endpoint-672 |
| cef-673 |
microsoft-evadfs-cef-endpoint-login-673 |
| cef-Juniper-network-connection-close |
juniper-srx-cef-network-traffic-success-sessionclosed |
| cef-O365-dlp-email-1 |
microsoft-m365auditlogs-kv-email-send-emailsend |
| cef-O365-dlp-email-in |
microsoft-o365-sk4-email-receive-success-inbound |
| cef-O365-dlp-email-out |
microsoft-o365-sk4-email-send-fail-outbound |
| cef-O365-dlp-email-out-1 |
microsoft-o365-cef-email-receive-success-fromname |
| cef-absolute-security-alert |
absolute-siemconnector-cef-alert-trigger-success-absolute |
| cef-ad-fs-audit-1102 |
microsoft-adfs-cef-http-request-success-1102 |
| cef-ad-fs-audit-299 |
microsoft-evsecurity-cef-endpoint-login-299 |
| cef-ad-fs-audit-324 |
microsoft-adfs-cef-app-authentication-fail-324 |
| cef-ad-fs-audit-403 |
microsoft-adfs-cef-http-request-success-403 |
| cef-ad-fs-audit-404 |
microsoft-adfs-cef-http-response-success-404 |
| cef-ad-fs-audit-410 |
microsoft-adfs-cef-app-notification-success-410 |
| cef-ad-fs-audit-411 |
microsoft-evsecurity-cef-app-authentication-fail-adfsauditing |
| cef-ad-fs-audit-412 |
microsoft-adfs-cef-app-authentication-success-412 |
| cef-ad-fs-audit-413 |
microsoft-evsecurity-cef-app-authentication-fail-adfsauditing-1 |
| cef-ad-fs-audit-431 |
microsoft-adfs-cef-app-notification-success-431 |
| cef-ad-fs-audit-500 |
microsoft-evsecurity-cef-endpoint-login-500 |
| cef-ad-fs-audit-501 |
microsoft-evsecurity-cef-endpoint-login-501 |
| cef-ad-fs-audit-516 |
microsoft-evsecurity-cef-user-lock-success-516 |
| cef-aix-process-created |
unix-ad-cef-process-create-success-cmd |
| cef-algosec-network-alert |
algosec-fa-cef-alert-trigger-success-unauthorizedtraffic |
| cef-algosec-system-info |
algosec-fa-cef-app-notification-msg |
| cef-amag-badge-access-1 |
amag-sac-cef-physical-location-access-success-grantedaccess |
| cef-amag-badge-access-2 |
amag-sac-cef-physical-location-access-success-badge-flooraccess |
| cef-amag-badge-access-failed-1 |
amag-sac-cef-physical-location-access-fail-atwrongdoor |
| cef-amag-badge-access-failed-2 |
amag-sac-cef-physical-location-access-fail-inactive |
| cef-amag-badge-access-failed-3 |
amag-sac-cef-physical-location-access-fail-wronghandtemplate |
| cef-arcsight-system-info |
microfocusarcsight-ma-cef-app-notification-success-arcsight |
| cef-aruba-mobile |
hp-arubawc-cef-alert-trigger-success-wirelesssecurity |
| cef-aruba-nac-failed-logon |
hp-arubawc-cef-radius-traffic-fail-authfailed |
| cef-aruba-nac-logon |
hp-arubawc-cef-endpoint-login-success-radiusaccounting |
| cef-aruba-nac-logon-1 |
hp-arubacpm-cef-endpoint-login-success-13003 |
| cef-aruba-nac-logon-2 |
hp-arubawc-kv-endpoint-login-success-guestaccess |
| cef-aruba-nac-logon-3 |
hp-arubawc-kv-endpoint-login-success-loggedin |
| cef-aruba-nac-logon-4 |
hp-arubacpm-cef-radius-traffic-success-authsource |
| cef-aruba-network-info |
hp-arubamm-cef-app-notification-appnotification |
| cef-asa-113004-vpn-start |
cisco-asa-cef-radius-traffic-success-113004 |
| cef-asa-svc-vpn-start |
cisco-asa-cef-vpn-login-success-722051 |
| cef-asupim-print-event |
asupim-a-cef-printer-activity-success-printcontrolevent |
| cef-ata-account-alert |
microsoft-ata-cef-alert-trigger-success-accountactivity |
| cef-ata-behavior-alert |
microsoft-ata-kv-alert-trigger-success-abnormalbehaviorsuspiciousactivity |
| cef-ata-bruteforce-alert |
microsoft-ata-cef-alert-trigger-success-bruteforceactivity |
| cef-ata-database-alert |
microsoft-ata-cef-alert-trigger-success-monitoringalert |
| cef-ata-directory-alert |
microsoft-ata-cef-alert-trigger-success-replicationactivity |
| cef-ata-disconnect-alert |
microsoft-ata-cef-app-notification-gatewaydisconnectedmonitoringalert |
| cef-ata-dns-alert |
microsoft-ata-kv-alert-trigger-success-dnsreconnaissancesuspiciousactivity |
| cef-ata-encryption-alert |
microsoft-ata-cef-alert-trigger-success-encryptiondowngradesuspiciousactivity |
| cef-ata-execution-alert |
microsoft-ata-cef-alert-trigger-success-executionactivity |
| cef-ata-failure-alert |
microsoft-ata-cef-app-notification-gatewaystartfailuremonitoringalert |
| cef-ata-forgedpac-alert |
microsoft-ata-cef-alert-trigger-success-forgedpac |
| cef-ata-goldenticket-alert |
microsoft-ata-cef-alert-trigger-success-goldenticket |
| cef-ata-groupmembership-alert |
microsoft-ata-kv-alert-trigger-success-changesuspiciousactivity |
| cef-ata-hash-alert |
microsoft-ata-cef-alert-trigger-success-passthehash |
| cef-ata-honeytoken-alert |
microsoft-ata-kv-alert-trigger-success-honeytokenactivitysuspiciousactivity |
| cef-ata-ldap-bruteforce-alert |
microsoft-ata-cef-alert-trigger-success-ldapbruteforcesuspiciousactivity |
| cef-ata-lowmemory-alert |
microsoft-ata-cef-endpoint-notification-gatewaylowmemorymonitoringalert |
| cef-ata-object-alert |
microsoft-ata-cef-alert-trigger-success-massiveobjectdeletion |
| cef-ata-overloadednetwork-alert |
microsoft-ata-cef-alert-trigger-monitoringalert |
| cef-ata-protocol-alert |
microsoft-ata-cef-alert-trigger-success-abnormprotoactivity |
| cef-ata-retrievedata-alert |
microsoft-ata-cef-alert-trigger-success-retrievedata |
| cef-ata-samr-alert |
microsoft-ata-kv-alert-trigger-success-samrreconnaissancesuspiciousactivity |
| cef-ata-session-alert |
microsoft-ata-cef-alert-trigger-success-sessionactivity |
| cef-ata-ticket-alert |
microsoft-ata-cef-alert-trigger-success-ticketactivity |
| cef-atp-alert-1 |
microsoft-azureatp-kv-alert-trigger-success-dnsreconnaissancesecurityalert |
| cef-atp-alert-11 |
microsoft-atp-cef-alert-trigger-success-dnsremotecodeexecution |
| cef-atp-alert-12 |
microsoft-atp-cef-alert-trigger-success-dnssuspiciouscommunication |
| cef-atp-alert-13 |
microsoft-atp-cef-alert-trigger-success-encryptiondowngrade |
| cef-atp-alert-14 |
microsoft-atp-cef-alert-trigger-success-forgedpac |
| cef-atp-alert-15 |
microsoft-atp-cef-alert-trigger-success-forgedprincipal |
| cef-atp-alert-16 |
microsoft-atp-cef-alert-trigger-success-goldenticketencryptiondowngrade |
| cef-atp-alert-17 |
microsoft-atp-cef-alert-trigger-success-goldenticket |
| cef-atp-alert-18 |
microsoft-atp-cef-alert-trigger-success-goldenticketsizeanomaly |
| cef-atp-alert-19 |
microsoft-azureatp-cef-alert-trigger-success-honeytokenactivity |
| cef-atp-alert-2 |
microsoft-atp-cef-alert-trigger-success-abnormalprotocol |
| cef-atp-alert-20 |
microsoft-atp-cef-alert-trigger-success-ldapbruteforce |
| cef-atp-alert-21 |
microsoft-atp-cef-alert-trigger-success-maliciousservicecreation |
| cef-atp-alert-22 |
microsoft-atp-cef-alert-trigger-success-passthehash |
| cef-atp-alert-23 |
microsoft-atp-cef-alert-trigger-success-passtheticket |
| cef-atp-alert-24 |
microsoft-atp-cef-alert-trigger-success-remoteexecution |
| cef-atp-alert-25 |
microsoft-atp-cef-alert-trigger-success-retrievedataprotectionbackupkey |
| cef-atp-alert-26 |
microsoft-azureatp-cef-alert-trigger-success-securityalert |
| cef-atp-alert-27 |
microsoft-atp-cef-alert-trigger-success-smbdataexfiltration |
| cef-atp-alert-28 |
microsoft-atp-cef-alert-trigger-success-sensordirectory |
| cef-atp-alert-29 |
microsoft-atp-cef-alert-trigger-success-sensorcapture |
| cef-atp-alert-3 |
microsoft-atp-cef-alert-trigger-success-sensitivegroupmembershipchange |
| cef-atp-alert-30 |
microsoft-atp-cef-alert-trigger-success-workspacedirectory |
| cef-atp-alert-31 |
microsoft-atp-cef-alert-trigger-success-sensornetwork |
| cef-atp-alert-32 |
microsoft-atp-cef-alert-trigger-success-sensorlowmemory |
| cef-atp-alert-33 |
microsoft-atp-cef-alert-trigger-success-ldapsearch |
| cef-atp-alert-34 |
microsoft-atp-cef-alert-trigger-success-dnshostname |
| cef-atp-alert-4 |
microsoft-atp-cef-alert-trigger-success-abnormalvpn |
| cef-atp-alert-5 |
microsoft-azureatp-cef-alert-trigger-success-enumerationsecurityalert |
| cef-atp-alert-6 |
microsoft-azureatp-kv-alert-trigger-success-bruteforcesecurityalert |
| cef-atp-alert-7 |
microsoft-atp-cef-alert-trigger-success-directoryservicesreplicatio |
| cef-atp-alert-8 |
microsoft-atp-cef-alert-trigger-success-directoryservicesroguepromotion |
| cef-atp-alert-9 |
microsoft-atp-cef-alert-trigger-success-directoryservicesroguereplication |
| cef-attivo-network-connection |
attivo-botsink-cef-network-traffic-success-networktrafficsuccess |
| cef-attivo-security-alert |
attivo-botsink-cef-alert-trigger-success-sshd |
| cef-aws-cloudwatch-netflow-connection |
amazon-awscloudwatch-cef-network-traffic-success-cloudwatch |
| cef-aws-guardduty |
amazon-awsguardduty-cef-alert-trigger-success-catsecurity |
| cef-aws-guardduty-discovery-alert |
amazon-awsguardduty-sk4-alert-trigger-success-guardduty |
| cef-aws-guardduty-security-alert-1 |
amazon-awsguardduty-sk4-alert-trigger-success-guardduty-1 |
| cef-aws-guardduty-security-alert-10 |
amazon-awsguardduty-sk4-alert-trigger-success-suspiciousfile-1 |
| cef-aws-guardduty-security-alert-11 |
amazon-awsguardduty-sk4-alert-trigger-success-maliciousfile-1 |
| cef-aws-guardduty-security-alert-12 |
amazon-awsguardduty-sk4-alert-trigger-success-suspiciousfile-2 |
| cef-aws-guardduty-security-alert-13 |
amazon-awsguardduty-sk4-alert-trigger-success-maliciousfile-2 |
| cef-aws-guardduty-security-alert-14 |
amazon-awsguardduty-sk4-alert-trigger-success-suspiciousfile-3 |
| cef-aws-guardduty-security-alert-15 |
amazon-awsguardduty-sk4-alert-trigger-success-maliciousfile-3 |
| cef-aws-guardduty-security-alert-16 |
amazon-awsguardduty-sk4-alert-trigger-success-instancecredentialexfiltration |
| cef-aws-guardduty-security-alert-17 |
amazon-awsguardduty-sk4-alert-trigger-success-anomalousbehavior-1 |
| cef-aws-guardduty-security-alert-18 |
amazon-awsguardduty-sk4-alert-trigger-success-guardduty-4 |
| cef-aws-guardduty-security-alert-2 |
amazon-awsguardduty-sk4-alert-trigger-success-toripcaller |
| cef-aws-guardduty-security-alert-3 |
amazon-awsguardduty-sk4-alert-trigger-success-guardduty-2 |
| cef-aws-guardduty-security-alert-4 |
amazon-awsguardduty-sk4-alert-trigger-success-rootcredentialusage |
| cef-aws-guardduty-security-alert-5 |
amazon-awsguardduty-sk4-alert-trigger-success-anomalousbehavior |
| cef-aws-guardduty-security-alert-6 |
amazon-awsguardduty-sk4-alert-trigger-success-sshbruteforce |
| cef-aws-guardduty-security-alert-7 |
amazon-awsguardduty-sk4-alert-trigger-success-torclient |
| cef-aws-guardduty-security-alert-8 |
amazon-awsguardduty-sk4-alert-trigger-success-suspiciousfile |
| cef-aws-guardduty-security-alert-9 |
amazon-awsguardduty-sk4-alert-trigger-success-maliciousfile |
| cef-aws-netflow-connection |
amazon-awscloudwatch-sk4-network-traffic-success-awsflowlogs |
| cef-aws-redshift-db-query |
amazon-awsredshift-sk4-database-query-success-db |
| cef-aws-redshift-info |
amazon-awscloudtrail-sk4-app-activity-success-redshift |
| cef-aws-vpc-netflow-connection |
amazon-awscloudwatch-sk4-network-traffic-success-awss3bucket |
| cef-azure-ad-app-login |
microsoft-azuread-cef-app-signinactivity |
| cef-azure-app-activity-1 |
microsoft-azure-cef-app-activity-updategroup |
| cef-azure-app-activity-2 |
microsoft-azure-cef-app-activity-updateuser |
| cef-azure-app-activity-3 |
microsoft-azure-cef-app-activity-adduser |
| cef-azure-app-activity-4 |
microsoft-azure-cef-app-activity-updatedevice |
| cef-azure-app-activity-5 |
microsoft-azure-cef-app-activity-addmembertogroup |
| cef-azure-app-login |
microsoft-azure-cef-app-login-success-userloggedin |
| cef-azure-auth-failed |
microsoft-azuread-cef-endpoint-authentication-fail-loginerror |
| cef-azure-authentication |
microsoft-windows-cef-endpoint-login-device |
| cef-azure-event-hub-cosmosdb-create |
microsoft-azuremon-sk4-database-create-create |
| cef-azure-event-hub-cosmosdb-delete |
microsoft-azuremon-cef-database-delete-dataplanerequests |
| cef-azure-event-hub-cosmosdb-query |
microsoft-azuremon-cef-database-query-documentdb |
| cef-azure-event-hub-cosmosdb-read |
microsoft-azuremon-sk4-database-query-read |
| cef-azure-event-hub-cosmosdb-readfeed |
microsoft-azuremon-sk4-database-list-readfeed |
| cef-azure-event-hub-cosmosdb-update |
microsoft-azuremon-cef-database-modify-dataplanerequest |
| cef-azure-event-hub-cosmosdb-upsert |
microsoft-azuremon-sk4-database-modify-upsert |
| cef-azure-event-hub-postgresql |
microsoft-azuremon-sk4-database-activity-postgresqllogs |
| cef-azure-event-hub-security |
microsoft-azure-sk4-alert-trigger-success-security |
| cef-azure-failed-app-login |
microsoft-azure-cef-app-login-fail-userloginfailed |
| cef-azure-mysql-database-login |
microsoft-azuremon-sk4-database-login-connectionlog |
| cef-azure-mysql-database-query |
microsoft-azuremon-sk4-database-query-mysqlauditlogs |
| cef-azure-onedrive-account-password-change |
microsoft-mcas-cef-user-password-modify-success-changepassword |
| cef-azure-onedrive-account-password-reset |
microsoft-mcas-cef-user-password-reset-success-resetpassword |
| cef-azure-onedrive-app-activity-1 |
microsoft-mcas-cef-app-activity-success-accessfolder |
| cef-azure-onedrive-app-activity-10 |
microsoft-mcas-cef-app-activity-success-impersonated |
| cef-azure-onedrive-app-activity-11 |
microsoft-mcas-cef-app-activity-success-itemcreate |
| cef-azure-onedrive-app-activity-12 |
microsoft-mcas-cef-app-activity-success-agentusercreate |
| cef-azure-onedrive-app-activity-13 |
microsoft-mcas-cef-app-activity-success-folderdelete |
| cef-azure-onedrive-app-activity-14 |
microsoft-mcas-cef-app-activity-success-msgdelete |
| cef-azure-onedrive-app-activity-15 |
microsoft-mcas-cef-app-activity-success-msgdelete-1 |
| cef-azure-onedrive-app-activity-16 |
microsoft-mcas-cef-app-activity-success-alertdismiss |
| cef-azure-onedrive-app-activity-17 |
microsoft-mcas-cef-app-activity-success-grantconsoleforthirdparty |
| cef-azure-onedrive-app-activity-18 |
microsoft-mcas-cef-app-activity-success-foldermove |
| cef-azure-onedrive-app-activity-19 |
microsoft-mcas-cef-app-activity-success-movemsgtoanotherfolder |
| cef-azure-onedrive-app-activity-2 |
microsoft-mcas-cef-app-activity-success-addmembertogroup |
| cef-azure-onedrive-app-activity-20 |
microsoft-mcas-cef-app-activity-success-movemsgtodeletedfolder |
| cef-azure-onedrive-app-activity-21 |
microsoft-mcas-cef-app-activity-success-msgpurge |
| cef-azure-onedrive-app-activity-22 |
microsoft-mcas-cef-app-activity-success-purgemessages |
| cef-azure-onedrive-app-activity-23 |
microsoft-mcas-cef-app-activity-success-removemember |
| cef-azure-onedrive-app-activity-24 |
microsoft-mcas-cef-app-activity-success-folderrename |
| cef-azure-onedrive-app-activity-25 |
microsoft-mcas-cef-app-activity-success-resolvealert |
| cef-azure-onedrive-app-activity-26 |
microsoft-mcas-cef-app-activity-success-commandrun |
| cef-azure-onedrive-app-activity-27 |
microsoft-mcas-cef-app-activity-success-msgsend |
| cef-azure-onedrive-app-activity-28 |
microsoft-mcas-cef-app-activity-success-msgsend-1 |
| cef-azure-onedrive-app-activity-29 |
microsoft-mcas-cef-app-activity-success-setcompanyinfo |
| cef-azure-onedrive-app-activity-3 |
microsoft-mcas-cef-app-activity-success-addmembertorole |
| cef-azure-onedrive-app-activity-30 |
microsoft-mcas-cef-app-activity-success-skyprforbuisnessactivity |
| cef-azure-onedrive-app-activity-31 |
microsoft-mcas-cef-app-activity-success-suspiciousemail |
| cef-azure-onedrive-app-activity-32 |
microsoft-mcas-cef-app-activity-success-unspecified |
| cef-azure-onedrive-app-activity-33 |
microsoft-mcas-cef-app-activity-success-msgupdate |
| cef-azure-onedrive-app-activity-34 |
microsoft-mcas-cef-app-activity-success-msgupdate-1 |
| cef-azure-onedrive-app-activity-35 |
microsoft-mcas-cef-app-activity-success-updateserviceprincipal |
| cef-azure-onedrive-app-activity-36 |
microsoft-mcas-cef-app-activity-success-updateuser |
| cef-azure-onedrive-app-activity-4 |
microsoft-mcas-cef-app-activity-success-addpermissiontomailbox |
| cef-azure-onedrive-app-activity-5 |
microsoft-mcas-cef-app-activity-success-mailboxpermission |
| cef-azure-onedrive-app-activity-6 |
microsoft-mcas-cef-app-activity-success-azureoperation |
| cef-azure-onedrive-app-activity-7 |
microsoft-mcas-cef-app-activity-success-groupsettingchange |
| cef-azure-onedrive-app-activity-8 |
microsoft-mcas-cef-app-activity-success-changeuserlicense |
| cef-azure-onedrive-app-activity-9 |
microsoft-mcas-cef-app-activity-success-foldercreate |
| cef-azure-onedrive-file-activity-1 |
microsoft-mcas-cef-file-delete-success-deletefile |
| cef-azure-onedrive-file-activity-10 |
microsoft-mcas-cef-file-read-success-checkoutfile |
| cef-azure-onedrive-file-activity-11 |
microsoft-mcas-cef-file-read-success-createfileaccessrequest |
| cef-azure-onedrive-file-activity-12 |
microsoft-mcas-cef-file-read-success-modifyfile |
| cef-azure-onedrive-file-activity-13 |
microsoft-mcas-cef-file-read-success-movefile |
| cef-azure-onedrive-file-activity-14 |
microsoft-mcas-cef-file-read-success-renamefile |
| cef-azure-onedrive-file-activity-15 |
microsoft-mcas-cef-file-read-success-sharefile |
| cef-azure-onedrive-file-activity-2 |
microsoft-mcas-cef-file-download-success-downloadfile |
| cef-azure-onedrive-file-activity-3 |
microsoft-mcas-cef-file-download-success-syncfiledownload |
| cef-azure-onedrive-file-activity-4 |
microsoft-mcas-cef-file-upload-success-fileupload |
| cef-azure-onedrive-file-activity-5 |
microsoft-mcas-cef-file-upload-success-uploadfile |
| cef-azure-onedrive-file-activity-6 |
microsoft-mcas-cef-file-read-success-request |
| cef-azure-onedrive-file-activity-7 |
microsoft-mcas-cef-file-read-success-invitation |
| cef-azure-onedrive-file-activity-8 |
microsoft-mcas-cef-file-read-success-mcas |
| cef-azure-onedrive-file-activity-9 |
microsoft-mcas-cef-file-read-success-checkinfile |
| cef-azure-onedrive-file-upload |
microsoft-mcas-cef-file-upload-success-appidonedrive |
| cef-azure-onedrive-file-write |
microsoft-mcas-cef-file-write-success-appidonedrive |
| cef-azure-password-change |
microsoft-azuread-cef-user-password-modify-success-changeuserpassword |
| cef-azure-process-created |
microsoft-windows-cef-process-create-success-process |
| cef-azure-security-alert |
microsoft-azuresc-sk4-alert-trigger-success-graphsecurityalerts |
| cef-azure-siem-app-logon |
microsoft-mcas-cef-app-login-eventcategorylogin |
| cef-azure-user-signin |
microsoft-azureadsignin-cef-app-login-success-signin |
| cef-bcn-bdds-dhcp |
bluecatnetworks-bnetworks-cef-endpoint-login-fail-dhcpmessage |
| cef-beyondtrust-app-activity |
beyondtrust-prividentity-cef-app-activity-success-pbpsadmin |
| cef-beyondtrust-app-activity-1 |
beyondtrust-prividentity-cef-app-activity-success-pbpsmanaged |
| cef-beyondtrust-app-activity-2 |
beyondtrust-prividentity-cef-app-activity-success-pbpsrequestor |
| cef-beyondtrust-app-login |
beyondtrust-bi-cef-app-login-success-login |
| cef-bit9-app-login |
vmware-carbonblackappctrl-cef-app-login-success-consoleuserlogin |
| cef-bit9-epp-alert |
vmware-carbonblackappctrl-cef-alert-trigger-success-securityalert |
| cef-bit9-file-alert |
vmware-carbonblackappctrl-cef-alert-trigger-success-securityplatform |
| cef-bit9-process-alert |
vmware-carbonblackappctrl-cef-alert-trigger-success-securityplatform-1 |
| cef-bit9-usb-activity |
vmware-carbonblackappctrl-cef-peripheral-storage-insert-success-tached |
| cef-bitdefender-gravityzone-alert |
bitdefender-gz-cef-alert-trigger-success-gravityzone |
| cef-bitglass-app-login-1 |
bitglass-casb-sk4-app-login-success-loginsuccess |
| cef-bitglass-dlp-alert |
bitglass-casb-cef-alert-trigger-success-filelink |
| cef-bitglass-logout |
bitglass-casb-cef-app-logout-activity |
| cef-bitglass-system-info-1 |
bitglass-casb-cef-app-scan-dlpscan |
| cef-bitglass-system-info-2 |
bitglass-casb-cef-app-scan-scantimeout |
| cef-bitglass-system-info-3 |
bitglass-casb-cef-app-scan-malwarescan |
| cef-bitglass-system-info-4 |
bitglass-casb-sk4-app-activity-success-onedrive |
| cef-bluecoat-proxy |
symantec-wss-cef-http-session-proxysg |
| cef-box-app-login |
box-ccm-sk4-app-login-success-login |
| cef-box-file-activity |
box-ccm-cef-file-success-contentaccess |
| cef-bromium-bem-security-alert |
bromium-aes-cef-alert-trigger-success-hostthreatfilehash |
| cef-bromium-bem-security-alert-1 |
bromium-aes-cef-alert-trigger-success-hostrecorded |
| cef-bromium-file-permission-change |
bromium-sp-cef-file-permission-modify-success-trusted |
| cef-bromium-file-read |
bromium-sp-cef-file-read-success-filedownload |
| cef-bromium-file-write |
bromium-sp-cef-file-write-success-upload |
| cef-bromium-security-alert |
bromium-aes-cef-alert-trigger-success-vsentryblock |
| cef-bromium-security-alert-1 |
bromium-aes-cef-alert-trigger-success-isothreatrecorded |
| cef-carbonblack-alert |
vmware-carbonblackedr-cef-alert-trigger-success-dhost |
| cef-carbonblack-alert-1 |
vmware-carbonblackedr-cef-alert-trigger-success-threatreputation |
| cef-carbonblack-alert-2 |
vmware-carbonblackedr-cef-alert-trigger-success-threatexchange |
| cef-carbonblack-app-login |
vmware-carbonblackappctrl-cef-app-login-success-console |
| cef-carbonblack-edr-process-alert |
vmware-carbonblackedr-cef-alert-trigger-success-threathunter |
| cef-carbonblack-endpoint-process |
vmware-carbonblackedr-sk4-process-create-success-redcanary |
| cef-carbonblack-file-alert |
vmware-carbonblackappctrl-cef-alert-trigger-success-protection |
| cef-carbonblack-file-alert-2 |
vmware-carbonblackappctrl-cef-alert-trigger-success-appcontrol |
| cef-carbonblack-file-alert-3 |
vmware-carbonblackappctrl-cef-alert-trigger-success-policy_enforce |
| cef-carbonblack-file-create |
vmware-carbonblack-sk4-file-write-success-cbdefense |
| cef-carbonblack-file-read-1 |
vmware-carbonblack-sk4-file-read-success-access |
| cef-carbonblack-file-read-2 |
vmware-carbonblack-sk4-file-read-success-threatindicators |
| cef-carbonblack-file-write-1 |
vmware-carbonblack-sk4-file-write-success-threatindicators |
| cef-carbonblack-file-write-2 |
vmware-carbonblack-sk4-file-write-success-threatindicators-1 |
| cef-carbonblack-file-write-3 |
vmware-carbonblack-sk4-file-write-success-threatindicators-2 |
| cef-carbonblack-file-write-4 |
vmware-carbonblack-sk4-file-write-success-threatindicators-3 |
| cef-carbonblack-local-logon |
vmware-carbonblackappctrl-cef-endpoint-login-success-000000005 |
| cef-carbonblack-local-logon-3 |
vmware-carbonblackappctrl-cef-endpoint-login-success-00000005 |
| cef-carbonblack-network-connection |
vmware-carbonblack-json-network-traffic-success-connectionto |
| cef-carbonblack-network-connection-failed-1 |
vmware-carbonblackedr-sk4-network-traffic-fail-operationfailed |
| cef-carbonblack-network-connection-failed-2 |
vmware-carbonblackedr-cef-network-traffic-fail-unsuccessfulattempt |
| cef-carbonblack-network-connection-successful-1 |
vmware-carbonblack-sk4-network-session-success-threatindicators |
| cef-carbonblack-network-connection-successful-2 |
vmware-carbonblack-json-network-traffic-success-netflow |
| cef-carbonblack-process-alert |
vmware-carbonblackappctrl-cef-alert-trigger-success-carbonblack |
| cef-carbonblack-process-alert-1 |
vmware-carbonblackedr-cef-alert-trigger-success-response |
| cef-carbonblack-process-alert-2 |
vmware-carbonblackedr-cef-alert-trigger-success-response-1 |
| cef-carbonblack-process-alert-3 |
vmware-carbonblackedr-cef-alert-trigger-success-alertwatchlisthitingressprocess |
| cef-carbonblack-process-alert-query |
vmware-carbonblackedr-kv-alert-trigger-success-feedquery |
| cef-carbonblack-process-alert-storage |
vmware-carbonblackedr-kv-alert-trigger-success-feedstorage |
| cef-carbonblack-process-created |
vmware-carbonblackedr-json-process-create-success-createprocess |
| cef-carbonblack-process-created-1 |
vmware-carbonblack-json-process-create-success-invoked |
| cef-carbonblack-process-created-2 |
vmware-carbonblack-sk4-process-create-success-successfullyattempted |
| cef-carbonblack-process-created-3 |
vmware-carbonblack-json-process-create-success-threatindicators |
| cef-carbonblack-process-created-failed-1 |
vmware-carbonblack-json-process-create-fail-unsuccessfullyattempted |
| cef-carbonblack-security-alert |
vmware-carbonblack-cef-alert-trigger-success-activethreat |
| cef-carbonblack-security-alert-1 |
vmware-carbonblack-sk4-alert-trigger-success-high |
| cef-carbonblack-system-error |
vmware-edr-cef-app-notification-error |
| cef-carbonblack-system-error-1 |
vmware-carbonblackappctrl-cef-app-notification-servererror |
| cef-carbonblack-system-error-2 |
vmware-ac-cef-app-notification-error |
| cef-carbonblack-system-info |
vmware-carbonblackedr-cef-app-activity-protection |
| cef-carbonblack-system-info-1 |
vmware-carbonblackedr-kv-alert-trigger-ingresshit |
| cef-carbonblack-system-info-2 |
vmware-carbonblackappctrl-cef-app-activity-carbonblackevent |
| cef-carbonblack-usb-activity |
vmware-carbonblackappctrl-cef-peripheral-storage-insert-success-protection |
| cef-carbonblack-workstation-locked |
vmware-carbonblackappctrl-cef-endpoint-lock-success-sessionlock |
| cef-carbonblack-workstation-locked-2 |
vmware-carbonblackappctrl-cef-endpoint-lock-success-sessionlock-1 |
| cef-carbonblack-workstation-unlocked |
vmware-carbonblackappctrl-cef-endpoint-unlock-success-sessionunlock |
| cef-carbonblack-workstation-unlocked-2 |
vmware-carbonblackappctrl-cef-endpoint-unlock-success-sessionunlock-1 |
| cef-cas-security-alert |
microsoft-mcas-json-alert-trigger-success-mcasalerts |
| cef-catonetworks-network-alert |
catonetworks-cc-cef-alert-trigger-success-policy |
| cef-catonetworks-vpn-end |
catonetwork-cc-cef-vpn-logout-success-disconnect |
| cef-catonetworks-vpn-login |
catonetwork-cc-cef-vpn-login-success-connection |
| cef-catonetworks-web-activity |
catonetwork-cc-cef-vpn-http-success-security |
| cef-ccure-badge-access |
tyco-ccure-cef-physical-location-access-fail-flexnumber |
| cef-ccure-badge-access-1 |
tyco-ccure-cef-physical-location-access-card |
| cef-ccure-badge-access-2 |
tyco-ccure-cef-physical-location-access-fail-ccurebadge |
| cef-checkpoint-alert |
checkpoint-es-cef-alert-trigger-success-checkpoint |
| cef-checkpoint-alert-3 |
checkpoint-am-cef-alert-trigger-success-checkpointantimalware |
| cef-checkpoint-auth-successful |
checkpoint-ngfw-cef-endpoint-login-success-login |
| cef-checkpoint-auth-successful-1 |
checkpoint-ngfw-cef-endpoint-login-success-update |
| cef-checkpoint-auth-successful-2 |
checkpoint-ngfw-cef-endpoint-authentication-success-login |
| cef-checkpoint-events |
checkpoint-sg-cef-app-activity-connectra |
| cef-checkpoint-firewall |
checkpoint-ngfw-cef-network-traffic-access |
| cef-checkpoint-firewall-1 |
checkpoint-ngfw-cef-network-traffic-urlfiltering |
| cef-checkpoint-firewall-2 |
checkpoint-ngfw-cef-network-traffic-firewall |
| cef-checkpoint-firewall-3 |
checkpoint-ngfw-cef-network-traffic-logupdate |
| cef-checkpoint-firewall-4 |
checkpoint-ngfw-cef-network-traffic-appcontrol |
| cef-checkpoint-firewall-5 |
checkpoint-ngfw-cef-network-traffic-smartdefense |
| cef-checkpoint-firewall-accept |
checkpoint-ngfw-cef-network-traffic-success-accept |
| cef-checkpoint-logout |
checkpoint-ngfw-cef-app-logout-logout |
| cef-checkpoint-logout-1 |
checkpoint-ngfw-cef-vpn-logout-success-logout |
| cef-checkpoint-logout-2 |
checkpoint-ngfw-cef-vpn-logout-success-vpn |
| cef-checkpoint-network-alert |
checkpoint-tp-cef-alert-trigger-success-checkpointsmartdefense |
| cef-checkpoint-network-info |
checkpoint-ngfw-cef-configuration-modify-success-updated |
| cef-checkpoint-vpn-end |
checkpoint-sg-cef-vpn-logout-success-checkpoint |
| cef-checkpoint-vpn-login |
checkpoint-sg-cef-vpn-login-success-mobileaccessblade |
| cef-checkpoint-vpn-login-1 |
checkpoint-sg-cef-vpn-login-success-identityawareness |
| cef-checkpoint-vpn-login-2 |
checkpoint-ngfw-cef-vpn-login-success-authentication |
| cef-checkpoint-vpn-login-3 |
checkpoint-ngfw-cef-vpn-login-success-login |
| cef-checkpoint-vpn-login-4 |
checkpoint-ngfw-cef-vpn-login-success-login-1 |
| cef-cisco-acs-auth-failed |
cisco-ise-cef-endpoint-login-fail-loginfailed |
| cef-cisco-acs-auth-successful |
cisco-ise-cef-endpoint-login-success-authsuccess |
| cef-cisco-asa-106001 |
cisco-asa-cef-network-session-fail-106001 |
| cef-cisco-asa-106006 |
cisco-asa-cef-network-traffic-fail-106006 |
| cef-cisco-asa-106015 |
cisco-asa-cef-network-traffic-fail-106015-1 |
| cef-cisco-asa-106023 |
cisco-asa-cef-network-traffic-fail-106023-1 |
| cef-cisco-asa-113039-vpn-start |
cisco-asa-cef-vpn-login-success-113039 |
| cef-cisco-asa-302013 |
cisco-asa-cef-app-notification-success-302013 |
| cef-cisco-asa-302014 |
cisco-asa-cef-network-close-success-302014 |
| cef-cisco-asa-302015 |
cisco-asa-cef-app-notification-success-302015 |
| cef-cisco-asa-302016 |
cisco-asa-cef-app-notification-success-302016 |
| cef-cisco-asa-302020 |
cisco-asa-cef-network-start-success-302020 |
| cef-cisco-asa-302021 |
cisco-asa-cef-network-notification-302021 |
| cef-cisco-asa-305011 |
cisco-asa-cef-app-notification-success-305011 |
| cef-cisco-asa-305012 |
cisco-asa-cef-app-notification-success-305012 |
| cef-cisco-asa-721016-vpn-start |
cisco-asa-cef-vpn-login-success-721016 |
| cef-cisco-asa-722041-vpn-login |
cisco-asa-cef-vpn-login-success-722041 |
| cef-cisco-asa-auth-successful |
cisco-asa-cef-endpoint-authentication-success-611101 |
| cef-cisco-asa-generic |
cisco-asa-cef-app-activity-success-devicedirection |
| cef-cisco-dns-response-sk4 |
cisco-umbrella-cef-dns-response-success-responsecode |
| cef-cisco-dns-response-sk4-2 |
cisco-umbrella-sk4-dns-response-success-allowed |
| cef-cisco-dns-response-sk4-3 |
cisco-umbrella-sk4-dns-response-success-blocked |
| cef-cisco-dns-response-sk4-4 |
cisco-umbrella-kv-dns-response-success-proxied |
| cef-cisco-dns-response-sk4-ad-computers |
cisco-umbrella-cef-dns-response-success-adcomputers |
| cef-cisco-dns-response-sk4-ad-users |
cisco-umbrella-cef-dns-response-success-adusers |
| cef-cisco-dns-response-sk4-internal-networks |
cisco-umbrella-cef-dns-response-success-internalnetworks |
| cef-cisco-dns-response-sk4-networks |
cisco-umbrella-cef-dns-response-success-networks |
| cef-cisco-dns-response-sk4-roaming-client |
cisco-umbrella-sk4-dns-response-success-roamingclient |
| cef-cisco-dns-response-sk4-roaming-computer |
cisco-umbrella-cef-dns-response-success-roamingcomputers |
| cef-cisco-firepower |
cisco-fp-cef-network-traffic-connection-stats |
| cef-cisco-firepower-dns-query |
cisco-fp-kv-dns-request-success-firepower |
| cef-cisco-ise-nac-failed-logon |
cisco-ise-cef-endpoint-authentication-fail-authfail |
| cef-cisco-ise-nac-logon |
cisco-ise-cef-endpoint-login-success-authpassed |
| cef-cisco-ise-nac-logon-1 |
cisco-ise-cef-endpoint-login-success-accounting |
| cef-cisco-ise-nac-logon-2 |
cisco-ise-cef-endpoint-login-success-accountingreqaccounting |
| cef-cisco-ise-radius-accounting |
cisco-ise-cef-radius-traffic-success-ciceradius |
| cef-cisco-vpn-end |
cisco-ac-cef-vpn-logout-success-userdisconnect |
| cef-cisco-vpn-start |
cisco-ac-cef-vpn-login-success-receivedremoteproxy |
| cef-citrix-netscaler-generic |
citrix-cgateway-cef-app-activity-appactivity |
| cef-citrix-xenapp-app-login |
citrix-cvapps-cef-app-login-success-xenappevent |
| cef-cloud-system-info |
amazon-awscloudwatch-sk4-app-activity-aws |
| cef-cloud-system-info-1 |
microsoft-azuremon-sk4-app-activity-loganalyticsomsworkspace |
| cef-cloudflare-net-connection |
cloudflare-waf-sk4-network-traffic-success-fwnetworktraffic |
| cef-cloudflare-waf |
cloudfare-waf-sk4-http-request-cloudflarelogging |
| cef-cloudflare-waf-1 |
cloudfare-waf-sk4-http-request-cloudflareaws |
| cef-connectra-vpn-changeip |
checkpoint-sg-cef-vpn-login-success-ipchanged |
| cef-connectra-vpn-login |
checkpoint-sg-cef-vpn-login-success-authcrypt |
| cef-connectra-vpn-login-failed |
checkpoint-sg-cef-vpn-login-fail-authcryptfailed |
| cef-connectra-vpn-logout |
checkpoint-sg-cef-vpn-logout-success-logout |
| cef-contrast-security-alert |
contrastsecurity-cs-cef-alert-trigger-success-security |
| cef-cortex-xdr-alert |
pan-cortex-cef-alert-trigger-success-alert |
| cef-cortex-xdr-alert-1 |
pan-cortex-mix-alert-trigger-success-xdr |
| cef-counterbreach-db-alert |
imperva-counterbreach-cef-alert-trigger-success-accessedtables |
| cef-crowdstrike-alert |
crowdstrike-falcon-cef-alert-trigger-success-host |
| cef-crowdstrike-app-activity |
crowdstrike-falcon-cef-app-activity-useractivityauditevent-1 |
| cef-crowdstrike-app-login |
crowdstrike-falcon-cef-app-login-authactivity |
| cef-crowdstrike-app-login-1 |
"crowdstrike-falcon-sk4-app-login-authentication |
| cef-crowdstrike-system-event |
crowdstrike-falcon-sk4-app-notification-fdr |
| cef-cyberark-account-switch |
cyberark-pam-cef-user-switch-success-pwdretrieve |
| cef-cyberark-account-switch-1 |
cyberark-pam-cef-user-switch-success-safe |
| cef-cyberark-app-activity |
cyberark-pam-cef-file-safe |
| cef-cyberark-app-login |
cyberark-pam-cef-app-login-success-logon |
| cef-cyberark-failed-app-login |
cyberark-pam-cef-app-login-fail-userauth |
| cef-cyberark-password-change |
cyberark-pam-cef-user-password-modify-success-vault |
| cef-cyberark-password-change-1 |
cyberark-pam-cef-user-password-modify-success-vault-1 |
| cef-cyberark-security-alert |
cyberark-pam-cef-alert-trigger-success-vault |
| cef-cyberark-security-alert-1 |
cyberark-pta-cef-alert-trigger-success-riskyactivities |
| cef-cybereason-security-alert |
cybereason-cr-cef-alert-trigger-success-malops |
| cef-cylance-alert |
blackberry-protect-cef-alert-trigger-success-cylance |
| cef-darktrace |
darktrace-darktrace-cef-alert-trigger-success-darktrace |
| cef-db2-activity |
ibm-db2-kv-database-activity-itsecurity |
| cef-db2-auth-failed |
ibm-db2-cef-vpn-login-fail-pcidb2 |
| cef-db2-file-read |
ibm-db2-cef-file-read-success-pcidb2 |
| cef-db2-object-access |
ibm-db2-kv-database-activity-pcidb2 |
| cef-db2-remote-logon |
ibm-db2-cef-endpoint-login-fail-security |
| cef-db2-security-alert |
ibm-db2-cef-alert-trigger-success-appsec |
| cef-db2-security-alert-2 |
ibm-db2-cef-alert-trigger-success-securitysystemattack |
| cef-defender-atp-alert |
microsoft-defenderep-sk4-alert-trigger-success-requestclientapplication |
| cef-defender-atp-batch-logon |
microsoft-defenderep-cef-endpoint-login-batch |
| cef-defender-atp-file |
microsoft-defenderep-cef-file-devicefileevents |
| cef-defender-atp-file-write |
microsoft-defenderep-cef-link-create-shelllinkcreatefileevent |
| cef-defender-atp-image-load |
microsoft-defenderep-sk4-dll-load-deviceimageloadevents |
| cef-defender-atp-local-logon |
microsoft-defenderep-cef-endpoint-login-interactive |
| cef-defender-atp-malware-detected |
microsoft-defenderep-sk4-alert-trigger-success-windowsdefenderav |
| cef-defender-atp-member-added |
microsoft-defenderep-cef-group-member-add-success-accountadded |
| cef-defender-atp-member-removed |
microsoft-defenderep-cef-group-member-remove-success-accountremoved |
| cef-defender-atp-network-con |
microsoft-defenderep-cef-network-session-devicenetworkevents |
| cef-defender-atp-network-info |
microsoft-defenderep-cef-network-notification-advancedhunting |
| cef-defender-atp-process |
microsoft-defenderep-sk4-process-create-success-deviceprocessevents |
| cef-defender-atp-process-1 |
microsoft-defenderep-cef-process-create-success-processcreated |
| cef-defender-atp-process-created-1 |
microsoft-defenderep-sk4-http-request-browserlaunched |
| cef-defender-atp-process-created-failed |
microsoft-defenderep-sk4-alert-trigger-callblocked |
| cef-defender-atp-process-created-failed-1 |
microsoft-defenderep-cef-process-create-fail-exploitguardnonmicrosoftsignedblocked |
| cef-defender-atp-registry |
microsoft-defenderep-sk4-registry-modify-advancedhunting |
| cef-defender-atp-remote-access |
microsoft-defenderep-cef-endpoint-login-network |
| cef-defender-atp-remote-logon |
microsoft-defenderep-cef-endpoint-login-remoteinteractive |
| cef-defender-atp-service-created-1 |
microsoft-defenderep-cef-service-create-serviceinstalled |
| cef-defender-atp-service-logon |
microsoft-defenderep-cef-endpoint-login-service |
| cef-defender-atp-system-alert-1 |
microsoft-defenderep-sk4-alert-trigger-wificonnection |
| cef-defender-atp-system-event |
microsoft-defenderep-cef-process-token-modify-processprimarytokenmodified |
| cef-defender-atp-system-event-1 |
microsoft-defenderep-cef-script-execute-powershellcommand |
| cef-defender-atp-system-event-10 |
microsoft-defenderep-cef-process-thread-create-remotethreadapicall |
| cef-defender-atp-system-event-11 |
microsoft-defenderep-sk4-clipboard-read-getclipboarddata |
| cef-defender-atp-system-event-12 |
microsoft-defenderep-cef-process-memory-read-readprocessmemoryapicall |
| cef-defender-atp-system-event-13 |
microsoft-defenderep-cef-process-memory-allocate-advancedhunting-1 |
| cef-defender-atp-system-event-14 |
microsoft-defenderep-cef-endpoint-notification-deviceconnected |
| cef-defender-atp-system-event-15 |
microsoft-defenderep-sk4-alert-trigger-theftaudited |
| cef-defender-atp-system-event-18 |
microsoft-defenderep-sk4-alert-trigger-theftblocked |
| cef-defender-atp-system-event-2 |
microsoft-defenderep-sk4-ds-object-read-ldapsearch |
| cef-defender-atp-system-event-3 |
microsoft-defenderep-cef-process-memory-allocate-advancedhunting |
| cef-defender-atp-system-event-4 |
microsoft-defenderep-sk4-driver-load-driverload |
| cef-defender-atp-system-event-5 |
microsoft-defenderep-cef-process-open-apicall |
| cef-defender-atp-system-event-6 |
microsoft-defenderep-sk4-endpoint-screenshot-screenshottaken |
| cef-defender-atp-system-event-7 |
microsoft-defenderep-sk4-alert-trigger-childprocessaudited |
| cef-defender-atp-system-event-8 |
microsoft-defenderep-sk4-alert-trigger-acgenforced |
| cef-defender-atp-system-info |
microsoft-defenderep-sk4-endpoint-activity-deviceevents |
| cef-defender-atp-system-info-1 |
microsoft-defenderep-sk4-alert-trigger-antivirusreport |
| cef-defender-atp-system-info-2 |
microsoft-defenderep-cef-endpoint-scan-antivirusscan |
| cef-defender-atp-system-info-3 |
microsoft-defenderep-cef-scheduled-task-delete-scheduledtaskdeleted |
| cef-defender-atp-system-info-4 |
microsoft-defenderep-sk4-endpoint-notification-huntingdeviceevents |
| cef-defender-atp-task-created |
microsoft-defenderep-cef-scheduled-task-create-scheduledtaskcreated |
| cef-defender-device-info |
microsoft-defenderep-cef-endpoint-notification-advancehuntingdevinfo |
| cef-defender-graph-security-alert |
microsoft-defenderep-sk4-alert-trigger-success-securityalerts |
| cef-defender-system-info |
microsoft-azureatp-sk4-alert-trigger-success-deviceinfo |
| cef-digitalguardian-file-operation |
dg-ep-cef-file-dgfileoperation |
| cef-digitalguardian-local-logon |
dg-ep-cef-endpoint-login-success-userlogon |
| cef-digitalguardian-print |
dg-ep-cef-printer-activity-success-print |
| cef-digitalguardian-send-mail |
dg-ndlp-cef-email-send-success-sendmail |
| cef-dlp-email-in |
microsoft-exchange-cef-email-receive-incoming |
| cef-dlp-email-out |
microsoft-exchange-cef-email-send-originating |
| cef-dropbox-app-activity-1 |
dropbox-d-cef-vpnfileapp-1 |
| cef-dropbox-app-activity-10 |
dropbox-d-json-app-activity-success-shared |
| cef-dropbox-app-activity-2 |
dropbox-d-cef-vpnfileapp-2 |
| cef-dropbox-app-activity-3 |
dropbox-d-cef-vpnfileapp-3 |
| cef-dropbox-app-activity-4 |
dropbox-d-cef-vpnfileapp-4 |
| cef-dropbox-app-activity-5 |
dropbox-d-cef-vpnfileapp-5 |
| cef-dropbox-app-activity-6 |
dropbox-d-cef-vpnfileapp-6 |
| cef-dropbox-app-activity-7 |
dropbox-d-cef-vpnfileapp-7 |
| cef-dropbox-app-activity-8 |
dropbox-d-cef-vpnfileapp-8 |
| cef-dropbox-app-activity-9 |
dropbox-d-json-app-file-success-tag |
| cef-dropbox-login-activity |
dropbox-d-json-app-login-success-login |
| cef-dtex-dir-created |
dtexsystems-intercept-cef-file-write-success-dircreated |
| cef-dtex-dir-delete |
dtexsystems-intercept-cef-file-delete-success-dirdeleted |
| cef-dtex-dir-moved |
dtexsystems-intercept-cef-file-write-success-dirmoved |
| cef-dtex-dir-renamed |
dtexsystems-intercept-cef-file-write-success-dirrenamed |
| cef-dtex-file-copied |
dtexsystems-intercept-cef-file-write-success-filecopied |
| cef-dtex-file-created |
dtexsystems-intercept-cef-file-write-success-filecreated |
| cef-dtex-file-delete |
dtexsystems-intercept-cef-file-delete-success-filedeleted |
| cef-dtex-file-modified |
dtexsystems-intercept-cef-file-write-success-filemodified |
| cef-dtex-file-moved |
dtexsystems-intercept-cef-file-write-success-filemoved |
| cef-dtex-file-read |
dtexsystems-intercept-cef-file-read-success-fileread |
| cef-dtex-file-renamed |
dtexsystems-intercept-cef-file-write-success-filerenamed |
| cef-dtex-local-logon |
dtexsystems-intercept-cef-endpoint-login-success-sessionlogon |
| cef-dtex-print-activity |
dtexsystems-intercept-cef-printer-activity-success-dtex |
| cef-dtex-process-created |
dtexsystems-intercept-cef-process-create-success-processcreated |
| cef-dtex-remote-logon |
dtexsystems-intercept-cef-endpoint-login-success-sessionactivity |
| cef-dtex-web-activity |
dtexsystems-intercept-cef-http-session-success-webpageaccessed |
| cef-dtex-workstation-locked |
dtexsystems-intercept-cef-endpoint-lock-success-sessionlocked |
| cef-dtex-workstation-unlocked |
dtexsystems-intercept-cef-endpoint-unlock-success-sessionunlocked |
| cef-duo-VPN-login |
cisco-duo-sk4-vpn-login-success-newenrollment |
| cef-duo-VPN-login-failed |
cisco-duo-cef-vpn-login-fail-loginfailure |
| cef-duo-app-activity |
cisco-duo-cef-app-login-destservicenameduo |
| cef-duo-app-activity-1 |
cisco-duo-json-app-activity-success-api |
| cef-duo-app-login |
cisco-duo-cef-app-login-success-twofactorsuccess |
| cef-duo-app-login-1 |
cisco-duo-cef-app-login-success-success |
| cef-duo-auth |
cisco-duo-cef-endpoint-authentication-mfaservice |
| cef-duo-authentication |
cisco-duo-cef-endpoint-authentication-newenrollment |
| cef-duo-failed-app-login-1 |
cisco-duo-cef-app-login-fail-twofactorfail |
| cef-ecat-security-alert |
rsa-ecat-cef-alert-trigger-success-ecatalert |
| cef-edirectory-account-disabled |
novell-ed-cef-user-disable-success-logindisabled |
| cef-edirectory-account-enabled |
novell-ed-cef-user-enable-success-loginenabled |
| cef-edirectory-account-password-change |
novell-ed-cef-user-password-modify-success-passwordchanged |
| cef-edirectory-account-unlocked |
novell-ed-kv-user-unlock-success-accountunlock |
| cef-edirectory-auth-1 |
novell-ed-cef-endpoint-authentication-login |
| cef-edirectory-auth-2 |
novell-ed-cef-endpoint-authentication-authenticate |
| cef-edirectory-security-alert |
novell-ed-cef-alert-trigger-success-intruderdetected |
| cef-egnyte-app-activity |
egnyte-egnyte-sk4-app-activity-success-addedtogroup |
| cef-egnyte-app-activity-1 |
egnyte-egnyte-sk4-app-activity-success-removedfromgroup |
| cef-egnyte-app-activity-10 |
egnyte-egnyte-sk4-app-activity-success-delete |
| cef-egnyte-app-activity-11 |
egnyte-e-cef-app-activity-success-create |
| cef-egnyte-app-activity-12 |
engyte-e-cef-app-activity-success-update |
| cef-egnyte-app-activity-13 |
egnyte-egnyte-sk4-app-activity-success-subject |
| cef-egnyte-app-activity-2 |
egnyte-egnyte-sk4-app-activity-success-verificationdisable |
| cef-egnyte-app-activity-3 |
egnyte-egnyte-sk4-app-activity-success-verificationenable |
| cef-egnyte-app-activity-4 |
egnyte-egnyte-sk4-app-activity-success-upgradedtopower |
| cef-egnyte-app-activity-5 |
egnyte-egnyte-sk4-app-activity-success-verified |
| cef-egnyte-app-activity-6 |
egnyte-e-cef-app-activity-success-disable |
| cef-egnyte-app-activity-7 |
egnyte-egnyte-sk4-app-activity-success-enable |
| cef-egnyte-app-activity-8 |
egnyte-egnyte-sk4-app-activity-success-passwordchange |
| cef-egnyte-app-activity-9 |
egnyte-egnyte-sk4-app-activity-success-passwordreset |
| cef-egnyte-file-operations |
egnyte-e-cef-file-permission-modify-success-assigner |
| cef-endgame-process-alert |
endgame-edr-cef-alert-trigger-success-alerttrigger |
| cef-epic-app-activity-1 |
epic-siem-cef-app-activity-success-maskeddatadisplay |
| cef-epic-app-activity-10 |
epic-siem-cef-app-activity-success-accessgranted |
| cef-epic-app-activity-11 |
epic-siem-cef-app-activity-success-browserexternalpage |
| cef-epic-app-activity-12 |
epic-siem-cef-app-activity-success-acbreaktheglassaccess |
| cef-epic-app-activity-2 |
epic-siem-cef-app-activity-success-maskeddataprinting |
| cef-epic-app-activity-3 |
epic-siem-cef-app-activity-success-startup |
| cef-epic-app-activity-4 |
epic-seim-cef-app-activity-success-secure |
| cef-epic-app-activity-5 |
epic-siem-cef-app-activity-success-unsecure |
| cef-epic-app-activity-6 |
epic-siem-cef-app-activity-success-icserviceaudit |
| cef-epic-app-activity-7 |
epic-seim-cef-app-activity-success-switchuser |
| cef-epic-app-activity-8 |
epic-siem-cef-app-activity-success-roverfailedlogin |
| cef-epic-app-activity-9 |
epic-siem-cef-app-activity-success-contextchange |
| cef-epic-app-login |
epic-siem-cef-app-login-success-login |
| cef-epic-auth-successful |
epic-siem-cef-endpoint-login-success-security |
| cef-epic-failed-app-login |
epic-siem-cef-app-login-fail-failedlogin |
| cef-exchange-app-activity |
microsoft-exchange-sk4-app-activity-success-harddelete |
| cef-exchange-app-activity-1 |
microsoft-exchange-cef-app-activity-exchangeonline |
| cef-exchange-app-activity-2 |
microsoft-exchange-cef-app-activity-update |
| cef-exchange-app-activity-3 |
microsoft-exchange-cef-app-activity-movetodeleteditems |
| cef-exchange-app-activity-4 |
microsoft-exchange-cef-app-activity-setuser |
| cef-exchange-app-activity-5 |
microsoft-exchange-cef-app-activity-softdelete |
| cef-exchange-app-activity-6 |
microsoft-exchange-cef-app-activity-setmailbox |
| cef-exchange-app-activity-7 |
microsoft-exchange-cef-app-activity-newmailbox |
| cef-exchange-scanmail-alert |
trendmicro-scanmail-cef-alert-trigger-success-100104 |
| cef-exchange-scanmail-app-activity |
trendmicro-scanmail-cef-configuration-modify-300101 |
| cef-extrahop-network-sec |
extrahop-revealx-cef-alert-trigger-success-riskscore |
| cef-f5-asm-alert |
f5-asm-cef-alert-trigger-success-http |
| cef-f5-dns-request |
f5-bigipdns-cef-dns-request-success-dnsevent |
| cef-f5-network-alert |
f5-afm-cef-alert-trigger-attack |
| cef-f5-vpn-end |
f5-apm-cef-vpn-logout-success-stop |
| cef-f5-vpn-start |
f5-apm-cef-vpn-login-success-newsessionfromclient |
| cef-f5-vpn-start-1 |
f5-apm-cef-vpn-login-success-start |
| cef-f5-vpn-user |
f5-apm-cef-vpn-success-username |
| cef-fidelis-alert |
fidelis-fnetwork-sk4-alert-trigger-success-alerttime |
| cef-fireeye-email-alert |
fireeye-networksecurity-cef-alert-trigger-success-mailciousmail |
| cef-fireeye-ex-security-alert |
fireeye-emailsecurity-cef-alert-trigger-success-fireeye |
| cef-fireeye-hx-app-activity |
fireeye-endpointsecurity-cef-alert-trigger-containment |
| cef-fireeye-hx-security-alert |
fireeye-endpointsecurity-cef-alert-trigger-success-malwarehitfound |
| cef-forcepoint-dlp-alert |
forcepoint-dlp-cef-alert-trigger-success-tritonapdata |
| cef-forcepoint-dlp-alert-1 |
forcepoint-dlp-cef-alert-trigger-success-forcepointdlp |
| cef-forcepoint-dlp-alert-2 |
forcepoint-dlp-cef-alert-trigger-success-forcepoint |
| cef-forcepoint-dlp-alert-3 |
forcepoint-dlp-cef-alert-trigger-success-dlpsyslog |
| cef-forcepoint-dlp-email-alert |
forcepoint-dlp-cef-email-send-success-message |
| cef-forcepoint-dlp-email-alert-1 |
forcepoint-emailsecurity-cef-email-send-success-message |
| cef-forcepoint-dlp-email-alert-2 |
forcepoint-dlp-cef-email-violationtriggers |
| cef-forcepoint-dlp-email-alert-out |
forcepoint-dlp-cef-email-send-success-smtp |
| cef-forcepoint-email-outcome |
forcepoint-dlp-cef-email-receive-success-emaildelivery |
| cef-forcepoint-email-spam-score |
forcepoint-dlp-cef-email-receive-success-policyclean |
| cef-forcepoint-email-subject |
forcepoint-dlp-cef-email-receive-success-message |
| cef-forcepoint-it-dlp-alert |
forcepoint-insiderthreat-cef-alert-trigger-success-siemnotification |
| cef-forcepoint-proxy |
forcepoint-wsg-cef-http-session-request |
| cef-fortinet-app-activity |
fortinet-firewall-cef-app-activity-appctrl |
| cef-fortinet-auth-failed |
fortinet-utm-cef-endpoint-authentication-fail-ntlmauth |
| cef-fortinet-auth-successful |
fortinet-utm-cef-endpoint-authentication-success-ntlmauth |
| cef-fortinet-network-connection |
fortinet-firewall-cef-network-traffic-connectionaction |
| cef-fortinet-web-activity |
fortinet-utm-cef-http-session-webfilter |
| cef-fortinet-web-activity-1 |
fortinet-utm-cef-http-session-fortinet |
| cef-fortinet-web-activity-2 |
fortinet-fortigate-cef-http-session-webfilter |
| cef-fsecure-security-alert |
fsecure-policymanager-cef-alert-trigger-success-fsecure |
| cef-fsecure-system-info |
fsecure-policymanager-cef-app-activity-import |
| cef-gcp-system-info |
google-gcpca-sk4-app-activity-stackdriverevents |
| cef-generic |
microfocusarcsight-ma-cef-app-activity-success-4363448 |
| cef-github-app-activity |
github-g-sk4-repository-create-success-github |
| cef-google-app-activity-1 |
google-workspace-sk4-app-activity-success-calendar |
| cef-google-app-activity-2 |
google-workspace-sk4-app-activity-success-mobile |
| cef-google-app-activity-3 |
google-workspace-sk4-app-success-token |
| cef-google-app-activity-4 |
google-workspace-sk4-app-activity-success-admin |
| cef-google-app-activity-5 |
google-workspace-sk4-app-activity-success-groups |
| cef-google-app-activity-6 |
google-workspace-sk4-app-success-activity |
| cef-google-app-activity-7 |
google-workspace-cef-app-activity-success-audit |
| cef-google-app-login |
google-workspace-cef-app-login-uniquequalifier |
| cef-google-app-login-1 |
google-workspace-sk4-app-login-success-googleapps2 |
| cef-google-file-activity |
google-workspace-sk4-file-success-googleapps1 |
| cef-google-logout |
google-workspace-sk4-app-logout-success-login |
| cef-google-password-update |
google-workspace-sk4-user-password-success-changepassword |
| cef-graph-security-alert |
microsoft-m365auditlogs-sk4-alert-trigger-adminrelatedactivityalert |
| cef-gtb-dlp-alert |
gtb-gtbi-cef-alert-trigger-success-gtb |
| cef-gtb-failed-usb-activity |
gtb-gtbdlp-cef-file-write-fail-blocked |
| cef-gtb-failed-usb-activity-1 |
gtb-gtbdlp-cef-file-write-fail-blocked-1 |
| cef-gtb-usb-activity |
gtb-gtbdlp-cef-file-delete-logged |
| cef-gtb-usb-read |
gtb-gtbdlp-cef-file-write-logged |
| cef-gtb-usb-write |
gtb-gtbdlp-cef-file-write-loggedviolation |
| cef-gtb-usb-write-1 |
gtb-gtbdlp-cef-file-write-loggedviolation-1 |
| cef-guardium-database-alert |
ibm-guardium-cef-alert-trigger-success-unauthaccess |
| cef-guardium-db-alert |
ibm-guardium-cef-alert-trigger-success-classification |
| cef-guardium-db-alert-1 |
ibm-guardium-cef-alert-trigger-success-loginfail |
| cef-guardium-db-query |
ibm-guardium-kv-database-query-success-sql |
| cef-honeywell-physical-badge-access |
honeywell-siama-cef-physical-location-access-success-skud |
| cef-hp-print-activity |
hp-printserver-cef-printer-activity-success-printserver |
| cef-ibm-auth-failed |
ibm-lmc-cef-endpoint-login-fail-lmcloginfail |
| cef-ibm-auth-successful |
ibm-lmc-cef-endpoint-login-success-logsuccess |
| cef-ibm-racf-app-activity |
ibm-racf-cef-app-login-ibmracf |
| cef-ibm-racf-app-activity-1 |
ibm-racf-cef-app-notification-zos |
| cef-ibm-sense |
ibm-s-leef-alert-trigger-success-ubamachinelearninganomaly |
| cef-icdb-app-activity |
icdb-i-cef-app-activity-success-appactivity |
| cef-iis-web-activity |
microsoft-iis-cef-http-session-internetinformationserver |
| cef-iis-web-activity-1 |
microsoft-iis-str-http-session-webactivity |
| cef-imperva-web-activity |
imperva-securesphere-cef-http-request-servergroup |
| cef-incapsula-web-activity |
imperva-incapsula-cef-http-session-ddos |
| cef-incapsula-web-activity-2 |
imperva-incapsula-cef-http-session-siemintegration |
| cef-infoblox-network-alert |
infoblox-bddi-cef-alert-trigger-success-alert |
| cef-infoblox-network-connection |
infoblox-bddi-cef-network-traffic-threat |
| cef-infoblox-system-info |
infoblox-nios-cef-app-activity-esm |
| cef-infowatch-app-login |
infowatch-dlp-cef-app-login-success-login |
| cef-infowatch-email-alert |
infowatch-dlp-cef-email-receive-send-success-mailonclient |
| cef-infowatch-print-activity |
infowatch-dlp-cef-printer-activity-success-print |
| cef-infowatch-usb-write |
infowatch-dlp-cef-file-write-success-externaldevice |
| cef-infowatch-web-activity |
infowatch-iwdlp-cef-http-session-success-webmessage |
| cef-infowatch-web-activity-1 |
infowatch-dlp-cef-http-session-success-mailinbrowser |
| cef-ironport-dlp-email |
cisco-ie-cef-email-send-receive-success-subject |
| cef-ixia-network-connection |
ixia-ta-cef-network-traffic-fail-networktrafficfail |
| cef-juniper-access-control |
juniper-ps-cef-vpn-login-success-agentloginsucceededfor |
| cef-juniper-access-control-1 |
juniper-srx-cef-vpn-login-success-agentlogin |
| cef-juniper-access-control-2 |
juniper-srx-cef-vpn-login-success-addeduser |
| cef-juniper-access-control-3 |
juniper-srx-cef-vpn-login-success-removeduser |
| cef-juniper-account-deleted |
juniper-ps-cef-user-delete-fail-juniper |
| cef-juniper-failed-vpn-login |
juniper-ps-cef-vpn-login-fail-loginfail |
| cef-juniper-failed-vpn-login-1 |
juniper-srx-cef-vpn-login-fail-loginfailedusing |
| cef-juniper-failed-vpn-login-2 |
juniper-srx-cef-vpn-login-fail-secureaccess |
| cef-juniper-proxy |
juniper-ps-cef-http-session-success-webrequestcompleted |
| cef-juniper-pulse-activity |
juniper-ps-cef-app-activity-success-requestcompleted |
| cef-juniper-vpn-authfailed |
juniper-ps-cef-endpoint-authentication-fail-authfailed |
| cef-juniper-vpn-close |
juniper-ps-cef-vpn-logout-success-juniper |
| cef-juniper-vpn-close-1 |
juniper-ps-cef-vpn-logout-success-closed |
| cef-juniper-vpn-end |
juniper-ps-cef-vpn-logout-success-sessionendedeforuser |
| cef-juniper-vpn-end-1 |
juniper-ps-cef-vpn-logout-success-authenticated |
| cef-juniper-vpn-login |
juniper-ps-cef-vpn-login-success-loginsucceeded |
| cef-juniper-vpn-logout |
juniper-ps-cef-vpn-logout-success-logout |
| cef-juniper-vpn-relogin |
juniper-ps-cef-vpn-logout-success-loggedoutfrom |
| cef-juniper-vpn-resume |
juniper-ps-cef-vpn-login-success-sessionresumed |
| cef-juniper-vpn-start |
juniper-ps-cef-vpn-login-success-sessionstartedforuser |
| cef-juniper-vpn-start-1 |
juniper-srx-cef-vpn-login-success-loginsucceededfor |
| cef-juniper-vpn-start-2 |
juniper-srx-cef-vpn-login-success-loginfromip |
| cef-juniper-vpn-timeout |
juniper-ps-cef-vpn-logout-success-adminidletimeout |
| cef-juniper-vpn-timeout-1 |
juniper-ps-cef-vpn-logout-success-timedout |
| cef-kaba-badge-access |
kabaexos-k-cef-physical-location-access-success-9300 |
| cef-kaspersky-dlp-email |
kaspersky-av-cef-email-receive-success-emailreceive |
| cef-kaspersky-file-alert |
kaspersky-av-cef-alert-trigger-success-objnotprocessed |
| cef-kaspersky-security-alert |
kaspersky-endpointsecurity-cef-alert-trigger-success-endpointsecurity |
| cef-kaspersky-security-alert-1 |
kaspersky-endpointsecurity-cef-alert-trigger-success-securitycenter |
| cef-leap-app-activity-3 |
leap-l-str-app-activity-success-leapshk |
| cef-liebsoft-app-activity-1 |
beyondtrust-prividentity-cef-app-activity-elevationfailed |
| cef-liebsoft-app-activity-2 |
beyondtrust-prividentity-cef-app-activity-jobaccount |
| cef-liebsoft-app-activity-3 |
beyondtrust-prividentity-cef-app-activity-accountdeelevated |
| cef-liebsoft-app-activity-4 |
beyondtrust-prividentity-cef-app-activity-deelevationfailed |
| cef-liebsoft-app-activity-5 |
beyondtrust-prividentity-cef-app-activity-listaddedaccount |
| cef-lightcyber-alert |
pan-magnifier-cef-alert-trigger-success-lightcyber |
| cef-logbinder-file-operation |
logbinder-sharepoint-cef-file-app-fname |
| cef-logrhythm-process-created |
logrhythm-l-kv-process-create-success-pid |
| cef-lyrix-badge-access |
lyrix-l-cef-physical-location-access-success-doorname |
| cef-lyrix-badge-access-1 |
lyrix-l-cef-physical-location-access-success-department |
| cef-magento-waf |
magento-waf-sk4-http-session-wafseverity |
| cef-malwarebytes-network-alert-ids |
malwarebytes-ep-cef-alert-trigger-success-remoteintrusiondetectionfound |
| cef-malwarebytes-security-alert |
malwarebytes-ep-cef-alert-trigger-success-websiteblocked |
| cef-malwarebytes-security-alert-1 |
malwarebytes-ep-cef-alert-trigger-success-endpointprotection |
| cef-malwarebytes-security-alert-2 |
malwarebytes-ep-cef-alert-trigger-success-incidentresponse |
| cef-malwarebytes-security-alert-exploit |
malwarebytes-ep-cef-alert-trigger-success-exploitblocked |
| cef-mbmc-security-alert-detection |
malwarebytes-ep-cef-alert-trigger-success-detection-1 |
| cef-mbmc-security-alert-detection-1 |
malwarebytes-ep-cef-alert-trigger-success-detection |
| cef-mbmc-security-alert-ipblock |
malwarebytes-ep-cef-alert-trigger-success-ipblock |
| cef-mcafee-cloud-dlp-alert |
mcafee-dlp-cef-alert-trigger-success-cloud |
| cef-mcafee-dlp-alert |
mcafee-dlp-cef-alert-trigger-success-deviceplug |
| cef-mcafee-dlp-alert-1 |
mcafee-dlp-mix-alert-trigger-success-dlp |
| cef-mcafee-dlp-alert-2 |
mcafee-dlp-cef-alert-trigger-success-alerttrigger |
| cef-mcafee-dlp-alert-3 |
mcafee-dlp-cef-alert-trigger-success-alerttrigger-1 |
| cef-mcafee-dlp-alert-info |
mcafee-dlp-cef-alert-trigger-success-administrative |
| cef-mcafee-dlp-email |
mcafee-ep-cef-email-send-success-emailsubject |
| cef-mcafee-dlp-email-alert |
mcafee-ep-cef-email-send-success-emaildelivered |
| cef-mcafee-dlp-email-alert-2 |
mcafee-ep-cef-email-send-success-emailprotection |
| cef-mcafee-dlp-email-alert-failed |
mcafee-ep-cef-email-receive-fail-emailrejected |
| cef-mcafee-dlp-email-out |
mcafee-dlp-cef-email-send-success-protectedcontent |
| cef-mcafee-dlp-prevent |
mcafee-dlp-cef-email-send-fail-dlpprevent |
| cef-mcafee-dns-query |
infoblox-bddi-cef-dns-request-success-mcafee |
| cef-mcafee-epo-alert |
mcafee-es-cef-alert-trigger-success-virisscan |
| cef-mcafee-epo-alert-1 |
mcafee-es-cef-alert-trigger-success-roguesystemdetected |
| cef-mcafee-epo-alert-2 |
mcafee-es-cef-alert-trigger-success-notauthorized |
| cef-mcafee-epo-alert-3 |
mcafee-es-cef-alert-trigger-success-portblocking |
| cef-mcafee-epo-alert-4 |
mcafee-es-cef-alert-trigger-success-infectedfiledeleted |
| cef-mcafee-epo-alert-5 |
mcafee-es-cef-alert-trigger-success-userdefinedrules |
| cef-mcafee-epo-alert-6 |
mcafee-es-cef-alert-trigger-success-accessprotectionrule |
| cef-mcafee-epo-alert-solidifier |
mcafee-solidifier-kv-alert-trigger-success-signatureid |
| cef-mcafee-epo-dlp-alert |
mcafee-dlp-kv-alert-trigger-success-epodlpe |
| cef-mcafee-epo-system-info |
mcafee-es-cef-file-delete-epolicyorchestrator |
| cef-mcafee-epo-system-info-1 |
mcafee-es-cef-app-activity-ops |
| cef-mcafee-mvision-skyhigh-dlp-alert-1 |
mcafee-sncasb-cef-alert-trigger-success-alertpolicy |
| cef-mcafee-network-alert |
mcafee-nsp-cef-alert-trigger-success-securitymanager |
| cef-mcafee-print-activity |
mcafee-dlp-cef-printer-activity-success-printingprotection |
| cef-mcafee-print-activity-1 |
mcafee-dlp-cef-printer-activity-success-printername |
| cef-mcafee-process-alert |
mcafee-es-cef-alert-trigger-success-epolicyorchestrator |
| cef-mcafee-security-alert |
mcafee-es-cef-alert-trigger-success-hostintrusion |
| cef-mcafee-security-alert-1 |
mcafee-es-cef-alert-trigger-success-endpointsecurity |
| cef-mcafee-skyhigh-app-activity |
mcafee-sncasb-cef-app-activity-success-appnavigation |
| cef-mcafee-skyhigh-app-activity-1 |
mcafee-sncasb-cef-app-activity-success-userinfoedited |
| cef-mcafee-skyhigh-app-activity-10 |
mcafee-sncasb-leef-app-activity-success-savedviewdeleted |
| cef-mcafee-skyhigh-app-activity-11 |
mcafee-sncasb-leef-app-activity-success-scheduledreportcreated |
| cef-mcafee-skyhigh-app-activity-12 |
mcafee-sncasb-leef-app-activity-success-apiaccess |
| cef-mcafee-skyhigh-app-activity-2 |
mcafee-sncasb-cef-app-activity-success-apploadtimings |
| cef-mcafee-skyhigh-app-activity-3 |
mcafee-sncasb-cef-app-activity-success-showlessview |
| cef-mcafee-skyhigh-app-activity-4 |
mcafee-sncasb-cef-app-activity-success-newusercreated |
| cef-mcafee-skyhigh-app-activity-5 |
mcafee-sncasb-cef-app-activity-success-incidentdownloaded |
| cef-mcafee-skyhigh-app-activity-6 |
mcafee-sncasb-cef-app-activity-success-showmoreview |
| cef-mcafee-skyhigh-app-activity-7 |
mcafee-sncasb-cef-app-activity-success-userdeleted |
| cef-mcafee-skyhigh-app-activity-8 |
mcafee-sncasb-leef-app-activity-success-changeincidentstatus |
| cef-mcafee-skyhigh-app-activity-9 |
mcafee-sncasb-leef-app-activity-success-reportdownloaded |
| cef-mcafee-skyhigh-app-login |
mcafee-sncasb-cef-app-login-success-userloggedin |
| cef-mcafee-skyhigh-dlp-alert |
mcafee-sncasb-mix-alert-trigger-success-anomalies |
| cef-mcafee-skyhigh-dlp-alert-1 |
mcafee-sncasb-cef-alert-trigger-success-dlpalertpolicy |
| cef-mcafee-skyhigh-failed-app-login |
mcafee-sncasb-cef-app-login-fail-auditlogs |
| cef-mcafee-skyhigh-file-downloaded |
mcafee-sncasb-cef-file-download-success-anomalousaccesslocation |
| cef-mcafee-skyhigh-logout |
mcafee-sncasb-cef-app-logout-success-userloggedout |
| cef-mcafee-skyhigh-security-alert |
mcafee-sncasb-cef-alert-trigger-success-superhumanalertaccess |
| cef-mcafee-usb |
mcafee-dlp-cef-file-write-success-blockusb |
| cef-mcafee-usb-activity |
mcafee-es-cef-file-write-success-deviceplug |
| cef-mcafee-usb-activity-1 |
mcafee-es-cef-file-write-success-removablestorage |
| cef-mcafee-usb-insert |
mcafee-es-cef-peripheral-storage-insert-success-deviceplug |
| cef-mcafee-vse-alert |
mcafee-es-cef-alert-trigger-success-virusscan |
| cef-mdam-db-alert |
mcafee-mdam-cef-alert-trigger-success-alert |
| cef-mdam-db-alert-1 |
mcafee-mdam-cef-alert-trigger-success-alert-1 |
| cef-member-added-2003 |
microsoft-evsecurity-cef-group-member-add-success-groupmemberadded |
| cef-member-added-2008 |
microsoft-evsecurity-cef-group-member-add-success-securityenabled |
| cef-member-removed-2008 |
microsoft-evsecurity-cef-group-member-remove-success-4733 |
| cef-meraki-network-alert |
cisco-mma-cef-alert-trigger-success-classification |
| cef-microsoft-app-activity-1 |
microsoft-o365-cef-app-file-success-addmembertorole |
| cef-microsoft-app-activity-10 |
microsoft-o365-cef-app-file-success-deleteuser |
| cef-microsoft-app-activity-11 |
microsoft-o365-cef-app-file-success-restoreuser |
| cef-microsoft-app-activity-12 |
microsoft-o365-cef-app-file-success-updateuser |
| cef-microsoft-app-activity-13 |
microsoft-o365-cef-app-file-success-storageanalyticsevents |
| cef-microsoft-app-activity-14 |
"microsoft-azuremon-sk4-app-activity-operationname |
| cef-microsoft-app-activity-15 |
microsoft-azuremon-sk4-app-activity-bastionauditlogs |
| cef-microsoft-app-activity-16 |
microsoft-azuremon-cef-app-activity-category |
| cef-microsoft-app-activity-17 |
microsoft-o365-cef-app-file-success-filemodified |
| cef-microsoft-app-activity-18 |
microsoft-o365-cef-app-file-success-foldercreated |
| cef-microsoft-app-activity-19 |
microsoft-o365-cef-app-file-success-filedeleted |
| cef-microsoft-app-activity-2 |
microsoft-o365-cef-app-file-success-addgroup |
| cef-microsoft-app-activity-20 |
microsoft-o365-cef-app-file-success-filemoved |
| cef-microsoft-app-activity-21 |
microsoft-o365-cef-app-file-success-filerenamed |
| cef-microsoft-app-activity-22 |
microsoft-o365-cef-app-file-success-fileupload |
| cef-microsoft-app-activity-23 |
microsoft-o365-cef-app-file-success-channeladded |
| cef-microsoft-app-activity-24 |
microsoft-o365-cef-app-file-success-channeldeleted |
| cef-microsoft-app-activity-25 |
microsoft-o365-cef-app-file-success-memberadded |
| cef-microsoft-app-activity-26 |
microsoft-o365-cef-app-file-success-memberremoved |
| cef-microsoft-app-activity-27 |
microsoft-o365-cef-app-file-success-rolechanged |
| cef-microsoft-app-activity-28 |
microsoft-o365-cef-app-file-success-tabadded |
| cef-microsoft-app-activity-29 |
microsoft-o365-cef-app-file-success-tabupdated |
| cef-microsoft-app-activity-3 |
microsoft-o365-cef-app-file-success-deletegroup |
| cef-microsoft-app-activity-30 |
microsoft-o365-cef-app-file-success-viewreport |
| cef-microsoft-app-activity-31 |
microsoft-o365-cef-app-file-success-updatedevice |
| cef-microsoft-app-activity-32 |
microsoft-o365-cef-app-file-success-crmdefaultactivity |
| cef-microsoft-app-activity-33 |
microsoft-o365-cef-app-file-success-downloadreport |
| cef-microsoft-app-activity-34 |
microsoft-o365-cef-app-file-success-refreshdataset |
| cef-microsoft-app-activity-35 |
microsoft-o365-cef-app-file-success-viewdashboard |
| cef-microsoft-app-activity-36 |
microsoft-o365-sk4-app-file-success-viewdashboard |
| cef-microsoft-app-activity-37 |
microsoft-o365-cef-app-file-success-displayname |
| cef-microsoft-app-activity-38 |
microsoft-azure-cef-app-file-success-ldapquery |
| cef-microsoft-app-activity-39 |
microsoft-o365-cef-app-file-success-movetodeleteditems |
| cef-microsoft-app-activity-4 |
microsoft-o365-cef-app-file-success-groupupload |
| cef-microsoft-app-activity-40 |
microsoft-o365-cef-app-file-success-addapplication |
| cef-microsoft-app-activity-41 |
microsoft-o365-cef-app-file-success-harddelete |
| cef-microsoft-app-activity-42 |
microsoft-o365-cef-app-file-success-modifiedproperties |
| cef-microsoft-app-activity-43 |
microsoft-azure-sk4-app-file-success-secretget |
| cef-microsoft-app-activity-44 |
microsoft-azure-sk4-app-file-success-keybackup |
| cef-microsoft-app-activity-5 |
microsoft-o365-cef-app-file-success-removememberfromgroup |
| cef-microsoft-app-activity-51 |
microsoft-o365-cef-app-file-success-filesyncuploadedfull |
| cef-microsoft-app-activity-52 |
microsoft-o365-cef-app-file-success-addtogroup |
| cef-microsoft-app-activity-53 |
microsoft-o365-sk4-app-activity-success-addedtogroup |
| cef-microsoft-app-activity-54 |
microsoft-o365-sk4-app-activity-success-softdelete |
| cef-microsoft-app-activity-55 |
microsoft-o365-sk4-app-activity-success-movetodeleteditems-2 |
| cef-microsoft-app-activity-56 |
microsoft-o365-sk4-app-activity-success-create |
| cef-microsoft-app-activity-7 |
microsoft-o365-cef-app-file-success-serviceprincipal |
| cef-microsoft-app-activity-8 |
microsoft-o365-cef-app-file-success-addownertogroup |
| cef-microsoft-app-activity-9 |
microsoft-o365-cef-app-file-success-adduser |
| cef-microsoft-app-activity-inbox-rule |
microsoft-o365-cef-app-activity-success-inboxrule |
| cef-microsoft-app-login |
microsoft-azure-cef-app-login-success-description |
| cef-microsoft-app-login-1 |
microsoft-azuremon-sk4-app-authentication-accounttokenlogin |
| cef-microsoft-app-login-2 |
microsoft-azuremon-sk4-app-login-databricks |
| cef-microsoft-app-login-3 |
microsoft-azuremon-cef-app-login-browserlogin |
| cef-microsoft-app-logout |
microsoft-azuremon-sk4-app-logout-sshlogout |
| cef-microsoft-auth-attempt |
microsoft-azure-cef-app-authentication-credentialsvalidation |
| cef-microsoft-azure-signalr |
microsoft-azuremon-mix-network-start-collection |
| cef-microsoft-azure-signalr-1 |
microsoft-azuremon-cef-network-start-fail-startconnectionfailed |
| cef-microsoft-azure-signalr-2 |
microsoft-azuremon-cef-network-close-connectionabort |
| cef-microsoft-azure-signalr-3 |
microsoft-azuremon-mix-network-start-collection |
| cef-microsoft-database-delete |
microsoft-mssql-cef-database-delete-success-deletedatabasecommand |
| cef-microsoft-database-events |
logbinder-sqlserver-cef-database-activity-logbindersql |
| cef-microsoft-database-failed-login |
microsoft-mssql-cef-database-login-fail-24003 |
| cef-microsoft-database-failed-login-1 |
microsoft-mssql-cef-database-login-fail-atz |
| cef-microsoft-database-login |
microsoft-mssql-cef-database-login-success-loginsucceded |
| cef-microsoft-database-query |
microsoft-azure-cef-database-query-success-samr |
| cef-microsoft-dlp-alert |
microsoft-defendercloud-cef-alert-trigger-success-datalossprevention |
| cef-microsoft-dns-query |
microsoft-azure-cef-dns-request-success-dnsquery |
| cef-microsoft-failed-app-login |
microsoft-azure-cef-app-login-fail-dest |
| cef-microsoft-file-activity |
microsoft-azuremon-sk4-app-activity-appservicefileauditlogs |
| cef-microsoft-graph-activity |
microsoft-o365-json-app-login-fail-loginfail |
| cef-microsoft-graph-activity-1 |
microsoft-o365-json-app-login-success-loginsuccess |
| cef-microsoft-graph-activity-2 |
microsoft-m365auditlogs-sk4-app-activity-graphdirectoryauditlogs |
| cef-microsoft-graph-activity-3 |
microsoft-o365-json-app-login-fail-loginfailed |
| cef-microsoft-graph-activity-4 |
microsoft-o365-json-app-login-success-loginsuccess-1 |
| cef-microsoft-graph-activity-5 |
microsoft-m365auditlogs-sk4-app-activity-mcasactivities |
| cef-microsoft-graph-activity-6 |
microsoft-o365-json-app-login-success-loginsuccess-2 |
| cef-microsoft-password-change |
microsoft-azure-cef-user-password-modify-success-pwdchanged |
| cef-microsoft-print-activity |
microsoft-evprintservice-cef-printer-activity-success-307 |
| cef-microsoft-process-alert |
microsoft-defendercloud-cef-alert-trigger-success-vmsvchostrun |
| cef-microsoft-process-alert-1 |
microsoft-defendercloud-cef-alert-trigger-success-vmrunbypsexec |
| cef-microsoft-remote-logon |
microsoft-azure-cef-rdp-traffic-success-remotedesktop |
| cef-microsoft-security-alert |
microsoft-defendercloud-cef-alert-trigger-success-storageblob |
| cef-microsoft-security-alert-1 |
microsoft-defendercloud-cef-alert-trigger-success-mcasalert |
| cef-microsoft-system-info |
microsoft-o365-sk4-app-activity-auditevent |
| cef-mimecast-dlp-email |
mimecast-seg-cef-email-send-receive-rcpt |
| cef-mimecast-dlp-email-attachment |
mimecast-seg-cef-email-send-receive-attname |
| cef-mimecast-email-alert |
mimecast-seg-cef-email-url |
| cef-mimecast-email-alert-1 |
mimecast-seg-cef-email-inbound |
| cef-mimecast-email-alert-2 |
mimecast-seg-sk4-email-receive-success-emailsecurity |
| cef-mimecast-email-alert-3 |
mimecast-seg-sk4-email-send-receive-defaulttenant |
| cef-mimecast-failed-app-login |
mimecast-seg-cef-app-login-fail-logonauthfailed |
| cef-mimecast-message-view |
mimecast-seg-cef-app-activity-success-messageviewlogs |
| cef-mimecast-security-alert |
mimecast-seg-cef-email-hold |
| cef-mimecast-web-activity |
mimecast-ttp-sk4-http-session-emailsecurity |
| cef-moveit-activity |
ipswitch-moveittransfer-cef-app-activity-success-moveit |
| cef-moveit-app-failed-login |
ipswitch-moveittransfer-kv-app-login-fail-moveit |
| cef-moveit-app-login |
ipswitch-moveittransfer-kv-app-login-success-signon |
| cef-msn-nac-logon |
microsoft-nps-cef-endpoint-login-success-accessrequest |
| cef-mssql-database-access |
microsoft-mssql-cef-database-activity-success-sqlserver |
| cef-mssql-database-login |
microsoft-mssql-cef-database-login-success-authentication |
| cef-mwg-proxy |
mcafee-wg-cef-http-session-gateway |
| cef-nac-logon |
cisco-ise-cef-endpoint-login-success-authenticationsucceeded |
| cef-named-dns-config-change |
infoblox-nios-cef-configuration-modify-rpziprewrite |
| cef-netapp-4624 |
microsoft-evsecurity-sk4-endpoint-4624 |
| cef-netapp-4634 |
microsoft-evsecurity-sk4-endpoint-logout-success-4634 |
| cef-netapp-4656 |
microsoft-evsecurity-sk4-handle-request-success-4656 |
| cef-netapp-4659 |
microsoft-evsecurity-sk4-handle-request-success-4659 |
| cef-netapp-4660 |
microsoft-evsecurity-sk4-endpoint-activity-success-4660 |
| cef-netapp-4663 |
microsoft-evsecurity-sk4-file-write-success-4663 |
| cef-netapp-4670 |
netapp-n-sk4-file-permission-modify-4670 |
| cef-netapp-9999 |
netapp-n-sk4-file-rename-9999 |
| cef-netapp-file-delete |
netapp-n-cef-file-delete-success-objectopenfordelete |
| cef-netapp-file-delete-2 |
netapp-n-cef-file-delete-success-deleteobjectattempt |
| cef-netapp-file-operations-1 |
netapp-n-json-file-success-operation |
| cef-netapp-file-read |
netapp-n-cef-file-read-success-objectopen |
| cef-netapp-file-read-2 |
netapp-n-cef-file-read-success-objectopen-1 |
| cef-netapp-file-updates |
netapp-n-cef-file-write-success-cifs |
| cef-netscaler-aaatm-login |
citrix-cgateway-cef-endpoint-login-success-login |
| cef-netscreen-network-connection-deny |
juniper-srx-cef-network-traffic-fail-trafficdeny |
| cef-netscreen-network-connection-permit |
juniper-srx-cef-network-traffic-success-trafficpermit |
| cef-netskope-alert |
netskope-sc-sk4-alert-trigger-success-netskope-1 |
| cef-netskope-alert-1 |
netskope-sc-sk4-alert-trigger-success-netskope |
| cef-netskope-alert-2 |
netskope-sc-sk4-alert-trigger-success-malwaretype |
| cef-netskope-alert-anomaly |
netskope-sc-sk4-alert-trigger-success-alerttypeanomaly |
| cef-netskope-alert-compromise |
netskope-sc-sk4-alert-trigger-success-breach |
| cef-netskope-alert-malsite |
netskope-sc-sk4-alert-trigger-success-malsite |
| cef-netskope-alert-policy |
netskope-sc-sk4-alert-trigger-success-actdetect |
| cef-netskope-alert-policy-1 |
netskope-sc-json-alert-trigger-success-policy |
| cef-netskope-app-activity-1 |
netskope-sc-sk4-app-activity-success-dislike |
| cef-netskope-app-activity-10 |
netskope-sc-sk4-app-activity-success-create |
| cef-netskope-app-activity-11 |
netskope-sc-sk4-app-activity-success-delete |
| cef-netskope-app-activity-12 |
netskope-sc-sk4-app-activity-success-download |
| cef-netskope-app-activity-13 |
netskope-sc-sk4-app-activity-success-edit |
| cef-netskope-app-activity-14 |
netskope-sc-sk4-app-activity-success-invite |
| cef-netskope-app-activity-15 |
netskope-sc-sk4-app-activity-success-move |
| cef-netskope-app-activity-16 |
netskope-sc-sk4-app-activity-success-share |
| cef-netskope-app-activity-17 |
netskope-sc-sk4-app-activity-success-upload |
| cef-netskope-app-activity-18 |
netskope-sc-sk4-app-activity-success-view |
| cef-netskope-app-activity-19 |
netskope-sc-sk4-app-activity-success-viewall |
| cef-netskope-app-activity-2 |
netskope-sc-sk4-app-activity-success-like |
| cef-netskope-app-activity-20 |
netskope-sc-sk4-app-activity-success-mark |
| cef-netskope-app-activity-21 |
netskope-sc-cef-file-write-success-rename |
| cef-netskope-app-activity-22 |
netskope-sc-sk4-app-activity-success-sitecolumncreated |
| cef-netskope-app-activity-23 |
netskope-sc-sk4-app-activity-success-deleteuser |
| cef-netskope-app-activity-24 |
netskope-sc-sk4-app-activity-success-strongauthentication |
| cef-netskope-app-activity-25 |
netskope-sc-sk4-app-activity-success-searchqueryperformed |
| cef-netskope-app-activity-26 |
netskope-sc-sk4-app-activity-success-updatetimestamp |
| cef-netskope-app-activity-27 |
netskope-sc-sk4-app-activity-success-alertcenterview |
| cef-netskope-app-activity-28 |
netskope-sc-sk4-app-activity-success-archiveuser |
| cef-netskope-app-activity-29 |
netskope-sc-sk4-app-activity-success-changegmailsetting |
| cef-netskope-app-activity-3 |
netskope-sc-sk4-app-activity-success-powerups |
| cef-netskope-app-activity-30 |
netskope-sc-sk4-app-activity-success-createlevel |
| cef-netskope-app-activity-31 |
netskope-sc-sk4-app-activity-success-creategmailsetting |
| cef-netskope-app-activity-32 |
netskope-sc-sk4-app-activity-success-deletelevel |
| cef-netskope-app-activity-33 |
netskope-sc-sk4-app-activity-success-deletesetting |
| cef-netskope-app-activity-34 |
netskope-sc-sk4-app-activity-success-driverestore |
| cef-netskope-app-activity-35 |
netskope-sc-sk4-app-activity-success-emaillogsearch |
| cef-netskope-app-activity-36 |
netskope-sc-sk4-app-activity-success-groupmembersdownload |
| cef-netskope-app-activity-37 |
netskope-sc-sk4-app-activity-success-requesttransfer |
| cef-netskope-app-activity-38 |
netskope-sc-sk4-app-activity-success-securityinvestigationquery |
| cef-netskope-app-activity-39 |
netskope-sc-sk4-app-activity-success-accesslevel |
| cef-netskope-app-activity-4 |
netskope-sc-sk4-app-activity-success-follow |
| cef-netskope-app-activity-40 |
netskope-sc-sk4-app-activity-success-updategroupmember |
| cef-netskope-app-activity-41 |
netskope-sc-sk4-app-activity-success-alertcentergetsitlink |
| cef-netskope-app-activity-42 |
netskope-sc-sk4-app-activity-success-alertcenterlistchange |
| cef-netskope-app-activity-43 |
netskope-sc-sk4-app-activity-success-alertcenterlistfeedback |
| cef-netskope-app-activity-44 |
netskope-sc-sk4-app-activity-success-alertcenterlistrelatedalerts |
| cef-netskope-app-activity-45 |
netskope-sc-sk4-app-activity-success-putobject |
| cef-netskope-app-activity-46 |
netskope-sc-sk4-app-activity-success-copyobject |
| cef-netskope-app-activity-47 |
netskope-sc-sk4-app-activity-success-multipartupload |
| cef-netskope-app-activity-48 |
netskope-sc-sk4-app-activity-success-uploadpart |
| cef-netskope-app-activity-49 |
netskope-sc-sk4-app-activity-success-deleteobject |
| cef-netskope-app-activity-5 |
netskope-sc-sk4-app-activity-success-post |
| cef-netskope-app-activity-50 |
netskope-sc-sk4-app-activity-success-completeupload |
| cef-netskope-app-activity-51 |
netskope-sc-sk4-app-activity-success-pageprefetched |
| cef-netskope-app-activity-6 |
netskope-sc-sk4-app-activity-success-terminate |
| cef-netskope-app-activity-7 |
netskope-sc-sk4-app-activity-success-receive |
| cef-netskope-app-activity-8 |
netskope-sc-sk4-app-activity-success-send |
| cef-netskope-app-activity-9 |
netskope-sc-sk4-app-activity-success-approve |
| cef-netskope-app-login-1 |
netskope-sc-sk4-app-login-success-page |
| cef-netskope-app-login-2 |
netskope-sc-cef-app-login-success-loginsuccessful |
| cef-netskope-dlp-alert |
netskope-sc-sk4-alert-trigger-success-alertypedlp |
| cef-netskope-dlp-alert-1 |
netskope-sc-sk4-alert-trigger-success-alertypedlp |
| cef-netskope-dlp-alert-3 |
netskope-sc-json-alert-trigger-success-dlp-1 |
| cef-netskope-dlp-alert-4 |
netskope-sc-cef-alert-trigger-success-dlp |
| cef-netskope-dlp-email-alert-1 |
netskope-sc-cef-email-send-success-mail |
| cef-netskope-failed-app-login |
netskope-sc-cef-app-login-fail-loginfailed |
| cef-netskope-file-operation-1 |
netskope-sc-cef-file-browse |
| cef-netskope-file-operation-11 |
netskope-sc-cef-file-read-success-preview |
| cef-netskope-file-operation-12 |
netskope-sc-cef-file-permission-modify-success-share |
| cef-netskope-file-operation-13 |
netskope-sc-cef-file-upload-success-upload |
| cef-netskope-file-operation-14 |
netskope-sc-cef-file-read-success-view |
| cef-netskope-file-operation-15 |
netskope-sc-cef-file-read-success-viewall |
| cef-netskope-file-operation-16 |
netskope-sc-cef-file-read-success-accessedextended |
| cef-netskope-file-operation-17 |
netskope-sc-cef-file-write-success-modifiedextended |
| cef-netskope-file-operation-18 |
netskope-sc-cef-file-write-success-listupdated |
| cef-netskope-file-operation-19 |
netskope-sc-cef-file-write-success-listcolumncreated |
| cef-netskope-file-operation-2 |
netskope-sc-json-file-read-success-introspectionscan |
| cef-netskope-file-operation-20 |
netskope-sc-cef-file-write-success-listcreated |
| cef-netskope-file-operation-21 |
netskope-sc-cef-file-delete-success-listitemdeleted |
| cef-netskope-file-operation-22 |
netskope-sc-cef-file-write-success-listitemupdated |
| cef-netskope-file-operation-23 |
netskope-sc-cef-file-delete-success-filedeleted |
| cef-netskope-file-operation-24 |
netskope-sc-sk4-file-delete-success-folderdeleted |
| cef-netskope-file-operation-25 |
netskope-sc-cef-file-read-success-pageviewedextended |
| cef-netskope-file-operation-26 |
netskope-sc-json-file-download-success-download |
| cef-netskope-file-operation-3 |
netskope-sc-cef-file-write-success-create |
| cef-netskope-file-operation-4 |
netskope-sc-cef-file-delete-success-delete |
| cef-netskope-file-operation-5 |
netskope-sc-cef-file-download-success-download |
| cef-netskope-file-operation-6 |
netskope-sc-cef-file-write-success-edit |
| cef-netskope-file-operation-9 |
netskope-sc-cef-file-write-success-move |
| cef-netskope-logout |
netskope-sc-cef-app-logout-logoutsuccessful |
| cef-netskope-logout-1 |
netskope-sc-json-app-logout-success-logout |
| cef-netskope-network-info |
netskope-sc-json-app-login-loginattempt |
| cef-netskope-system-info |
netskope-sc-sk4-app-activity-adminauditlogs |
| cef-netskope-web-activity |
netskope-sc-cef-http-session-success-page |
| cef-netskope-web-activity-1 |
netskope-sc-cef-http-session-success-cloudapp |
| cef-netskope-web-policy |
netskope-sc-cef-http-session-fail-block-1 |
| cef-netskope-web-policy-1 |
netskope-sc-cef-http-session-fail-block |
| cef-nozomi-guardian-security-alert |
nozomi-guardian-cef-alert-trigger-success-n2os |
| cef-nsx-fw-logs-1 |
vmware-nsxfw-cef-network-traffic-success-nsxfw |
| cef-o365-app-activity-1 |
microsoft-o365-cef-file-accessrequestapproved |
| cef-o365-app-activity-10 |
microsoft-o365-cef-file-read-success-removedfromgroup |
| cef-o365-app-activity-11 |
microsoft-o365-cef-file-read-success-searchquery |
| cef-o365-app-activity-12 |
microsoft-o365-cef-file-read-success-resultreturn |
| cef-o365-app-activity-13 |
microsoft-o365-cef-file-read-success-videorequest |
| cef-o365-app-activity-14 |
microsoft-o365-cef-app-file-teams |
| cef-o365-app-activity-15 |
microsoft-o365-cef-file-read-success-sharepoint |
| cef-o365-app-activity-16 |
microsoft-o365-cef-file-read-success-listcolumncreated |
| cef-o365-app-activity-17 |
microsoft-o365-cef-file-read-success-listupdate |
| cef-o365-app-activity-18 |
microsoft-o365-cef-file-read-success-dlprule |
| cef-o365-app-activity-19 |
microsoft-o365-cef-file-read-success-channeladd |
| cef-o365-app-activity-2 |
microsoft-o365-cef-file-read-success-accessrequest |
| cef-o365-app-activity-20 |
microsoft-o365-cef-file-read-success-memberadded |
| cef-o365-app-activity-21 |
microsoft-o365-cef-app-file-memberremoved |
| cef-o365-app-activity-22 |
microsoft-o365-cef-app-file-tabadded |
| cef-o365-app-activity-23 |
microsoft-o365-cef-file-read-success-tabupdated |
| cef-o365-app-activity-24 |
microsoft-o365-sk4-app-activity-success-setuser |
| cef-o365-app-activity-3 |
microsoft-o365-cef-file-addtogroup |
| cef-o365-app-activity-4 |
microsoft-o365-cef-file-write-success-companylink |
| cef-o365-app-activity-5 |
microsoft-o365-cef-file-write-success-microsoft |
| cef-o365-app-activity-6 |
microsoft-o365-cef-file-write-success-sharinginheritance |
| cef-o365-app-activity-7 |
microsoft-o365-cef-file-write-success-sharingrevoked |
| cef-o365-app-activity-8 |
microsoft-o365-cef-file-write-success-sharingset |
| cef-o365-app-activity-9 |
microsoft-o365-cef-file-write-success-wactoken |
| cef-o365-app-login |
microsoft-o365-cef-app-login-appdisplayname |
| cef-o365-app-login-1 |
microsoft-azuread-cef-app-login-clientappused |
| cef-o365-app-login-2 |
microsoft-o365-cef-app-login-success-user |
| cef-o365-app-login-failed |
microsoft-o365-cef-app-login-fail-userloginfailed |
| cef-o365-dlp-alert |
microsoft-o365-cef-alert-trigger-success-alertdetected |
| cef-o365-dlp-email |
microsoft-o365-cef-email-success-subject |
| cef-o365-file-delete-1 |
microsoft-o365-cef-file-delete-success-filedeleted |
| cef-o365-file-delete-2 |
microsoft-o365-cef-file-delete-success-folderdeleted |
| cef-o365-file-read-1 |
microsoft-o365-cef-file-read-success-fileaccessed |
| cef-o365-file-read-2 |
microsoft-o365-cef-file-read-success-fileaccessedextended |
| cef-o365-file-read-3 |
microsoft-o365-cef-file-read-success-filecheckedout |
| cef-o365-file-read-4 |
microsoft-o365-cef-file-read-success-filedownloaded |
| cef-o365-file-read-5 |
microsoft-o365-cef-file-read-success-filepreviewed |
| cef-o365-file-read-6 |
microsoft-o365-cef-file-read-success-filesync |
| cef-o365-file-read-7 |
microsoft-o365-cef-file-read-success-pageviewed |
| cef-o365-file-read-8 |
microsoft-o365-cef-file-read-success-pageviewedextended |
| cef-o365-file-write-1 |
microsoft-o365-cef-file-write-success-filecheckedin |
| cef-o365-file-write-10 |
microsoft-o365-cef-file-write-success-foldermoved |
| cef-o365-file-write-11 |
microsoft-o365-cef-file-write-success-folderrenamed |
| cef-o365-file-write-2 |
microsoft-o365-cef-file-write-success-filemodified |
| cef-o365-file-write-3 |
microsoft-o365-cef-file-write-success-filemodifiedextended |
| cef-o365-file-write-4 |
microsoft-o365-cef-file-write-success-filemoved |
| cef-o365-file-write-5 |
microsoft-o365-cef-file-write-success-filerenamed |
| cef-o365-file-write-6 |
microsoft-o365-cef-file-write-success-filesyncuploadedfull |
| cef-o365-file-write-7 |
microsoft-o365-cef-file-write-success-fileuploaded |
| cef-o365-file-write-8 |
microsoft-o365-cef-file-write-success-foldercreated |
| cef-o365-file-write-9 |
microsoft-o365-cef-file-write-success-filemodified-1 |
| cef-o365-password-change |
microsoft-o365-cef-user-password-modify-success-changeuserpassword |
| cef-o365-security-alert |
microsoft-o365-sk4-alert-trigger-success-graphidentity |
| cef-o365-system-info |
microsoft-m365auditlogs-sk4-app-activity-managementgeneral |
| cef-observeit-app-activity |
observeit-o-cef-app-activity-success-observeit |
| cef-observeit-security-alert |
observeit-o-cef-alert-trigger-success-high |
| cef-okta-account-password-reset |
okta-amfa-cef-user-password-reset-success-pwdreset |
| cef-okta-account-unlocked |
okta-amfa-cef-user-password-reset-success-pwdreset-1 |
| cef-okta-app-activity |
okta-amfa-sk4-app-appactivity |
| cef-okta-app-login |
okta-amfa-cef-app-login-success-userssosuccess |
| cef-okta-app-login-1 |
okta-amfa-cef-app-login-success-userauthverify |
| cef-okta-logs-app-activity |
okta-amfa-mix-app-login-success-securitycontext |
| cef-okta-logs-app-alert |
okta-amfa-cef-alert-trigger-success-passwordspraydetected |
| cef-okta-logs-authentication |
okta-amfa-sk4-endpoint-login-inbounddelauth |
| cef-okta-member-added |
okta-amfa-sk4-group-member-add-success-adduser |
| cef-onapsis-app-login |
onapsis-o-cef-app-login-success-onapsis |
| cef-onapsis-failed-app-login |
onapsis-o-cef-app-login-fail-logins |
| cef-onapsis-security-alert |
onapsis-o-cef-alert-trigger-success-osp |
| cef-onapsis-system-event |
onapsis-o-cef-app-notification-isalive |
| cef-onedrive-app-activity |
microsoft-o365-sk4-app-activity-success-pageviewed |
| cef-onedrive-app-activity-1 |
microsoft-o365-cef-app-activity-list-listcolumnupdated |
| cef-onedrive-app-activity-2 |
microsoft-o365-cef-app-activity-list-listcolumnupdated-1 |
| cef-onedrive-app-activity-3 |
microsoft-o365-cef-app-activity-list-updatedlist |
| cef-onedrive-app-activity-4 |
microsoft-o365-cef-app-activity-list-companylinkused |
| cef-onedrive-app-activity-5 |
microsoft-o365-cef-app-activity-list-listcreated |
| cef-onedrive-app-activity-7 |
microsoft-o365-cef-app-activity-list-filesyncdownloadedpartial |
| cef-onedrive-file-activity |
microsoft-o365-cef-file-read-success-fileaccessed-1 |
| cef-onelogin-app-activity |
onelogin-o-cef-app-login-assumingactinguserid |
| cef-oracle-db-delete |
oracle-db-cef-database-delete-success-delete |
| cef-oracle-db-query |
oracle-db-cef-database-query-success-select |
| cef-oracle-db-update |
oracle-db-cef-database-modify-success-update |
| cef-palo-alto-networks-firewall-allow |
pan-ngfw-cef-network-traffic-success-end |
| cef-palo-alto-networks-firewall-connection |
pan-ngfw-cef-network-traffic-trafficdeny |
| cef-palo-alto-networks-firewall-connection-1 |
pan-ngfw-cef-network-traffic-success-decryption |
| cef-palo-alto-networks-firewall-deny |
pan-ngfw-cef-network-traffic-fail-deny |
| cef-palo-alto-networks-firewall-drop |
pan-ngfw-cef-network-traffic-fail-drop |
| cef-palo-alto-networks-firewall-drop-1 |
pan-ngfw-cef-network-traffic-fail-trafficdrop |
| cef-palo-alto-networks-firewall-end |
pan-ngfw-cef-network-traffic-success-traffic |
| cef-palo-alto-networks-firewall-end-1 |
pan-ngfw-cef-network-traffic-trafficend |
| cef-palo-alto-networks-firewall-start |
pan-ngfw-cef-network-traffic-starttraffic |
| cef-palo-alto-networks-security-alert |
pan-ngfw-cef-alert-trigger-success-panos |
| cef-palo-alto-networks-security-alert-1 |
pan-ngfw-cef-alert-trigger-success-spyware |
| cef-palo-alto-networks-setip |
pan-ngfw-cef-vpn-login-success-clientswitchtossltunnelmodesucceeded |
| cef-palo-alto-networks-vulnerability-alert |
pan-ngfw-cef-alert-trigger-success-threatvulnerability |
| cef-palo-alto-userid-login |
pan-gp-cef-vpn-login-success-login |
| cef-palo-alto-userid-logout |
pan-gp-cef-vpn-logout-success-logout |
| cef-palo-alto-vpn-system-event |
pan-gp-cef-app-notification-success-vpn |
| cef-palo-alto-vpn-system-event-1 |
pan-gp-cef-app-notification-success-userid |
| cef-paloalto-firewall |
pan-ngfw-cef-network-traffic-fail-panostraffic |
| cef-paloalto-firewall-global-protect |
pan-gp-cef-endpoint-authentication-panossystem |
| cef-pan-auth-failed |
pan-gp-cef-endpoint-authentication-fail-authfailed |
| cef-pan-auth-successful |
pan-gp-cef-endpoint-authentication-success-userauthentication |
| cef-pan-failed-logon |
pan-gp-kv-endpoint-login-fail-globalprotect |
| cef-pan-gp-app-activity |
pan-ngfw-cef-app-activity-success-globalprotect |
| cef-pan-gp-app-activity-1 |
pan-ngfw-cef-app-activity-success-globalprotect-1 |
| cef-pan-gp-app-activity-2 |
pan-ngfw-cef-app-activity-success-hipreport |
| cef-pan-gp-app-activity-3 |
pan-ngfw-cef-app-activity-success-getconfig |
| cef-pan-gp-app-activity-4 |
pan-ngfw-cef-app-activity-success-tunnellatency |
| cef-pan-gp-app-activity-5 |
pan-ngfw-cef-app-activity-success-ipsec |
| cef-pan-gp-system-event |
pan-gp-cef-app-notification-success-panos |
| cef-pan-gp-system-event-1 |
pan-gp-cef-app-notification-success-hipmatch |
| cef-pan-gp-vpn-end |
pan-ngfw-cef-vpn-logout-success-logout |
| cef-pan-gp-vpn-login |
pan-ngfw-cef-vpn-login-prelogin |
| cef-pan-gp-vpn-login-1 |
pan-ngfw-cef-vpn-login-prelogin-1 |
| cef-pan-gp-vpn-login-2 |
pan-ngfw-cef-vpn-login-register |
| cef-pan-gp-vpn-login-3 |
pan-ngfw-cef-vpn-login-connected |
| cef-pan-gp-vpn-start |
pan-ngfw-cef-vpn-login-auth |
| cef-pan-gp-vpn-start-1 |
pan-ngfw-cef-vpn-login-auth-1 |
| cef-pan-network-alert |
pan-ngfw-cef-alert-trigger-success-threat |
| cef-pan-network-alert-1 |
pan-ngfw-cef-alert-trigger-success-panos-1 |
| cef-pan-network-info |
pan-ngfw-cef-app-activity-panos |
| cef-pan-ngfw-system-auth |
pan-ngfw-cef-app-notification-success-auth |
| cef-pan-proxy |
pan-ngfw-cef-http-session-url |
| cef-pan-remote-logon |
pan-gp-kv-endpoint-login-fail-loginsucceeded |
| cef-pan-vpn-end |
pan-gp-cef-vpn-logout-success-globalprotect |
| cef-pan-vpn-login-failed |
pan-gp-mix-vpn-login-fail-globalprotect |
| cef-pan-vpn-login-failed-1 |
pan-gp-cef-vpn-login-fail-globalprotect |
| cef-pan-vpn-set-ip |
pan-gp-cef-vpn-login-success-paloaltonetworks |
| cef-pan-vpn-start |
pan-gp-cef-vpn-login-success-gatewayuser |
| cef-pantraps-alert |
pan-tesm-mix-alert-trigger-success-trapsagent |
| cef-phishme-security-alert |
cofense-pm-cef-alert-trigger-success-rulematch |
| cef-ping-app-login |
pingidentity-pi-cef-app-login-success-sso-1 |
| cef-ping-app-login-1 |
pingidentity-pi-cef-app-login-success-sso |
| cef-ping-app-login-2 |
pingidentity-pingone-sk4-app-login-success-loginsuccess |
| cef-ping-auth-attempt |
pingidentity-pi-cef-app-authentication-success-inprogress |
| cef-ping-auth-attempt-1 |
pingidentity-pi-cef-app-authentication-success-inprogress-1 |
| cef-ping-auth-attempt-2 |
pingidentity-pi-cef-app-authentication-success-oauth |
| cef-ping-auth-failed |
pingidentity-pi-cef-app-authentication-fail-failure |
| cef-ping-auth-failed-1 |
pingidentity-pi-cef-endpoint-authentication-fail-failure |
| cef-ping-auth-failed-2 |
pingidentity-pi-cef-endpoint-authentication-fail-authfailure |
| cef-ping-auth-failed-3 |
pingidentity-pi-cef-app-authentication-fail-failure-1 |
| cef-ping-auth-successful |
pingidentity-pi-cef-vpn-authentication-success-authnattempt |
| cef-ping-auth-successful-1 |
pingidentity-pi-cef-endpoint-authentication-success-authsuccess |
| cef-ping-auth-successful-2 |
pingidentity-pi-cef-endpoint-authentication-success-authenticated |
| cef-ping-auth-successful-3 |
pingidentity-pi-cef-vpn-authentication-success-pingfederate |
| cef-ping-auth-successful-4 |
pingidentity-pingone-sk4-vpn-login-success-sso |
| cef-ping-auth-successful-5 |
pingidentity-pingone-cef-vpn-authentication-success-ping |
| cef-ping-auth-successful-6 |
pingidentity-pi-cef-vpn-authentication-success-authnsessionused |
| cef-ping-auth-successful-7 |
pingidentity-pi-cef-endpoint-authentication-success-authnsessioncreated |
| cef-ping-events-skyformation-app-activity |
pingidentity-pi-cef-app-activity-success-action |
| cef-ping-events-skyformation-password |
pingidentity-pi-cef-app-login-password |
| cef-ping-events-skyformation-sso |
pingidentity-pi-cef-app-login-sso |
| cef-ping-events-skyformation-sso-idp |
pingidentity-pi-cef-app-login-sso-idp |
| cef-ping-events-skyformation-sso-session |
pingidentity-pi-cef-app-login-sso-session |
| cef-ping-failed-app-login |
pingidentity-pi-cef-app-login-fail-sso-1 |
| cef-ping-failed-app-login-1 |
pingidentity-pi-cef-app-login-fail-sso |
| cef-ping-failed-app-login-2 |
pingidentity-pingone-sk4-app-login-fail-loginfailed |
| cef-ping-logout |
pingidentity-pi-cef-app-logout-success-slo |
| cef-ping-logout-1 |
pingidentiy-pi-cef-app-logout-success-authsessiondelete |
| cef-ping-logout-2 |
pingidentity-pi-cef-app-logout-success-slo-1 |
| cef-ping-logout-3 |
pingidentity-pi-cef-app-logout-success-pingfederate |
| cef-pingfed-eamauth-authentication-attempt |
pingidentity-pi-cef-app-authentication-success-eamauth |
| cef-pingfed-eamauth-authentication-attempt-2 |
pingidentity-pi-cef-app-authentication-success-authnattempt |
| cef-pingfed-eamauth-authentication-attempt-3 |
pingidentity-pi-cef-app-authentication-success-authnsessioncreated |
| cef-pingfed-eamauth-authentication-attempt-4 |
pingidentity-pi-cef-app-authentication-success-authnsessionused |
| cef-pingid-auth |
pingidentity-pi-cef-endpoint-login-sso |
| cef-pingone-audit |
pingidentity-pingone-sk4-app-activity-ping-1 |
| cef-pingone-system-info |
pingidentity-pingone-sk4-app-activity-ping |
| cef-pingone-vpn-login |
pingidentity-pingone-sk4-vpn-login-success-pingauthsuccess |
| cef-postgresql-audit |
postgresql-p-cef-database-178272478 |
| cef-postscript-print-activity |
postscript-ps-str-printer-activity-success-print |
| cef-powershell-12039 |
microsoft-evpowershell-cef-endpoint-activity-12039 |
| cef-powershell-300 |
microsoft-evpowershell-cef-process-create-success-300 |
| cef-powershell-400 |
microsoft-evpowershell-cef-endpoint-notification-400 |
| cef-powershell-403 |
microsoft-evpowershell-cef-endpoint-notification-403 |
| cef-powershell-40961 |
microsoft-evpowershell-cef-endpoint-notification-40961 |
| cef-powershell-40962 |
microsoft-evpowershell-cef-endpoint-notification-40962 |
| cef-powershell-4100 |
microsoft-evpowershell-cef-script-execute-fail-4100 |
| cef-powershell-4102 |
microsoft-evpowershell-cef-process-create-success-4102 |
| cef-powershell-4104 |
microsoft-evpowershell-cef-script-execute-success-4104 |
| cef-powershell-53504 |
microsoft-evpowershell-cef-network-listen-53504 |
| cef-powershell-600 |
microsoft-evsecurity-cef-process-create-success-600 |
| cef-powershell-8196 |
microsoft-evpowershell-cef-endpoint-notification-8196 |
| cef-powershell-8197 |
microsoft-evpowershell-cef-endpoint-activity-8197 |
| cef-proofpoint-dlp-alert-1 |
proofpoint-pep-cef-alert-trigger-success-emailquarantineout |
| cef-proofpoint-dlp-alert-2 |
proofpoint-pep-cef-email-alert-success-emaildelivery |
| cef-proofpoint-dlp-alert-3 |
proofpoint-pep-cef-email-send-success-emailquarantine |
| cef-proofpoint-email-in |
proofpoint-tap-cef-email-receive-messageblocked |
| cef-proofpoint-email-in-1 |
proofpoint-pep-cef-email-receive-success-emaildelivery |
| cef-proofpoint-email-in-failed |
proofpoint-pep-cef-email-receive-fail-emaildeliveryfailed |
| cef-proofpoint-email-out |
proofpoint-pep-cef-email-send-success-emaildeliveryout |
| cef-proofpoint-email-out-failed |
proofpoint-pep-cef-email-send-fail-emaildelivery |
| cef-prowatch-badge-access |
honeywell-pw-cef-physical-location-access-success-location |
| cef-qip-dhcp |
nokia-vqip-cef-dhcp-session-success-dhcpsession |
| cef-radius-authentication |
hp-arubawc-cef-radius-traffic-success-clearpass |
| cef-radius-authentication-failed |
hp-arubawc-cef-radius-traffic-fail-radius |
| cef-rangeraudit-app-activity |
rangeraudit-ra-json-app-activity-success-enforcer |
| cef-rangeraudit-app-login |
rangeraudit-ra-kv-app-login-success-ranger |
| cef-rangeraudit-db-query-1 |
rangeraudit-ra-json-database-access |
| cef-rangeraudit-db-query-2 |
rangeraudit-ra-cef-database-query-fail-alter |
| cef-rangeraudit-db-query-3 |
rangeraudit-ra-cef-database-query-fail-use |
| cef-rangeraudit-db-query-4 |
rangeraudit-ra-cef-database-query-fail-create |
| cef-rangeraudit-db-query-5 |
rangeraudit-ra-cef-database-query-fail-drop |
| cef-rangeraudit-db-query-6 |
rangeraudit-ra-cef-database-query-fail-update |
| cef-rangeraudit-db-query-7 |
rangeraudit-ra-cef-database-query-fail-masknull |
| cef-rangeraudit-failed-login |
rangeraudit-ra-str-app-login-fail-loginunsuccess |
| cef-rangeraudit-file-operations |
rangeraudit-ra-json-file-success-path |
| cef-rightcrowd-failed-physical-access |
rightcrowd-rc-cef-physical-location-access-fail-invalidreader |
| cef-rightcrowd-failed-physical-access-1 |
rightcrowd-rc-cef-physical-location-access-fail-rightcrowd |
| cef-rightcrowd-failed-physical-access-2 |
rightcrowd-rc-cef-physical-location-access-fail-codeerror |
| cef-rightcrowd-failed-physical-access-3 |
rightcrowd-rc-cef-physical-location-access-fail-programmed |
| cef-rightcrowd-physical-access |
rightcrowd-rc-cef-physical-location-access-success-validcard |
| cef-rightcrowd-system-info |
rightcrowd-rc-cef-app-activity-eventid |
| cef-rsa-app-login |
rsa-netwitness-cef-app-login-success-httpsrequest |
| cef-rsa-app-login-1 |
rsa-netwitness-cef-app-login-success-authsuccess |
| cef-rsa-logout |
rsa-netwitness-cef-app-logout-success-logoff |
| cef-rsa-logout-1 |
rsa-netwitness-cef-app-logout-success-audit |
| cef-rsa-network-connection |
rsa-netwitness-cef-app-login-success-secureconnection |
| cef-rsa-system-event |
rsa-netwitness-cef-app-activity-success-dataaccess |
| cef-rsa-system-event-1 |
rsa-netwitness-cef-app-activity-success-netwitnessaudit |
| cef-rsa-system-event-2 |
rsa-netwitness-cef-app-activity-success-systemoperation |
| cef-rsa-system-event-3 |
rsa-netwitness-cef-app-activity-success-api |
| cef-ruid-auth-success |
ruid-r-cef-endpoint-login-success-bca |
| cef-salesforce-account-switch |
salesforce-sf-sk4-user-switch-success-access |
| cef-salesforce-app-activity-1 |
salesforce-sf-sk4-app-activity-success-accountlayout |
| cef-salesforce-app-activity-10 |
salesforce-sf-sk4-app-activity-success-createdpicklistwithcolor |
| cef-salesforce-app-activity-11 |
salesforce-sf-sk4-app-activity-success-deletedpicklistwithcolor |
| cef-salesforce-app-activity-12 |
salesforce-sf-sk4-app-activity-success-deletedprofile |
| cef-salesforce-app-activity-13 |
salesforce-sf-sk4-app-activity-success-deployedchangeset |
| cef-salesforce-app-activity-14 |
salesforce-sf-sk4-app-activity-success-salescloud |
| cef-salesforce-app-activity-15 |
salesforce-sf-sk4-app-activity-success-permsetassign |
| cef-salesforce-app-activity-16 |
salesforce-sf-sk4-app-activity-success-permsetcreatenolicense |
| cef-salesforce-app-activity-17 |
salesforce-sf-sk4-app-activity-success-profileclonedstandard |
| cef-salesforce-app-activity-18 |
salesforce-sf-sk4-app-activity-success-profilecustappcustom |
| cef-salesforce-app-activity-19 |
salesforce-sf-sk4-app-activity-success-profileolpchangedcustom |
| cef-salesforce-app-activity-2 |
salesforce-sf-sk4-app-activity-success-changedpicklist |
| cef-salesforce-app-activity-20 |
salesforce-sf-sk4-app-activity-success-profilepermchangedcustom |
| cef-salesforce-app-activity-21 |
salesforce-sf-sk4-app-activity-success-decryptioncertificate |
| cef-salesforce-app-activity-22 |
salesforce-sf-sk4-app-activity-success-signcert |
| cef-salesforce-app-activity-23 |
salesforce-sf-sk4-app-activity-success-setupentityaccessaudit |
| cef-salesforce-app-activity-24 |
salesforce-sf-sk4-app-activity-success-suorgadminlogout |
| cef-salesforce-app-activity-25 |
salesforce-sf-sk4-app-activity-success-updatedcompactlayoutmapping |
| cef-salesforce-app-activity-26 |
salesforce-sf-sk4-app-activity-success-auditevent |
| cef-salesforce-app-activity-27 |
salesforce-sf-sk4-app-activity-success-createdrole |
| cef-salesforce-app-activity-28 |
salesforce-sf-sk4-app-activity-success-createipwhitelist |
| cef-salesforce-app-activity-29 |
salesforce-sf-sk4-app-activity-success-profileflschangedstandard |
| cef-salesforce-app-activity-3 |
salesforce-sf-sk4-app-activity-success-changedpicklistsort |
| cef-salesforce-app-activity-30 |
salesforce-sf-sk4-app-activity-success-createduser |
| cef-salesforce-app-activity-31 |
salesforce-sf-sk4-app-activity-success-changedpassword |
| cef-salesforce-app-activity-32 |
salesforce-sf-sk4-app-activity-success-resourcedeleted |
| cef-salesforce-app-activity-34 |
salesforce-sf-cef-email-send-success-emailmessage |
| cef-salesforce-app-activity-35 |
salesforce-sf-sk4-app-activity-success-deactivateduser |
| cef-salesforce-app-activity-36 |
salesforce-sf-sk4-app-activity-success-resetpassword |
| cef-salesforce-app-activity-37 |
salesforce-sf-sk4-app-activity-success-unlockeduser |
| cef-salesforce-app-activity-38 |
salesforce-sf-sk4-app-activity-success-addedtodelegatedgroup |
| cef-salesforce-app-activity-39 |
salesforce-sf-sk4-app-activity-success-userlockedout |
| cef-salesforce-app-activity-4 |
salesforce-sf-sk4-app-activity-success-changedpicklistvalueapiname |
| cef-salesforce-app-activity-41 |
salesforce-sf-sk4-app-activity-success-resourcepropertyupdated |
| cef-salesforce-app-activity-42 |
salesforce-sf-sk4-app-activity-success-activateduser |
| cef-salesforce-app-activity-43 |
salesforce-sf-sk4-app-activity-success-changedcommunitynickname |
| cef-salesforce-app-activity-44 |
salesforce-sf-sk4-app-activity-success-changedemail |
| cef-salesforce-app-activity-45 |
salesforce-sf-sk4-app-activity-success-changedprofileforuserstdtostd |
| cef-salesforce-app-activity-46 |
salesforce-sf-sk4-app-activity-success-frozeuser |
| cef-salesforce-app-activity-47 |
salesforce-sf-sk4-app-activity-success-useremailchangesent |
| cef-salesforce-app-activity-5 |
salesforce-sf-sk4-app-activity-success-changedprofileforuser |
| cef-salesforce-app-activity-6 |
salesforce-sf-sk4-app-activity-success-changedprofileforusercusttostd |
| cef-salesforce-app-activity-7 |
salesforce-sf-sk4-app-activity-success-changedprofileforuserstdtocust |
| cef-salesforce-app-activity-8 |
salesforce-sf-sk4-app-activity-success-changedroleforuser |
| cef-salesforce-app-activity-9 |
salesforce-sf-sk4-app-activity-success-changedroleforuserfromnone |
| cef-salesforce-app-login |
salesforce-sf-cef-app-login-success-loginsuccess |
| cef-salesforce-failed-app-login |
salesforce-sf-cef-app-login-fail-loginfailed |
| cef-salesforce-file-download |
salesforce-sf-cef-file-download-success-cloud |
| cef-salesforce-file-upload |
salesforce-sf-cef-file-upload-success-cloud |
| cef-sap-account-creation |
sap-s-cef-user-create-success-created |
| cef-sap-account-deleted |
sap-s-cef-user-delete-success-deleted |
| cef-sap-account-lockout |
sap-s-cef-user-lock-success-locked |
| cef-sap-account-password-change |
sap-s-cef-user-password-modify-success-changed |
| cef-sap-account-unlocked |
sap-s-cef-user-unlock-success-unlocked |
| cef-sap-app-activity-1 |
sap-s-cef-endpoint-authentication-logon |
| cef-sap-app-activity-2 |
sap-s-cef-user-delete-fail-audit |
| cef-sap-app-activity-3 |
sap-s-cef-file-download-success-auy |
| cef-sap-authentication-attempt |
sap-s-cef-endpoint-login-success-assertion |
| cef-sap-authentication-attempt-1 |
sap-s-cef-endpoint-login-success-assertion-1 |
| cef-sap-authentication-failed |
sap-s-cef-endpoint-login-fail-secude |
| cef-sap-file-download |
sap-s-cef-file-download-success-download |
| cef-sap-file-write |
sap-s-cef-file-write-success-download |
| cef-sap-system-info |
sap-s-cef-app-notification-success-bu4 |
| cef-sap-system-info-1 |
sap-s-cef-app-notification-success-eg0 |
| cef-sap-system-info-10 |
sap-s-cef-app-notification-success-cub |
| cef-sap-system-info-11 |
sap-s-cef-app-notification-success-bul |
| cef-sap-system-info-2 |
sap-s-cef-app-notification-success-h01 |
| cef-sap-system-info-3 |
sap-s-cef-app-notification-success-geo |
| cef-sap-system-info-4 |
sap-s-cef-app-notification-success-attribute |
| cef-sap-system-info-5 |
sap-s-cef-app-notification-success-nameid |
| cef-sap-system-info-6 |
sap-s-cef-app-notification-success-e00 |
| cef-sap-system-info-7 |
sap-s-cef-app-notification-success-bi0 |
| cef-sap-system-info-8 |
sap-s-cef-app-notification-success-aud |
| cef-sap-system-info-9 |
sap-s-cef-app-notification-success-cbus |
| cef-scbpam-account-password-change |
dell-oim-cef-user-password-modify-success-forcechange |
| cef-scbpam-account-switch |
dell-oim-cef-user-switch-success-retrievepassword |
| cef-scbpam-app-activity |
dell-oim-cef-app-activity-success-appactivity |
| cef-secret-server-system-info |
delinea-ss-cef-app-activity-appactivity |
| cef-securesphere-app-login |
imperva-securesphere-cef-app-login-success-userloggedin |
| cef-securesphere-app-login-failed |
imperva-securesphere-cef-app-login-fail-loginfailed |
| cef-securesphere-database-operations |
imperva-securesphere-cef-database-auditdam |
| cef-securesphere-db-alert |
imperva-securesphere-cef-alert-trigger-success-servergroup |
| cef-securesphere-db-alert-1 |
imperva-securesphere-cef-alert-trigger-success-alert |
| cef-securesphere-db-alert-2 |
imperva-securesphere-cef-alert-trigger-servergroup |
| cef-securesphere-db-failed-login |
imperva-securesphere-cef-database-login-fail-audit |
| cef-securesphere-db-login |
imperva-securesphere-cef-database-login-success-audit |
| cef-securesphere-db-logout |
imperva-securesphere-cef-database-logout-securespherelogout |
| cef-securesphere-db-query |
imperva-securesphere-cef-database-query-success-audit |
| cef-securesphere-db-query-1 |
imperva-securesphere-cef-database-query-success-securesphere |
| cef-securesphere-db-query-2 |
imperva-securesphere-cef-database-query-success-informative |
| cef-securesphere-file-operations |
imperva-fam-cef-file-success-audit |
| cef-securesphere-logout |
imperva-securesphere-cef-app-logout-userloggedout |
| cef-security-graph-alert |
microsoft-azuresc-json-alert-trigger-success-geoanomaly |
| cef-sendmail-system-info |
unix-unix-cef-app-activity-sendmail |
| cef-sensormatik-badge-access |
sensormatik-s-cef-physical-location-access-success-sensormatik |
| cef-sentinelone-file-alert |
sentinelone-singularityp-cef-file-success-securityfile |
| cef-sentinelone-network-alert |
sentinelone-singularityp-cef-alert-trigger-success-dns |
| cef-sentinelone-network-alert-1 |
sentinelone-singularityp-cef-alert-trigger-success-ip |
| cef-sentinelone-security-alert |
sentinelone-singularityp-cef-alert-trigger-success-newactivethreat |
| cef-sentinelone-security-alert-1 |
sentinelone-singularityp-cef-alert-trigger-threatclassification |
| cef-sentinelone-security-alert-2 |
sentinelone-singularityp-cef-process-create-success-process |
| cef-sentinelone-security-alert-3 |
sentinelone-singularityp-cef-registry-modify-success-registry |
| cef-sentinelone-security-alert-4 |
sentinelone-singularityp-cef-process-create-success-scheduledtask |
| cef-sentinelone-security-alert-5 |
sentinelone-singularityp-cef-alert-trigger-success-agentoperation |
| cef-sentinelone-security-alert-6 |
sentinelone-singularityp-cef-alert-trigger-success-classification |
| cef-servicenow-auth-1 |
servicenow-s-sk4-app-authentication-success-sessionestablished |
| cef-servicenow-auth-2 |
servicenow-s-sk4-app-authentication-success-externalauthenticationsucceeded |
| cef-servicenow-file-operation-2 |
servicenow-s-cef-file-syscreated |
| cef-servicenow-login-1 |
servicenow-s-json-app-login-sucess-login |
| cef-servicenow-login-2 |
servicenow-s-json-app-login-sucess-impersonationstart |
| cef-servicenow-login-failed |
servicenow-s-json-app-login-fail-loginfailed |
| cef-servicenow-logout |
servicenow-s-sk4-app-logout-success-impersonationend |
| cef-servicenow-logout-1 |
servicenow-s-sk4-app-logout-success-logout |
| cef-sharepoint-system-info |
microsoft-m365auditlogs-sk4-app-activity-dlpclassification |
| cef-silverfort-app-login |
silverfort-s-cef-app-login-adminconsole |
| cef-siteminder-auth-failed |
siteminder-symantecsm-cef-endpoint-authentication-fail-associates |
| cef-siteminder-auth-successful |
siteminder-symantecsm-cef-endpoint-authentication-success-associates |
| cef-skyformation-failed-login |
netskope-sc-cef-app-login-fail-flexstring1 |
| cef-skyformation-file-activity |
box-ccm-cef-file-success-move |
| cef-skyformation-gmail-in |
google-workspace-cef-email-receive |
| cef-skyformation-gmail-out |
google-workspace-cef-email-send |
| cef-skyformation-gmail-out-1 |
google-workspace-sk4-email-send-gmaillogs |
| cef-skyformation-login-2 |
skyformation-s-sk4-app-login-login |
| cef-skyformation-mimecast-login |
mimecast-seg-cef-app-login-success-audittype |
| cef-skyformation-password-change |
cloudapplication-ca-sk4-user-password-modify-success-changedpassword |
| cef-slack-app-activity |
slack-s-cef-file-success-action |
| cef-snare-4624 |
microsoft-evsecurity-cef-endpoint-success-4624 |
| cef-snare-4648 |
microsoft-evsecurity-cef-user-switch-success-4648-1 |
| cef-snare-4663 |
microsoft-evsecurity-cef-file-write-success-4663 |
| cef-snare-4673 |
microsoft-evsecurity-cef-user-privilege-use-success-4673 |
| cef-snare-4688 |
microsoft-evsecurity-cef-process-create-success-4688-1 |
| cef-snare-4719 |
microsoft-evsecurity-cef-audit-policy-modify-success-policychanged |
| cef-snare-4769 |
microsoft-evsecurity-cef-endpoint-login-4769-7 |
| cef-snare-4954 |
microsoft-evsecurity-cef-policy-apply-success-snare |
| cef-snare-5136 |
microsoft-evsecurity-kv-ds-object-modify-success-5136-1 |
| cef-snare-5140 |
microsoft-evsecurity-cef-share-access-success-5140-1 |
| cef-snare-552 |
microsoft-evsecurity-cef-user-switch-success-552 |
| cef-snare-562 |
microsoft-evsecurity-cef-handle-close-success-handleclosed |
| cef-snare-567 |
microsoft-evsecurity-cef-file-success-567 |
| cef-snare-576 |
microsoft-evsecurity-cef-user-privilege-assign-success-576-1 |
| cef-snare-577 |
microsoft-evsecurity-cef-user-privilege-use-success-577 |
| cef-snare-578 |
microsoft-evsecurity-cef-user-privilege-use-success-snare |
| cef-snare-680 |
microsoft-evsecurity-cef-endpoint-login-680 |
| cef-snare-process-created |
microsoft-windows-cef-process-create-success-snare |
| cef-snare-windows-catchall |
microsoft-evsecurity-cef-endpoint-activity-microsoftwindowssecurityauditing |
| cef-snare-windows-catchall-1 |
microsoft-evsecurity-cef-endpoint-activity-snare |
| cef-snort-network-alert |
snort-s-cef-alert-trigger-success-snort |
| cef-snowflake-db-login |
snowflake-s-sk4-database-login-success-login |
| cef-snowflake-db-login-1 |
snowflake-s-sk4-database-login-success-login-1 |
| cef-snowflake-db-query |
snowflake-s-sk4-database-query-success-queryhistory |
| cef-sonicwall-failed-vpn-login |
dell-sw-cef-vpn-login-fail-userloginfailed |
| cef-sonicwall-rdp-logon |
dell-sw-cef-rdp-traffic-success-rdp |
| cef-sonicwall-vpn-end |
dell-sw-cef-vpn-logout-success-loggedout |
| cef-sonicwall-vpn-start |
dell-sw-cef-vpn-login-success-userloginsuccessful |
| cef-sophos-app-activity |
sophos-ep-cef-alert-trigger-detected |
| cef-sophos-config-change |
sophos-ep-cef-app-notification-success-savdisabled |
| cef-sophos-config-change-1 |
sophos-ep-cef-app-notification-success-updatesuccess |
| cef-sophos-config-change-2 |
sophos-ep-cef-app-notification-success-updatefailure |
| cef-sophos-config-change-3 |
sophos-ep-cef-app-notification-success-savenabled |
| cef-sophos-dlp-alert-13 |
sophos-ep-sk4-alert-trigger-success-dlpautomaticallyallowed |
| cef-sophos-dlp-alert-6 |
sophos-ep-cef-alert-trigger-success-dlpatomaticallyallowed |
| cef-sophos-dlp-alert-7 |
sophos-ep-sk4-alert-trigger-success-datalossprevention |
| cef-sophos-dlp-alert-8 |
sophos-ep-sk4-alert-trigger-success-encryptionsuspened |
| cef-sophos-network-connection |
sophos-xgfirewall-cef-network-traffic-sfw |
| cef-sophos-policy |
sophos-ep-cef-endpoint-policy-verify-success-noncompliant |
| cef-sophos-security-alert-1 |
sophos-ep-sk4-alert-trigger-success-threatdetected-1 |
| cef-sophos-security-alert-10 |
sophos-ep-cef-alert-trigger-success-corecleanfailed |
| cef-sophos-security-alert-11 |
sophos-ep-cef-alert-trigger-success-corepuacleanfailed |
| cef-sophos-security-alert-12 |
sophos-ep-cef-alert-trigger-success-hmpacredguard |
| cef-sophos-security-alert-13 |
sophos-ep-cef-alert-trigger-success-safebrowsing |
| cef-sophos-security-alert-14 |
sophos-ep-cef-alert-trigger-success-puadetected |
| cef-sophos-security-alert-15 |
sophos-ep-sk4-alert-trigger-success-threatdetected |
| cef-sophos-security-alert-18 |
sophos-ep-sk4-alert-trigger-success-controlviolation |
| cef-sophos-security-alert-2 |
sophos-ep-cef-alert-trigger-success-webfilteringblocked |
| cef-sophos-security-alert-26 |
sophos-ep-sk4-alert-trigger-success-savdisable |
| cef-sophos-security-alert-3 |
sophos-ep-cef-alert-trigger-success-windowsfirewallblock |
| cef-sophos-security-alert-30 |
sophos-ep-sk4-alert-trigger-success-applicationblock |
| cef-sophos-security-alert-32 |
sophos-ep-sk4-alert-trigger-success-corepua |
| cef-sophos-security-alert-33 |
sophos-ep-cef-alert-trigger-success-threat |
| cef-sophos-security-alert-34 |
sophos-ep-sk4-alert-trigger-success-hmpacrypyguard |
| cef-sophos-security-alert-35 |
sophos-ep-sk4-alert-trigger-success-blocked |
| cef-sophos-security-alert-36 |
sophos-ep-cef-alert-trigger-success-applicationcontrol-1 |
| cef-sophos-security-alert-37 |
sophos-ep-cef-alert-trigger-success-endpointfirewall |
| cef-sophos-security-alert-38 |
sophos-ep-cef-alert-trigger-success-applicationcontrol |
| cef-sophos-security-alert-39 |
sophos-ep-sk4-alert-trigger-success-event |
| cef-sophos-security-alert-4 |
sophos-ep-cef-alert-trigger-success-coredetection |
| cef-sophos-security-alert-40 |
sophos-ep-sk4-alert-trigger-success-enc |
| cef-sophos-security-alert-41 |
sophos-ep-cef-alert-trigger-success-corepuadetected |
| cef-sophos-security-alert-42 |
sophos-ep-sk4-alert-trigger-success-userblocked |
| cef-sophos-security-alert-43 |
sophos-ep-sk4-alert-trigger-success-userauthorised |
| cef-sophos-security-alert-5 |
sophos-ep-cef-alert-trigger-success-hmpaexploitprevented |
| cef-sophos-security-alert-6 |
sophos-ep-cef-alert-trigger-success-hmpabehaviourprevented |
| cef-sophos-security-alert-7 |
sophos-ep-sk4-alert-trigger-success-threatclean |
| cef-sophos-security-alert-8 |
sophos-ep-cef-alert-trigger-success-exploitprevented |
| cef-sophos-system-event |
sophos-ep-cef-app-notification-success-updaterebootrequired |
| cef-sophos-system-event-1 |
sophos-ep-sk4-app-notification-success-sophoscentral |
| cef-sophos-system-event-2 |
sophos-ep-cef-app-notification-suspended |
| cef-sophos-system-event-3 |
sophos-ep-cef-app-notification-resumed |
| cef-sophos-system-event-4 |
sophos-ep-sk4-app-notification-success-renewapitoken |
| cef-sophos-system-event-5 |
sophos-ep-sk4-app-notification-success-azureerror |
| cef-sophos-system-info |
sophos-ep-cef-app-notification-registered |
| cef-sophos-system-info-1 |
sophos-ep-cef-user-create-userautocreated |
| cef-sophos-system-info-2 |
sophos-ep-cef-app-notification-reprotected |
| cef-sophos-system-info-3 |
sophos-ep-cef-app-notification-success-notprotected |
| cef-sophos-system-info-4 |
sophos-ep-sk4-app-notification-success-adsync |
| cef-sophos-system-info-5 |
sophos-ep-sk4-app-notification-success-scheduleddatauploadresumed |
| cef-sophos-system-info-6 |
sophos-ep-sk4-app-notification-success-scheduleddailylimitexceeded |
| cef-sophos-system-info-7 |
sophos-ep-sk4-app-notification-success-deduplicated |
| cef-sophos-system-info-8 |
sophos-ep-sk4-app-notification-success-clonedetected |
| cef-sophos-usb-insert |
sophos-ep-cef-peripheral-storage-insert-success-peripherals |
| cef-sophos-usb-insert-1 |
sophos-ep-cef-peripheral-storage-insert-success-alertedonly |
| cef-sophos-usb-read |
sophos-ep-sk4-file-read-success-readonly |
| cef-sophos-web-activity |
sophos-xgfirewall-cef-http-session-contentfiltering |
| cef-sourcefire-estreamer-alert |
cisco-fp-cef-alert-trigger-success-sourcefire |
| cef-sourcefire-event-1 |
cisco-sourcefire-cef-app-activity-success-router |
| cef-sourcefire-event-2 |
cisco-sourcefire-cef-app-activity-success-router-1 |
| cef-ssh-login |
unix-unix-cef-ssh-traffic-success-accepted |
| cef-ssh-login-1 |
unix-unix-cef-ssh-traffic-success-sessionopen |
| cef-ssh-login-failed |
unix-unix-cef-endpoint-login-fail-sshfail |
| cef-ssh-logout |
unix-unix-cef-endpoint-logout-success-closed |
| cef-ssh-logout-1 |
unix-unix-cef-endpoint-logout-success-disconnect |
| cef-stealthbits-alert |
stealthbits-ssd-cef-alert-trigger-abnormaluserbehavior |
| cef-stealthbits-alert-1 |
stealthbits-ssd-cef-alert-trigger-dcsync |
| cef-stealthbits-file-operations |
stealthbits-s-cef-file-read-success-filemonitor |
| cef-stealthbits-security-alert |
stealthbits-ssd-cef-alert-trigger-kerberoasting |
| cef-stealthbits-security-alert-1 |
stealthbits-ssd-cef-alert-trigger-goldenticket |
| cef-stealthwatch-network-alert |
cisco-securenwanalytics-cef-alert-trigger-success-stealthwatch |
| cef-sybase-db-login |
sybase-s-cef-database-login-success-login |
| cef-sybase-db-query |
sybase-s-cef-database-query-success-selecttable |
| cef-symantec-atp-alert |
symantec-atp-cef-alert-trigger-success-devicetime |
| cef-symantec-atp-alert-1 |
symantec-endpointprotection-cef-alert-trigger-success-atpincident |
| cef-symantec-dlp-alert |
symantec-dlp-cef-alert-trigger-success-symantecdlp |
| cef-symantec-dlp-alert-1 |
symantec-dlp-cef-alert-trigger-success-dlp |
| cef-symantec-dlp-alert-2 |
symantec-dlp-cef-alert-trigger-success-dlp-1 |
| cef-symantec-email-alert |
symantec-esc-json-email-send-antispam |
| cef-symantec-email-alert-1 |
symantec-esc-cef-alert-trigger-success-emailseccloud |
| cef-symantec-network-alert |
symantec-endpointprotection-cef-alert-trigger-success-symantec |
| cef-symantec-sep-alert |
symantec-endpointprotection-cef-alert-trigger-success-emailconvictionevent |
| cef-symantec-sep-alert-1 |
symantec-endpointprotection-cef-alert-trigger-success-lcpsepriskevent |
| cef-symantec-sep-alert-2 |
symantec-endpointprotection-cef-alert-trigger-success-sepproxyinsightevent |
| cef-symantec-sep-alert-3 |
symantec-endpointprotection-cef-alert-trigger-success-sepproxysonarevent |
| cef-symantec-sep-alert-4 |
symantec-endpointprotection-cef-alert-trigger-success-sepproxyipsevent |
| cef-symantec-sep-alert-5 |
symantec-endpointprotection-cef-alert-trigger-success-sepproxyavevent |
| cef-symantec-system-event |
symantec-s-sk4-app-activity-auditevent |
| cef-symantec-web-activity |
symantec-vswg-cef-http-session-securewebgateway |
| cef-symantec-web-activity-1 |
symantec-vswg-cef-http-session-websecurityservice |
| cef-symantec-web-activity-2 |
symantec-fireglass-cef-http-session-isolation |
| cef-syslog-guardium-db-alert |
ibm-guardium-cef-alert-trigger-success-cmealert |
| cef-syslog-guardium-db-alert-1 |
ibm-guardium-cef-alert-trigger-success-failedlogin |
| cef-syslog-guardium-db-query |
ibm-guardium-cef-database-query-success-command |
| cef-syslog-microsoft-db-impersonate |
microsoft-mssql-kv-database-login-success-impersonate |
| cef-syslog-microsoft-db-login |
microsoft-mssql-cef-database-login-success-loginsucceeded |
| cef-syslog-oracle-db-login |
oracle-db-cef-database-login-success-logon |
| cef-syslog-oracle-db-query |
oracle-db-cef-database-query-success-select-1 |
| cef-syslog-securesphere-db-alert |
imperva-securesphere-kv-alert-trigger-success-servergroup |
| cef-syslog-securesphere-db-login |
imperva-securesphere-kv-database-login-success-login |
| cef-syslog-securesphere-db-query |
imperva-securesphere-cef-database-query-success-true |
| cef-syslog-sharepoint-activity |
microsoft-o365-cef-file-success-fileoperation |
| cef-sysmon-config-change-1 |
microsoft-sysmon-cef-log-success-servicestatechanged |
| cef-sysmon-config-change-2 |
microsoft-sysmon-cef-driver-load-success-driverloaded |
| cef-sysmon-config-change-3 |
microsoft-sysmon-cef-process-thread-create-success-createremotethread |
| cef-sysmon-file-write-1 |
microsoft-sysmon-cef-file-write-success-filecreated |
| cef-sysmon-file-write-2 |
microsoft-sysmon-cef-registry-modify-success-registryvalueset |
| cef-sysmon-file-write-3 |
microsoft-sysmon-cef-file-time-modify-success-creationtimechanged |
| cef-sysmon-file-write-4 |
microsoft-sysmon-cef-file-stream-create-success-streamcreated |
| cef-sysmon-file-write-5 |
microsoft-sysmon-cef-registry-success-sysmonregkey |
| cef-sysmon-process-created |
microsoft-sysmon-cef-process-create-success-sysmoncreateprocess |
| cef-sysmon-process-network |
microsoft-sysmon-cef-network-session-success-networkconndetected |
| cef-sysmon-process-terminated |
microsoft-sysmon-cef-process-close-success-processterminated |
| cef-tacacs-authentication |
hp-arubawc-cef-endpoint-authentication-tacacsauth |
| cef-tacacs-authentication-failed |
hp-arubawc-cef-endpoint-authentication-fail-tacacsauthfailed |
| cef-tenable-alert |
tenable-t-sk4-alert-trigger-vulnerability |
| cef-tenable-security-alert |
tenable-t-sk4-alert-trigger-vulnerability-1 |
| cef-tenable-system-information |
tenable-t-cef-app-scan-scaninformation |
| cef-tippingPoint-network-alert |
trendmicro-tippingpoint-cef-alert-trigger-success-sms |
| cef-tippingPoint-network-alert-1 |
trendmicro-tippingpoint-cef-alert-trigger-success-unityone |
| cef-trapx-file-read |
trapx-t-cef-file-read-success-trapx |
| cef-trend-system-info |
trendmicro-ds-cef-app-activity-appactivity |
| cef-trendmicro-alert |
trendmicro-ddi-leef-alert-trigger-success-detection |
| cef-trendmicro-alert-event |
trendmicro-ddi-kv-alert-trigger-alertevent |
| cef-trendmicro-app-login |
trendmicro-ddi-cef-app-login-success-userloggedon |
| cef-trendmicro-database-failed-login |
trendmicro-ds-cef-database-login-fail-loginfailed |
| cef-trendmicro-dlp |
trendmicro-ddei-cef-email-receive-success-messagetracking |
| cef-trendmicro-dlp-alert |
trendmicro-officescan-cef-alert-trigger-success-blocked |
| cef-trendmicro-dlp-alert-1 |
trendmicro-officescan-cef-alert-trigger-success-dlp |
| cef-trendmicro-dlp-email-alert |
trendmicro-apexone-cef-email-receive-fail-apexcentral |
| cef-trendmicro-dlp-email-alert-in |
trendmicro-ddei-cef-email-receive-success-detection |
| cef-trendmicro-password-change |
trendmicro-ddi-cef-user-password-modify-success-accountpassword |
| cef-trendmicro-product-update |
trendmicro-ddi-kv-app-notification-success-productupdate |
| cef-trendmicro-security-alert |
trendmicro-officescan-kv-alert-trigger-success-deepsecuritymanager |
| cef-trendmicro-security-alert-1 |
trendmicro-ddi-cef-alert-trigger-success-alerttrigger |
| cef-trendmicro-security-alert-2 |
trendmicro-ddi-cef-alert-trigger-success-473 |
| cef-trendmicro-security-alert-3 |
trendmicro-ds-cef-alert-trigger-success-risk |
| cef-trendmicro-security-alert-4 |
trendmicro-ddi-cef-alert-trigger-success-trendmicro |
| cef-trendmicro-security-alert-5 |
trendmicro-ds-cef-alert-trigger-success-denialofservice |
| cef-trendmicro-security-alert-6 |
trendmicro-ds-cef-alert-trigger-success-moduleformatstring |
| cef-trendmicro-security-alert-7 |
trendmicro-ds-cef-alert-trigger-success-codeexecution |
| cef-trendmicro-security-alert-8 |
trendmicro-ds-cef-alert-trigger-success-wpsocialwarfareunauth |
| cef-trendmicro-security-alert-9 |
trendmicro-cas-cef-alert-trigger-success-cas |
| cef-trendmicro-system-event |
trendmicro-ddi-kv-app-activity-success-systemevent |
| cef-trendmicro-usb-write |
trendmicro-officescan-cef-file-write-success-passed |
| cef-trendmicro-visionone-alert |
trendmicro-vone-cef-alert-trigger-success-visioone |
| cef-tripwire-file-alert |
tripwire-t-cef-alert-trigger-success-filemodified |
| cef-unix-account-1 |
unix-unixauditd-cef-user-switch-success-userrolechange |
| cef-unix-account-switch |
unix-unix-cef-user-switch-success-runuser |
| cef-unix-auditd-login |
unix-ad-cef-endpoint-login-success-userauth |
| cef-unix-auth-failed |
unix-unix-cef-endpoint-login-fail-passwordcheckfailed |
| cef-unix-authentication-1 |
unix-unixauditd-cef-endpoint-login-userauth |
| cef-unix-batch-logon |
unix-unix-cef-endpoint-login-success-sessionopened |
| cef-unix-cred-acq-1 |
unix-ad-cef-authentication-success-credacq |
| cef-unix-cred-disp-1 |
unix-ad-cef-endpoint-authentication-success-creddisp |
| cef-unix-cred-refer-1 |
unix-ad-cef-endpoint-authentication-credrefr |
| cef-unix-crypto-1 |
unix-ad-cef-endpoint-login-success-cryptosession |
| cef-unix-crypto-key-1 |
unix-ad-cef-endpoint-login-success-cryptokeyuser |
| cef-unix-dhcp |
unix-dhcpd-cef-endpoint-login-success-arcsight |
| cef-unix-dlp-email-alert |
unix-unix-cef-email-send-receive-sendmail |
| cef-unix-exe-1 |
unix-unixauditd-cef-process-create-success-execve |
| cef-unix-local-logon |
unix-unix-cef-endpoint-login-success-sessionstart |
| cef-unix-local-logon-1 |
unix-ad-cef-endpoint-login-success-startingsession |
| cef-unix-local-logon-2 |
unix-ad-cef-endpoint-login-success-authenticateduser |
| cef-unix-net-filter-1 |
unix-ad-cef-endpoint-notification-netfiltercfg |
| cef-unix-process-1 |
unix-unixauditd-cef-process-create-success-syscall |
| cef-unix-service-1 |
unix-ad-cef-service-stop-servicestop |
| cef-unix-software-1 |
unix-ad-cef-endpoint-notification-softwareupdate |
| cef-unix-ssh-disconnect |
unix-ad-cef-app-activity-fail-ssh |
| cef-unix-ssh-fail |
unix-ad-cef-endpoint-login-fail-failedlogin |
| cef-unix-su |
unix-unix-cef-user-switch-success-sessionopen |
| cef-unix-su-1 |
unix-unix-cef-user-switch-success-susuccess |
| cef-unix-su-2 |
unix-unix-cef-user-switch-success-sessionclose |
| cef-unix-sudo |
unix-unix-cef-user-switch-success-executecommand |
| cef-unix-sudo-1 |
unix-unix-cef-user-switch-success-sudo |
| cef-unix-system-info |
unix-ad-cef-app-activity-unix |
| cef-unix-user-account-1 |
unix-ad-cef-user-modify-useracct |
| cef-unix-user-cmd-1 |
unix-unixauditd-cef-process-create-success-usercmd |
| cef-unix-user-end-1 |
unix-ad-cef-endpoint-logout-success-userend |
| cef-unix-user-login-1 |
unix-ad-cef-endpoint-login-success-login |
| cef-unix-user-logout-1 |
unix-ad-cef-endpoint-logout-success-userlogout |
| cef-unix-user-start-1 |
unix-ad-cef-endpoint-login-success-userstart |
| cef-unix-virt-control-1 |
unix-ad-cef-endpoint-start-stop-virtcontrol |
| cef-vanderbilt-badge-access |
vanderbilt-v-cef-physical-location-access-sms |
| cef-vectra-alert |
vectra-cd-cef-alert-trigger-success-vectranetworks |
| cef-vontu-dlp-alert |
symantec-dlp-cef-alert-trigger-success-contentsecurity |
| cef-vontu-dlp-alert-2 |
symantec-dlp-kv-alert-trigger-success-alerttrigger |
| cef-vontu-dlp-alert-3 |
symantec-dlp-cef-alert-trigger-success-applicationname |
| cef-vontu-dlp-alert-4 |
symantec-dlp-str-alert-trigger-success-symcdlpsys |
| cef-websense-proxy |
forcepoint-wsg-cef-http-session-websense |
| cef-windows-10 |
microsoft-sysmon-str-handle-open-success-10 |
| cef-windows-100 |
microsoft-evterminalservicesgateway-kv-scheduled-task-trigger-success-100 |
| cef-windows-102 |
microsoft-windows-kv-scheduled-task-finish-success-102 |
| cef-windows-108 |
microsoft-evadfs-kv-scheduled-task-trigger-success-108 |
| cef-windows-119 |
microsoft-windows-kv-scheduled-task-trigger-success-119 |
| cef-windows-129 |
microsoft-evsystem-kv-scheduled-task-trigger-success-129 |
| cef-windows-13 |
microsoft-sysmon-str-registry-modify-success-13 |
| cef-windows-140 |
microsoft-windows-kv-scheduled-task-modify-success-140 |
| cef-windows-1503 |
microsoft-evsystem-kv-policy-apply-success-1503 |
| cef-windows-200 |
microsoft-windows-kv-scheduled-task-trigger-success-200 |
| cef-windows-201 |
microsoft-windows-kv-scheduled-task-finish-success-201 |
| cef-windows-21 |
microsoft-evterminalservicesgateway-kv-endpoint-login-success-21 |
| cef-windows-22 |
microsoft-windows-kv-endpoint-login-success-22 |
| cef-windows-23 |
microsoft-windows-kv-endpoint-logout-success-23 |
| cef-windows-24 |
microsoft-windows-kv-endpoint-logout-success-24 |
| cef-windows-39 |
microsoft-windows-kv-endpoint-logout-success-39 |
| cef-windows-40 |
microsoft-evsystem-kv-endpoint-logout-success-40 |
| cef-windows-41 |
microsoft-windows-kv-endpoint-notification-success-41 |
| cef-windows-4104 |
microsoft-evpowershell-kv-process-create-success-4104-1 |
| cef-windows-4105 |
microsoft-evpowershell-kv-endpoint-notification-4105 |
| cef-windows-42 |
microsoft-windows-kv-endpoint-notification-success-42 |
| cef-windows-4624 |
microsoft-evsecurity-cef-endpoint-success-4624-1 |
| cef-windows-4625 |
microsoft-evsecurity-cef-endpoint-login-fail-4625-1 |
| cef-windows-4634 |
microsoft-evsecurity-sk4-endpoint-logout-success-anaccountwasloggedoff |
| cef-windows-4653 |
microsoft-evsecurity-cef-network-session-fail-4653 |
| cef-windows-4654 |
microsoft-evsecurity-cef-endpoint-notification-success-4654 |
| cef-windows-4673 |
microsoft-evsecurity-cef-user-privilege-modify-fail-4673 |
| cef-windows-4674 |
microsoft-evsecurity-cef-user-privilege-use-success-attempted |
| cef-windows-4675 |
microsoft-evsecurity-cef-app-notification-success-4675 |
| cef-windows-4689 |
microsoft-evsecurity-kv-process-close-success-4689 |
| cef-windows-4703 |
microsoft-evsecurity-kv-user-privilege-modify-success-4703 |
| cef-windows-4735 |
microsoft-evsecurity-cef-group-modify-success-4735-1 |
| cef-windows-4742 |
microsoft-evsecurity-cef-ds-object-activity-success-4742 |
| cef-windows-4768 |
microsoft-evsecurity-cef-endpoint-4768 |
| cef-windows-4769 |
microsoft-evsecurity-cef-endpoint-login-4769-1 |
| cef-windows-4771 |
microsoft-evsecurity-cef-endpoint-login-fail-4771-1 |
| cef-windows-4776 |
microsoft-evsecurity-cef-endpoint-login-4776-1 |
| cef-windows-4793 |
microsoft-evsecurity-kv-endpoint-notification-success-4793 |
| cef-windows-53504 |
microsoft-evpowershell-str-endpoint-notification-success-53504 |
| cef-windows-6416 |
microsoft-evsecurity-cef-peripheral-storage-insert-success-6416 |
| cef-windows-7001 |
microsoft-evsystem-kv-endpoint-login-success-7001 |
| cef-windows-7002 |
microsoft-evsystem-kv-endpoint-logout-success-7002 |
| cef-windows-account-4720 |
microsoft-evsecurity-sk4-user-create-success-usercreated |
| cef-windows-defender |
microsoft-defenderep-json-alert-trigger-success-operational |
| cef-windows-dhcp |
microsoft-evdhcpserver-sk4-app-activity-fail-adminevents |
| cef-windows-dns-query |
microsoft-windows-cef-dns-request-success-dnsserver |
| cef-windows-dns-query-1 |
microsoft-windows-cef-dns-request-success-packet |
| cef-windows-dns-response |
microsoft-windows-cef-dns-response-success-dnsresponse |
| cef-windows-dns-response-1 |
microsoft-windows-cef-dns-response-success-packet |
| cef-windows-ds-access-5137 |
microsoft-evsecurity-sk4-ds-object-create-success-5137 |
| cef-windows-generic |
microsoft-evsecurity-cef-endpoint-activity-4933 |
| cef-windows-logout |
microsoft-evdhcpserver-sk4-dns-record-create-fail-adminevents |
| cef-windows-member-added-2003 |
microsoft-evsecurity-cef-group-member-add-success-4732 |
| cef-windows-member-removed-2003 |
microsoft-evsecurity-cef-group-member-remove-success-4733-1 |
| cef-windows-share-access |
microsoft-evsecurity-sk4-share-create-success-5142 |
| cef-windows-share-access-1 |
microsoft-evsecurity-sk4-share-delete-success-5144 |
| cef-windows-share-access-2 |
microsoft-evsecurity-sk4-share-modify-success-5143 |
| cef-xps-print-activity |
xps-x-cef-print-activity-printer-activity-success-xpsprint |
| cef-xps-print-activity-1 |
xps-s-kv-printer-activity-success-set |
| cef-zendesk-ticket-app-activity |
zendesk-z-sk4-app-activity-success-ticketevent |
| cef-zendesk-user-app-activity |
zendesk-z-sk4-app-activity-success-userevent |
| cef-zlock-app-activity |
zlock-z-cef-app-activity-success-appactivity |
| cef-zscaler-web-activity |
zscaler-ia-cef-http-session-spriv |
| centos-network-connection-failed |
linux-centos-kv-network-traffic-fail-fwdrej |
| centrify-account-authentication-attempt-1 |
delinea-centrifyas-kv-app-authentication-success-54202 |
| centrify-account-authentication-attempt-2 |
delinea-centrifyas-kv-app-authentication-success-54203 |
| centrify-account-password-change-failed-1 |
delinea-centrifyas-kv-user-password-reset-success-6041 |
| centrify-account-switch |
delinea-centrifyztps-kv-user-switch-success-granted |
| centrify-app-activity |
delinea-centrifyztps-sk4-app-login-centrify |
| centrify-auth-denied |
delinea-centrifyas-cef-endpoint-login-fail-pam |
| centrify-auth-success |
delinea-centrifyas-kv-endpoint-login-success-pam |
| centrify-authentication-failed-1 |
delinea-centrifyas-kv-endpoint-login-fail-54207 |
| centrify-authentication-failed-2 |
delinea-centrifyas-kv-endpoint-login-fail-54201 |
| centrify-authentication-success-1 |
delinea-centrifyas-kv-endpoint-login-success-54206 |
| centrify-failed-logon |
delinea-centrifyas-kv-endpoint-login-fail-trustedpath |
| centrify-failed-logon-1 |
delinea-centrifyas-kv-endpoint-login-fail-6034 |
| centrify-failed-logon-2 |
delinea-centrifyas-kv-endpoint-login-fail-6049 |
| centrify-file-access |
delinea-centrifyams-kv-file-fail-setp |
| centrify-local-logon |
delinea-centrifyas-kv-endpoint-login-success-trustedpath |
| centrify-process |
delinea-centrifyis-kv-process-create-success-suite |
| centrify-remote-logon-1 |
delinea-centrifyas-kv-endpoint-login-success-6033 |
| centrify-remote-logon-2 |
delinea-centrifyas-kv-endpoint-login-success-6048 |
| centrify-ssh-login |
delinea-centrifyas-kv-ssh-traffic-success-sshd |
| centrify-ssh-login-failed |
delinea-centrifyas-cef-endpoint-login-fail-sshd |
| centrify-trusted-path |
delinea-centrifyas-kv-app-notification-success-trustedpath |
| centurylink-security-alert |
centurylink-ati-json-alert-trigger-success-dstas |
| chcom-app-activity |
chcom-c-json-app-activity-loyaltyassetpurchase |
| chcom-app-login |
chcom-c-json-app-login-success-trueclientip |
| chcom-web-activity |
apache-a-json-http-session-chcomaccesslog |
| checkpoint-5599-network-connection |
checkpoint-ngfw-kv-network-traffic-success-5599 |
| checkpoint-auth-failed |
checkpoint-ngfw-kv-endpoint-login-fail-failed |
| checkpoint-auth-successful |
checkpoint-ngfw-cef-endpoint-login-success-identity |
| checkpoint-auth-successful-1 |
checkpoint-ngfw-cef-endpoint-login-success-identity-1 |
| checkpoint-connectra-failed-vpn-login |
checkpoint-sg-kv-vpn-login-fail-loginfailure |
| checkpoint-connectra-vpn-login |
checkpoint-sg-kv-vpn-login-success-ipchanged |
| checkpoint-connectra-vpn-login-1 |
checkpoint-sg-json-vpn-login-success-ipchanged |
| checkpoint-connectra-vpn-logout |
checkpoint-sg-kv-vpn-logout-success-connectra |
| checkpoint-dlp-alert-out |
checkpoint-ngfw-json-email-send-success-emailsessionid |
| checkpoint-dlp-email-alert |
checkpoint-ngfw-kv-email-receive-success-firewall |
| checkpoint-failed-vpn-login |
checkpoint-sg-csv-vpn-login-fail-reject |
| checkpoint-firewall-1 |
checkpoint-ngfw-kv-network-traffic-vpn-1 |
| checkpoint-firewall-2 |
checkpoint-ngfw-cef-network-traffic-access-2 |
| checkpoint-firewall-accept |
checkpoint-ngfw-csv-network-traffic-success-accept-1 |
| checkpoint-firewall-accept-1 |
checkpoint-ngfw-kv-network-traffic-success-accept-1 |
| checkpoint-firewall-accept-2 |
checkpoint-ngfw-kv-network-traffic-success-accept-4 |
| checkpoint-firewall-allow-1 |
checkpoint-ngfw-str-network-traffic-success-allow |
| checkpoint-firewall-allow-2 |
checkpoint-ngfw-kv-http-session-success-allow |
| checkpoint-firewall-block |
checkpoint-ngfw-cef-network-traffic-fail-block |
| checkpoint-firewall-decrypt |
checkpoint-ngfw-kv-app-activity-success-decrypt |
| checkpoint-firewall-decrypt-1 |
checkpoint-ngfw-kv-app-activity-success-decrypt-1 |
| checkpoint-firewall-drop |
checkpoint-ngfw-csv-network-traffic-fail-drop |
| checkpoint-firewall-drop-1 |
checkpoint-ngfw-str-network-traffic-fail-drop |
| checkpoint-firewall-drop-2 |
checkpoint-ngfw-json-network-traffic-fail-drop |
| checkpoint-firewall-encrypt |
checkpoint-ngfw-kv-app-activity-success-encrypt |
| checkpoint-firewall-encrypt-1 |
checkpoint-ngfw-kv-app-activity-success-encrypt-1 |
| checkpoint-firewall-logout-1 |
checkpoint-ngfw-kv-app-logout-logout |
| checkpoint-firewall-network-alert |
checkpoint-ngfw-kv-alert-trigger-success-monitor |
| checkpoint-firewall-network-alert-1 |
checkpoint-ngfw-kv-alert-trigger-success-monitor-1 |
| checkpoint-firewall-network-connection-1 |
checkpoint-ngfw-kv-network-traffic-success-accept-5 |
| checkpoint-firewall-network-connection-2 |
checkpoint-ngfw-kv-network-traffic-success-decrypt |
| checkpoint-firewall-network-connection-3 |
checkpoint-ngfw-kv-network-traffic-success-encrypt |
| checkpoint-firewall-network-connection-4 |
checkpoint-ngfw-kv-network-traffic-fail-smtptransparentproxy |
| checkpoint-firewall-network-connection-accept |
checkpoint-ngfw-csv-network-traffic-success-accept |
| checkpoint-firewall-network-connection-drop |
checkpoint-ngfw-csv-network-traffic-fail-logdrop |
| checkpoint-firewall-network-info |
checkpoint-ngfw-kv-vpn-authentication-success-keyinstall |
| checkpoint-firewall-network-info-1 |
checkpoint-ngfw-kv-app-activity-securitygateway |
| checkpoint-firewall-network-info-2 |
checkpoint-ngfw-kv-app-notification-logmsg |
| checkpoint-firewall-network-info-3 |
checkpoint-ngfw-kv-app-notification-systemmonitor |
| checkpoint-firewall-network-info-4 |
checkpoint-ngfw-kv-app-activity-logupdate |
| checkpoint-firewall-network-info-5 |
checkpoint-tm-kv-app-activity-threatemulation |
| checkpoint-firewall-network-info-6 |
checkpoint-ngfw-kv-app-notification-sync |
| checkpoint-firewall-network-info-7 |
checkpoint-ngfw-kv-app-notification-updatestatus |
| checkpoint-firewall-network-info-8 |
checkpoint-ngfw-kv-app-activity-newantivirus |
| checkpoint-firewall-reject |
checkpoint-ngfw-str-network-traffic-fail-reject |
| checkpoint-firewall-reject-1 |
checkpoint-ngfw-json-network-traffic-fail-reject |
| checkpoint-local-logon |
checkpoint-ngfw-str-endpoint-login-fail-permission |
| checkpoint-logout |
checkpoint-ngfw-str-app-logout-success-loggedout |
| checkpoint-network-alert |
checkpoint-tp-kv-alert-trigger-success-actiondetect |
| checkpoint-network-alert-1 |
checkpoint-tp-json-alert-trigger-success-prevent |
| checkpoint-network-alert-2 |
checkpoint-tp-kv-alert-trigger-success-alert |
| checkpoint-network-alert-3 |
checkpoint-ngfw-kv-alert-trigger-success-antimalware |
| checkpoint-network-alert-4 |
checkpoint-tp-kv-alert-trigger-success-smartdefense |
| checkpoint-network-alert-6 |
checkpoint-ngfw-kv-alert-trigger-success-detect |
| checkpoint-network-connection-1 |
checkpoint-ngfw-str-network-traffic-success-decrypt |
| checkpoint-network-connection-2 |
checkpoint-ngfw-str-network-traffic-success-encrypt |
| checkpoint-network-connection-3 |
checkpoint-ngfw-str-network-traffic-success-bypass-2 |
| checkpoint-network-connection-4 |
checkpoint-ngfw-kv-network-traffic-success-drop |
| checkpoint-network-connection-5 |
checkpoint-ia-kv-network-traffic-firewall |
| checkpoint-network-connection-accept-1 |
checkpoint-ngfw-str-network-traffic-success-accept |
| checkpoint-network-connection-accept-2 |
checkpoint-ngfw-str-network-traffic-success-accept-2 |
| checkpoint-network-connection-allow |
checkpoint-ngfw-str-network-traffic-success-allow-2 |
| checkpoint-network-connection-drop-1 |
checkpoint-ngfw-str-network-traffic-fail-drop-2 |
| checkpoint-network-connection-inbound |
checkpoint-ngfw-kv-network-traffic-inbound |
| checkpoint-network-decrypt |
checkpoint-ngfw-json-alert-trigger-success-acceptdecrypt |
| checkpoint-network-encrypt |
checkpoint-ngfw-json-alert-trigger-success-acceptencrypt |
| checkpoint-network-info-2 |
checkpoint-ngfw-kv-app-activity-sequencenum |
| checkpoint-proxy |
checkpoint-ngfw-kv-http-session-user |
| checkpoint-proxy-1 |
checkpoint-ngfw-kv-http-session-srcusername |
| checkpoint-proxy-2 |
checkpoint-ngfw-kv-http-session-urlfiltering |
| checkpoint-system-info |
checkpoint-am-kv-app-activity-antimalware |
| checkpoint-system-info-10 |
checkpoint-ngfw-kv-http-session-fail-vpn1 |
| checkpoint-system-info-11 |
checkpoint-ngfw-kv-http-traffic-success-httpinspection |
| checkpoint-system-info-12 |
checkpoint-ngfw-kv-http-traffic-fail-urlfiltering |
| checkpoint-system-info-13 |
checkpoint-es-kv-vpn-login-success-rulelisted |
| checkpoint-system-info-14 |
checkpoint-ngfw-kv-vpn-authentication-success-authrequest |
| checkpoint-system-info-15 |
checkpoint-ngfw-kv-user-modify-success-checkpoint |
| checkpoint-system-info-16 |
checkpoint-ngfw-kv-app-activity-success-applicationcontrol |
| checkpoint-system-info-6 |
checkpoint-sg-kv-app-activity-awareness |
| checkpoint-system-info-7 |
checkpoint-ngfw-kv-app-activity-authcrypt |
| checkpoint-system-info-8 |
checkpoint-ngfw-kv-app-activity-bypass |
| checkpoint-system-info-9 |
checkpoint-ngfw-kv-app-activity-keyinst |
| checkpoint-url-filtering |
checkpoint-ngfw-kv-http-session-urlfilter |
| checkpoint-vpn-authentication |
checkpoint-ngfw-kv-vpn-login-network |
| checkpoint-vpn-connection |
checkpoint-ngfw-kv-vpn-session-success-update |
| checkpoint-vpn-firewall |
checkpoint-ngfw-kv-network-session-success-firewall |
| checkpoint-vpn-login |
checkpoint-sg-csv-vpn-login-success-raslogin |
| checkpoint-vpn-login-1 |
checkpoint-sg-kv-vpn-login-success-vpnlogin |
| checkpoint-vpn-login-2 |
checkpoint-sg-kv-vpn-user |
| checkpoint-vpn-login-3 |
checkpoint-ngfw-kv-vpn-login-success-vpnrouting |
| checkpoint-vpn-login-4 |
checkpoint-ia-kv-vpn-login-success-login |
| checkpoint-vpn-login-5 |
checkpoint-ia-kv-vpn-login-success-successfullogin |
| checkpoint-vpn-login-6 |
checkpoint-ngfw-kv-vpn-login-success-login |
| checkpoint-vpn-logout |
checkpoint-ngfw-kv-vpn-logout-success-logout |
| checkpoint-vpn-logout-1 |
checkpoint-ia-kv-vpn-logout-success-awareness |
| checkpoint-vpn-logout-2 |
checkpoint-ia-kv-vpn-logout-success-logout |
| checkpoint-web-activity |
checkpoint-ngfw-kv-http-session-ifname |
| checkpoint-web-activity-1 |
checkpoint-ngfw-kv-http-session-filtering |
| cimtrak-file-delete |
cimtrak-c-kv-file-read-success-filedeleted |
| cimtrak-file-write-1 |
cimtrak-c-kv-file-write-success-fileadded |
| cimtrak-file-write-2 |
cimtrak-c-kv-file-write-success-filemodified |
| cisco-2960-auth-failed |
cisco-asa-str-endpoint-login-fail-2960 |
| cisco-2960-auth-failed-1 |
cisco-asa-str-endpoint-login-fail-2960-1 |
| cisco-2960-auth-successful |
cisco-asa-str-endpoint-login-success-2960 |
| cisco-BGP-system-info |
cisco-asa-str-network-notification-bgp |
| cisco-ISIS-system-info |
cisco-ios-str-app-notification-success-isis |
| cisco-acs-auth-failed |
cisco-acs-cef-endpoint-authentication-fail-authfailed |
| cisco-acs-auth-success |
cisco-acs-cef-endpoint-authentication-success-login |
| cisco-acs-auth-success-2 |
cisco-acs-cef-endpoint-authentication-success-authsucceeded |
| cisco-acs-nac-logon |
cisco-ise-kv-radius-traffic-success-start |
| cisco-acs-system-activity-1 |
cisco-acs-cef-app-activity-success-appactivity |
| cisco-acs-vpn-login |
cisco-ise-kv-vpn-login-success-radiusaccounting |
| cisco-acs-vpn-login-failed |
cisco-ise-kv-vpn-login-success-attempts |
| cisco-acs-vpn-logout |
cisco-ise-kv-vpn-logout-success-virtual |
| cisco-adc-web-activity |
cisco-adc-str-http-session-success-adcapp |
| cisco-airespace-network-alert |
cisco-airespace-cef-alert-trigger-success-networkbased |
| cisco-amp-system-info |
cisco-secureendpoint-sk4-app-activity-orbital |
| cisco-app-activity |
cisco-cucm-kv-app-activity-success-useraccess |
| cisco-asa-106001 |
cisco-asa-str-network-session-fail-106001 |
| cisco-asa-106006 |
cisco-asa-str-network-traffic-fail-106006 |
| cisco-asa-106007 |
cisco-asa-str-network-traffic-fail-106007 |
| cisco-asa-106012 |
cisco-asa-str-network-traffic-fail-106012 |
| cisco-asa-106015 |
cisco-asa-str-network-traffic-fail-106015 |
| cisco-asa-106021 |
cisco-asa-str-alert-trigger-106021 |
| cisco-asa-106023 |
cisco-asa-cef-network-traffic-fail-106023 |
| cisco-asa-110002 |
cisco-asa-str-app-notification-110002 |
| cisco-asa-113008 |
cisco-asa-str-app-authentication-113008 |
| cisco-asa-113009 |
cisco-asa-str-app-authentication-113009 |
| cisco-asa-113015 |
cisco-asa-kv-endpoint-login-fail-113015 |
| cisco-asa-302010 |
cisco-asa-str-app-notification-302010 |
| cisco-asa-302020 |
cisco-asa-str-network-start-302020 |
| cisco-asa-304001 |
cisco-asa-str-http-traffic-304001 |
| cisco-asa-305006 |
cisco-asa-str-network-notification-305006 |
| cisco-asa-313001 |
cisco-asa-str-network-traffic-fail-313001 |
| cisco-asa-313004 |
cisco-asa-str-network-traffic-fail-313004 |
| cisco-asa-313005 |
cisco-asa-str-network-traffic-fail-313005 |
| cisco-asa-313009 |
cisco-asa-str-network-traffic-fail-313009 |
| cisco-asa-315011 |
cisco-asa-str-app-logout-315011 |
| cisco-asa-402114 |
cisco-asa-str-network-notification-402114 |
| cisco-asa-405001 |
cisco-asa-str-arp-traffic-405001 |
| cisco-asa-419002 |
cisco-asa-str-network-notification-419002 |
| cisco-asa-434002 |
cisco-asa-str-network-traffic-fail-434002 |
| cisco-asa-500004 |
cisco-asa-str-network-traffic-fail-500004 |
| cisco-asa-502103 |
cisco-asa-str-user-permission-modify-502103 |
| cisco-asa-507003 |
cisco-asa-str-network-traffic-fail-507003 |
| cisco-asa-607001 |
cisco-asa-str-app-notification-607001 |
| cisco-asa-611103 |
cisco-asa-kv-vpn-logout-611103 |
| cisco-asa-710003 |
cisco-asa-str-network-session-fail-710003 |
| cisco-asa-710005 |
cisco-asa-str-network-session-fail-requestdiscarded |
| cisco-asa-713903 |
cisco-asa-str-network-session-success-713903 |
| cisco-asa-716058 |
cisco-asa-str-network-close-716058 |
| cisco-asa-722012 |
cisco-asa-str-vpn-logout-722012 |
| cisco-asa-722022 |
cisco-asa-str-network-start-722022 |
| cisco-asa-722023 |
cisco-asa-str-vpn-logout-722023 |
| cisco-asa-722032 |
cisco-asa-str-vpn-login-722032 |
| cisco-asa-722033 |
cisco-asa-str-vpn-login-722033 |
| cisco-asa-722034 |
cisco-asa-str-vpn-login-722034 |
| cisco-asa-722036 |
cisco-asa-str-network-notfication-722036 |
| cisco-asa-722041 |
cisco-asa-str-ip-assign-fail-722041 |
| cisco-asa-722055 |
cisco-asa-str-app-authentication-722055 |
| cisco-asa-725001 |
cisco-asa-str-ssl-start-725001 |
| cisco-asa-725002 |
cisco-asa-str-ssl-traffic-725002 |
| cisco-asa-725003 |
cisco-asa-str-ssl-traffic-725003 |
| cisco-asa-725007 |
cisco-asa-str-ssl-close-725007 |
| cisco-asa-725016 |
cisco-asa-str-network-notification-725016 |
| cisco-asa-733100 |
cisco-asa-str-alert-trigger-733100 |
| cisco-asa-734001 |
cisco-asa-kv-app-notification-734001 |
| cisco-asa-737003 |
cisco-asa-str-network-notfication-737003 |
| cisco-asa-737006 |
cisco-asa-str-network-notification-737006 |
| cisco-asa-737016 |
cisco-asa-str-ip-assign-737016 |
| cisco-asa-737026 |
cisco-asa-str-ip-assign-737026 |
| cisco-asa-737034 |
cisco-asa-str-ip-assign-fail-737034 |
| cisco-asa-746010 |
cisco-asa-str-user-modify-fail-746010 |
| cisco-asa-746016 |
cisco-asa-str-dns-response-fail-746016 |
| cisco-asa-750003 |
cisco-asa-kv-network-session-fail-750003 |
| cisco-asa-752012 |
cisco-asa-str-network-session-fail-752012 |
| cisco-asa-752015 |
cisco-asa-str-network-session-fail-752015 |
| cisco-asa-775002 |
cisco-asa-str-network-session-fail-775002 |
| cisco-asa-aaa-authentication-failed |
cisco-asa-str-app-authentication-fail-authfailed |
| cisco-asa-all |
cisco-asa-str-network-notification-success |
| cisco-asa-auth-failed |
cisco-asa-str-vpn-login-fail-751011 |
| cisco-asa-auth-successful |
cisco-asa-str-endpoint-login-success-611101 |
| cisco-asa-authentication-successful |
cisco-asa-str-endpoint-login-success-3083 |
| cisco-asa-connection-acl |
cisco-asa-str-network-session-fail-10610 |
| cisco-asa-connection-built |
cisco-asa-str-network-traffic-success-built-30201 |
| cisco-asa-connection-built-302013 |
cisco-asa-str-network-traffic-success-built |
| cisco-asa-connection-stop |
cisco-asa-str-network-traffic-success-teardown |
| cisco-asa-connection-teardown |
cisco-asa-str-network-traffic-success-teardown-2 |
| cisco-asa-firewall-translation |
cisco-asa-str-app-notification-tcptranslation |
| cisco-asa-network-connection-successful |
cisco-asa-str-network-traffic-success-302015 |
| cisco-asa-network-error |
cisco-asa-str-app-notification-7398 |
| cisco-asa-network-error-1 |
cisco-asa-str-app-notification-success-5717 |
| cisco-asa-network-error-2 |
cisco-asa-str-app-notification-success-544 |
| cisco-asa-network-info |
cisco-asa-str-configuration-modify-8527 |
| cisco-asa-network-info-1 |
cisco-asa-str-configuration-modify-8330 |
| cisco-asa-network-info-2 |
cisco-asa-str-app-notification-success-1240 |
| cisco-asa-process-created |
cisco-asa-str-process-create-success-111008 |
| cisco-asa-process-created-1 |
cisco-asa-str-process-create-success-111010 |
| cisco-asa-translation-30501 |
cisco-asa-str-app-activity-30501 |
| cisco-asa-vpn-login |
cisco-asa-kv-vpn-login-success-user |
| cisco-auth-failed |
cisco-cucm-kv-endpoint-authentication-fail-userlogging |
| cisco-auth-failed-1 |
cisco-cucm-kv-endpoint-authentication-fail-authfailed |
| cisco-auth-failed-2 |
cisco-cucm-kv-endpoint-authentication-fail-failure |
| cisco-auth-successful |
cisco-cucm-kv-endpoint-login-success-authsuccess |
| cisco-auth-successful-1 |
cisco-cucm-kv-endpoint-login-success-authsuccess-1 |
| cisco-auth-successful-2 |
cisco-cucm-kv-endpoint-login-success-userlogging |
| cisco-authentication-failed |
cisco-aci-str-endpoint-login-fail-failure |
| cisco-authentication-successful |
cisco-aci-str-endpoint-login-success-loginsession |
| cisco-config-change |
cisco-ios-str-configuration-modify-success-configured |
| cisco-config-change-1 |
cisco-aci-str-configuration-modify-success-information |
| cisco-dhcp |
cisco-dhcp-kv-endpoint-login-success-domain |
| cisco-dhcp-snooping-deny |
cisco-ios-str-alert-trigger-success-snoopingdeny |
| cisco-dns-response |
cisco-fp-kv-dns-response-success-dnsquery |
| cisco-dns-response-1 |
cisco-umbrella-sk4-dns-response-success-dns |
| cisco-dns-response-2 |
cisco-umbrella-json-dns-response-success-responsecode |
| cisco-duo-account-lockout |
cisco-duo-str-user-lock-success-adminlockout |
| cisco-duo-password-reset |
cisco-duo-str-user-password-reset-success-authattempts |
| cisco-eigrp-system-info |
cisco-asa-mix-app-notification-eigrp |
| cisco-esa-dlp-alert |
cisco-se-cef-email-send-receive-success-suser |
| cisco-esa-dlp-alert-1 |
cisco-secureemail-cef-email-send-success-logevent |
| cisco-esa-dlp-alert-2 |
cisco-secureemail-cef-email-receive-fail-secureemailgateway |
| cisco-file-activity |
cisco-asa-str-file-success-client |
| cisco-firepower-109201 |
cisco-fp-kv-user-create-success-109201 |
| cisco-firepower-109207 |
cisco-fp-kv-user-modify-success-109207 |
| cisco-firepower-109210 |
cisco-fp-kv-user-delete-success-109210 |
| cisco-firepower-713049 |
cisco-fp-kv-vpn-authentication-success-713049 |
| cisco-firepower-713075 |
cisco-asa-kv-vpn-authentication-success-713075 |
| cisco-firepower-713120 |
cisco-fp-kv-vpn-authentication-success-713120 |
| cisco-firepower-713257 |
cisco-fp-str-network-notification-success-713257 |
| cisco-firepower-722010 |
cisco-fp-str-app-notification-success-722010 |
| cisco-firepower-750001 |
cisco-fp-kv-app-authentication-success-750001 |
| cisco-firepower-750006 |
cisco-fp-str-app-authentication-success-750006 |
| cisco-firepower-750007 |
cisco-fp-str-app-authentication-success-750007 |
| cisco-firepower-752003 |
cisco-fp-kv-app-notification-success-752003 |
| cisco-firepower-752016 |
cisco-asa-kv-vpn-authentication-success-752016 |
| cisco-firesight-alert |
cisco-fp-kv-alert-trigger-success-impactbits |
| cisco-fpr-113003 |
cisco-fp-str-user-modify-113003 |
| cisco-fpr-113004 |
cisco-asa-kv-radius-traffic-success-113004 |
| cisco-fpr-113008 |
cisco-fp-str-vpn-authentication-113008 |
| cisco-fpr-113009 |
cisco-asa-str-app-authentication-113009-1 |
| cisco-fpr-113011 |
cisco-fp-str-vpn-authentication-success-113011 |
| cisco-ftd-106006 |
cisco-fp-str-network-traffic-fail-106006 |
| cisco-ftd-106010 |
cisco-asa-kv-network-session-fail-106010 |
| cisco-ftd-106015 |
cisco-fp-str-network-traffic-fail-106015 |
| cisco-ftd-106023 |
cisco-fp-str-network-traffic-fail-106023 |
| cisco-ftd-110002 |
cisco-fp-str-configuration-read-110002 |
| cisco-ftd-110003 |
cisco-fp-str-configuration-delete-110003 |
| cisco-ftd-111001 |
cisco-fp-str-configuration-download-111001 |
| cisco-ftd-111004 |
cisco-fp-str-configuration-modify-111004 |
| cisco-ftd-113004 |
cisco-fp-kv-radius-traffic-success-113004 |
| cisco-ftd-113008 |
cisco-fp-kv-app-authentication-113008 |
| cisco-ftd-113009 |
cisco-fp-str-app-authentication-113009 |
| cisco-ftd-210007 |
cisco-fp-str-app-notification-210007 |
| cisco-ftd-302010 |
cisco-fp-str-network-notification-302010 |
| cisco-ftd-302020 |
cisco-fp-str-network-session-302020 |
| cisco-ftd-313005 |
cisco-fp-kv-network-traffic-fail-313005 |
| cisco-ftd-602101 |
cisco-fp-kv-app-authentication-602101 |
| cisco-ftd-607001 |
cisco-asa-str-app-notification-607001-1 |
| cisco-ftd-710002 |
cisco-fp-str-network-start-success-710002 |
| cisco-ftd-716039 |
cisco-asa-str-vpn-login-fail-716039 |
| cisco-ftd-717022 |
cisco-fp-str-certificate-validate-717022 |
| cisco-ftd-717028 |
cisco-fp-str-certificate-validate-717028 |
| cisco-ftd-717037 |
cisco-fp-str-certificate-validate-717037 |
| cisco-ftd-721016 |
cisco-asa-str-vpn-login-success-721016 |
| cisco-ftd-721018 |
cisco-asa-str-vpn-logout-success-721018 |
| cisco-ftd-722011 |
cisco-fp-str-vpn-logout-722011 |
| cisco-ftd-722012 |
cisco-fp-str-vpn-logout-722012 |
| cisco-ftd-722022 |
cisco-fp-str-vpn-login-722022 |
| cisco-ftd-722023 |
cisco-fp-str-vpn-logout-722023 |
| cisco-ftd-722028 |
cisco-fp-str-vpn-logout-success-722028 |
| cisco-ftd-722032 |
cisco-fp-str-vpn-login-722032 |
| cisco-ftd-722033 |
cisco-fp-str-vpn-login-722033 |
| cisco-ftd-722034 |
cisco-fp-str-vpn-login-722034 |
| cisco-ftd-722036 |
cisco-fp-str-network-notification-722036 |
| cisco-ftd-722041 |
cisco-fp-str-endpoint-login-success-722041 |
| cisco-ftd-725001 |
cisco-fp-str-ssl-start-725001 |
| cisco-ftd-725002 |
cisco-fp-str-ssl-traffic-725002 |
| cisco-ftd-725003 |
cisco-fp-str-ssl-traffic-725003 |
| cisco-ftd-725007 |
cisco-fp-str-ssl-close-725007 |
| cisco-ftd-725016 |
cisco-fp-str-ssl-traffic-725016 |
| cisco-ftd-733100 |
cisco-firepower-str-alert-trigger-733100 |
| cisco-ftd-737003 |
cisco-fp-str-app-notification-737003 |
| cisco-ftd-737006 |
cisco-fp-str-network-notification-737006 |
| cisco-ftd-737016 |
cisco-fp-str-ip-assign-737016 |
| cisco-ftd-737026 |
cisco-fp-str-ip-assign-737026 |
| cisco-ftd-737034 |
cisco-fp-str-ip-assign-737034 |
| cisco-ftd-746014 |
cisco-asa-str-dns-response-success-746014 |
| cisco-ftd-746015 |
cisco-asa-str-dns-response-success-746015 |
| cisco-ftd-746016 |
cisco-asa-str-dns-response-fail-746016-1 |
| cisco-ftd-771002 |
cisco-fp-str-app-time-modify-771002 |
| cisco-ftd-connection-609001 |
cisco-fp-str-app-activity-success-609001 |
| cisco-ftd-connection-609002 |
cisco-fp-str-app-activity-success-609002 |
| cisco-ftd-connection-built-302013 |
cisco-fp-str-network-traffic-success-built |
| cisco-ftd-connection-stop |
cisco-fp-str-network-traffic-success-teardown-connection |
| cisco-ftd-connection-teardown |
cisco-fp-str-network-traffic-success-teardown-duration |
| cisco-ftd-file-download |
cisco-asa-str-file-download-success-filedirection |
| cisco-ftd-firewall-1 |
cisco-fp-str-network-traffic-success-dup-tcp |
| cisco-ftd-firewall-2 |
cisco-fp-str-network-traffic-success-805002 |
| cisco-ftd-firewall-3 |
cisco-fp-str-network-traffic-success-305012 |
| cisco-ftd-firewall-4 |
cisco-fp-str-network-traffic-success-sip |
| cisco-ftd-firewall-5 |
cisco-fp-str-network-traffic-fail-icmp |
| cisco-ftd-firewall-6 |
cisco-fp-str-network-traffic-success-305011 |
| cisco-ftd-firewall-7 |
cisco-asa-str-vpn-login-success-602303 |
| cisco-ftd-firewall-8 |
cisco-fp-str-vpn-logout-success-602304 |
| cisco-ftd-firewall-9 |
cisco-fp-str-network-traffic-success-805001 |
| cisco-ftd-firewall-translation |
cisco-fp-str-app-activity-305011 |
| cisco-ftd-permit-any |
cisco-fp-kv-network-traffic-success-permitany |
| cisco-ftd-process-created |
cisco-fp-str-process-create-success-111008 |
| cisco-ftd-process-created-1 |
cisco-asa-str-process-create-success-111009 |
| cisco-ftd-process-created-2 |
cisco-fp-str-process-create-success-111010 |
| cisco-ftd-translation-30501 |
cisco-firepower-csv-app-activity-30501 |
| cisco-ise-app-accounting-stop |
cisco-ise-kv-app-logout-accounting |
| cisco-ise-app-activity |
cisco-ise-kv-app-activity-tacacsplus |
| cisco-ise-app-activity-1 |
cisco-ise-kv-app-activity-tacacsaccounting |
| cisco-ise-auth-failed |
cisco-ise-str-endpoint-policy-verify-authorizationfail |
| cisco-ise-authentication-failed |
cisco-ise-kv-endpoint-login-fail-loginfailed |
| cisco-ise-config-change |
cisco-ise-kv-configuration-modify-configurationchange |
| cisco-ise-external-mdm |
cisco-ise-kv-app-notification-externalmdm |
| cisco-ise-failed-attempts |
cisco-ise-kv-app-activity-fail-failedattempts |
| cisco-ise-guest |
cisco-ise-kv-app-activity-guest |
| cisco-ise-nac-logon |
cisco-ise-kv-endpoint-authentication-cisepassed |
| cisco-ise-nac-ssh-login |
cisco-ise-cef-endpoint-login-success-userloginsuccess |
| cisco-ise-nac-system-info |
cisco-ise-cef-app-activity-success-eventid |
| cisco-ise-network-info |
cisco-ise-kv-app-notification-profiler |
| cisco-ise-network-info-1 |
cisco-ise-kv-app-activity-administrativeandoperationalaudit |
| cisco-ise-network-info-2 |
cisco-ise-kv-app-notification-adconnector |
| cisco-ise-network-info-3 |
cisco-ise-kv-endpoint-authentication-flowdiagnostics |
| cisco-ise-network-info-4 |
cisco-ise-kv-endpoint-authentication-fail-warn |
| cisco-ise-radius-accounting |
cisco-ise-kv-endpoint-authentication-accounting |
| cisco-ise-system-info |
cisco-ise-kv-endpoint-policy-verify-accounting |
| cisco-ise-tacacs-login |
cisco-ise-cef-endpoint-login-success-adlogin |
| cisco-ise-vpn-logout |
cisco-ise-cef-vpn-logout-success-stop |
| cisco-ldp-system-info |
cisco-asa-cef-network-notification-neighbor |
| cisco-logout |
cisco-ucm-str-app-logout-success-loggedout |
| cisco-logout-1 |
cisco-aci-str-app-logout-success-logoutsession |
| cisco-meraki-vpn-start |
cisco-mma-str-vpn-login-success-vpnconnect |
| cisco-meraki-vpn-stop |
cisco-mma-str-vpn-logout-success-disconnected |
| cisco-meraki-web-activity |
cisco-mma-kv-http-session-success-dst |
| cisco-nac-failed-logon |
cisco-ise-kv-radius-traffic-fail-failedattempt |
| cisco-nac-logon |
cisco-ise-kv-radius-traffic-success-accountstartreq |
| cisco-nac-logon-1 |
cisco-ise-kv-radius-traffic-success-commandauthsuccess |
| cisco-nac-logon-2 |
cisco-ise-kv-radius-traffic-success-networkdeviceprofile |
| cisco-nac-logon-3 |
cisco-ise-kv-radius-traffic-success-tacacsaccouting |
| cisco-netflow-connection |
cisco-netflow-str-network-traffic-success-ipaccesslog |
| cisco-netflow-connection-1 |
cisco-fp-kv-network-traffic-success-accesscontrol |
| cisco-netflow-connection-2 |
cisco-netflow-kv-network-traffic-success-nfc-id |
| cisco-network-connection |
cisco-asa-str-app-activity-success-network |
| cisco-process-created |
cisco-npe-kv-process-create-success-loggedcommand |
| cisco-process-network |
cisco-ac-kv-network-session-success-nvzflow |
| cisco-snmp-authentication-failure |
cisco-asa-str-endpoint-authentication-fail-authfailure |
| cisco-sourcefire-alert |
cisco-fp-kv-alert-trigger-success-correlationevent |
| cisco-ssh-login |
cisco-asa-str-ssh-traffic-success-sshuserauth |
| cisco-ssh-login-1 |
cisco-c-mix-ssh-traffic-success-loginsuccess |
| cisco-ssh-logout |
cisco-c-mix-endpoint-logout-success-sessionexited |
| cisco-system-event |
cisco-firepower-json-app-activity-appactivity |
| cisco-system-info-1 |
cisco-asa-str-app-notification-success-dual |
| cisco-system-info-10 |
cisco-asa-str-app-activity-epm6 |
| cisco-system-info-11 |
cisco-ucm-kv-app-notification-success-deviceupdate |
| cisco-system-info-12 |
cisco-ucm-kv-configuration-modify-success-generalconfigurationupdate |
| cisco-system-info-13 |
cisco-ucm-kv-app-login-success-userlogging |
| cisco-system-info-14 |
cisco-ucm-kv-user-role-modify-success-userrolemembershipupdate |
| cisco-system-info-15 |
cisco-asa-str-app-notification-systemmsg |
| cisco-system-info-16 |
cisco-asa-str-app-notification-linkfailure |
| cisco-system-info-17 |
cisco-asa-str-app-notification-5 |
| cisco-system-info-18 |
cisco-asa-str-network-notification-duplex |
| cisco-system-info-19 |
cisco-asa-str-app-notification-flowcontrol |
| cisco-system-info-2 |
cisco-asa-str-app-notification-lineproto |
| cisco-system-info-20 |
cisco-asa-str-app-notification-systemmsg-1 |
| cisco-system-info-21 |
cisco-asa-str-app-notification-sysmgr |
| cisco-system-info-22 |
cisco-asa-str-network-notification-dupsrcip |
| cisco-system-info-23 |
cisco-asa-str-app-login-fail-conversationfailed |
| cisco-system-info-24 |
cisco-asa-str-app-notification-authpriv |
| cisco-system-info-25 |
cisco-asa-str-app-notification-success-basictrace |
| cisco-system-info-26 |
cisco-asa-str-alert-trigger-ethport3 |
| cisco-system-info-27 |
cisco-asa-str-app-notification-3 |
| cisco-system-info-28 |
cisco-asa-str-app-notification-coresavefailed |
| cisco-system-info-29 |
cisco-asa-str-app-notification-errormessage |
| cisco-system-info-3 |
cisco-asa-str-app-notification-updown |
| cisco-system-info-30 |
cisco-asa-str-configuration-modify-5 |
| cisco-system-info-31 |
cisco-asa-str-app-notification-ifup |
| cisco-system-info-32 |
cisco-asa-str-app-notification-iftxflowcontrol |
| cisco-system-info-33 |
cisco-asa-str-app-notification-channeldeleted |
| cisco-system-info-34 |
cisco-asa-str-app-notification-channelcreated |
| cisco-system-info-35 |
cisco-asa-str-app-notification-membersdown |
| cisco-system-info-4 |
cisco-asa-kv-app-notification-adjchg |
| cisco-system-info-5 |
cisco-asa-str-ssh-close-ssh |
| cisco-system-info-6 |
cisco-asa-str-ssh-start-session |
| cisco-system-info-7 |
cisco-asa-str-app-notification-startstop |
| cisco-system-info-9 |
cisco-asa-str-app-activity-authmgr5 |
| cisco-tacacs-authentication-failed |
cisco-tacacs-kv-app-authentication-fail-tacacsserver |
| cisco-tacacs-system-info |
cisco-acs-kv-app-authentication-fail-requestfailed |
| cisco-ucs-authentication-failed |
cisco-cucs-str-endpoint-login-fail-authfailed |
| cisco-umbrella-intelligent-proxy |
cisco-umbrella-json-http-session-verdicts |
| cisco-umbrella-network-connection |
cisco-umbrella-cef-network-traffic-success-ip |
| cisco-umbrella-proxy |
cisco-umbrella-cef-http-session-proxy |
| cisco-vpn-logout |
cisco-ac-cef-vpn-logout-success-stop |
| cisco-vpn-logout-2 |
cisco-ac-str-vpn-logout-success-resume |
| cisco-vpn-start |
cisco-ac-str-vpn-login-success-113039 |
| cisco-vpn-start-2 |
cisco-ac-str-vpn-login-success-722055 |
| cisco-vpn-start-3 |
cisco-ac-str-vpn-login-success-734001 |
| cisco-w3c-proxy |
cisco-securewebapp-str-http-session-webbrowsing |
| cisco-wlc-network-info-1 |
cisco-ios-kv-endpoint-notification-success-endpointnotification |
| cisco-wlc-network-info-2 |
cisco-ios-kv-endpoint-notification-success-endpointnotification-1 |
| cisco-wlc-remote-logon |
cisco-cwc-str-endpoint-login-success-loginpassed |
| cisco-wsa-squid-proxy |
cisco-securewebapp-str-http-session-squid |
| cisco-wsa-web-activity |
cisco-securewebapp-csv-http-session-info |
| cisco-wsa-web-activity-1 |
cisco-securewebapp-kv-http-session-accesslogs |
| cise-alarm-info |
cisco-ise-str-app-notification-alarm |
| cise-audit-info |
cisco-ise-str-app-notification-audit |
| cise-config-change |
cisco-ise-kv-configuration-modify-success-52001 |
| cise-config-change-1 |
cisco-ise-kv-configuration-modify-success-52000 |
| cise-logout |
cisco-ise-kv-endpoint-logout-51002 |
| cise-logout-1 |
cisco-ise-kv-app-logout-60116 |
| cise-posture-audit-info |
cisco-ise-str-app-notification-success-posturereport |
| cise-remote-logon |
cisco-ise-kv-ssh-traffic-success-60080 |
| cise-remote-logon-1 |
cisco-ise-kv-endpoint-login-success-51001 |
| cise-remote-logon-2 |
cisco-ise-kv-endpoint-login-61025 |
| cise-remote-logon-3 |
cisco-ise-kv-ssh-traffic-success-60115 |
| citrix-activesync-app-activity |
citrix-gac-kv-app-activity-success-allow |
| citrix-activesync-app-activity-failed |
citrix-gac-kv-app-activity-fail-deny |
| citrix-app-activity |
citrix-sharefile-sk4-app-activity-success-editnote |
| citrix-app-activity-1 |
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission |
| citrix-app-login |
citrix-sharefile-sk4-app-login-success-loginactivity |
| citrix-app-login-2 |
citrix-sharefile-sk4-app-login-success-tfalogin |
| citrix-app-login-3 |
citrix-cvapps-kv-app-login-success-hdx |
| citrix-app-login-4 |
citrix-cvapps-json-app-login-success-applicationstart |
| citrix-app-login-fail |
citrix-sharefile-sk4-app-login-fail-failedlogin |
| citrix-app-login-fail-1 |
citrix-sharefile-sk4-app-login-fail-tfaloginfail |
| citrix-app-login-fail-2 |
citrix-sharefile-sk4-app-login-fail-loginlocked |
| citrix-appfw-400-resp |
citrix-appfw-str-network-traffic-400-resp |
| citrix-appfw-bufferoverflow-cookie |
citrix-appfw-str-network-traffic-bufferoverflowcookie |
| citrix-appfw-bufferoverflow-url |
citrix-appfw-str-network-traffic-bufferoverflow-url |
| citrix-appfw-content-type |
citrix-appfw-kv-network-traffic-success-contenttype |
| citrix-appfw-csrf-tag |
citrix-appfw-str-network-traffic-csrftag |
| citrix-appfw-csrf-tag-1 |
citrix-appfw-cef-network-traffic-success-csrftag |
| citrix-appfw-denyurl |
citrix-appfw-str-network-traffic-denyurl |
| citrix-appfw-fieldconsistency |
citrix-appfw-str-network-traffic-fieldconsistency |
| citrix-appfw-fieldconsistency-1 |
citrix-appfw-cef-network-traffic-success-fieldconsistency |
| citrix-appfw-fieldformat |
citrix-appfw-kv-network-traffic-fieldformat |
| citrix-appfw-malformed-req-err |
citrix-appfw-str-network-traffic-malformed-reqerr |
| citrix-appfw-multiple-header |
citrix-appfw-str-network-traffic-multheader |
| citrix-appfw-network-info |
citrix-waf-cef-http-request-success-netscaler |
| citrix-appfw-policy_hit |
citrix-appfw-str-network-traffic-policyhit |
| citrix-appfw-referer-header |
citrix-appfw-cef-network-traffic-referer-header |
| citrix-appfw-referer-header-1 |
citrix-appfw-cef-network-traffic-success-refererheader |
| citrix-appfw-signature-match |
citrix-appfw-str-network-traffic-signature-match |
| citrix-appfw-sql |
citrix-appfw-str-network-traffic-sql |
| citrix-appfw-starturl |
citrix-appfw-str-network-traffic-starturl |
| citrix-appfw-starturl-1 |
citrix-appfw-cef-network-traffic-success-starturl |
| citrix-appfw-xss |
citrix-appfw-str-network-traffic-xss |
| citrix-device-aaa-auth-failed |
citrix-cgateway-str-vpn-login-fail-authenticationfailed |
| citrix-device-aaa-auth-success |
citrix-cgateway-str-vpn-authentication-success-succeededpolicy |
| citrix-device-aaa-msg-1 |
citrix-cgateway-str-app-notification-ns_aaa_dialogue_handler |
| citrix-device-aaa-msg-2 |
citrix-cgateway-str-network-notification-below |
| citrix-device-aaa-msg-3 |
citrix-cgateway-str-app-authentication-message |
| citrix-device-aaa-msg-4 |
citrix-cgateway-str-user-read-receive-ldap-user-search-event |
| citrix-device-aaa-msg-5 |
citrix-cgateway-str-endpoint-policy-verify-fail-received |
| citrix-device-aaa-user-failed |
citrix-cgateway-str-vpn-login-fail-failedpolicy |
| citrix-device-down-info |
citrix-cgateway-str-app-notification-devicedown |
| citrix-device-extracted-info |
citrix-cgateway-csv-app-notification-extracted_groups |
| citrix-device-monitordown-info |
citrix-cgateway-str-app-notification-monitordown |
| citrix-device-monitorup-info |
citrix-cgateway-kv-app-notification-monitorup |
| citrix-device-nonhttp-info |
citrix-cgateway-str-app-activity-accessdenied |
| citrix-device-routing-info |
citrix-cgateway-str-app-notification-ppe |
| citrix-device-saveconfig-info |
citrix-cgateway-str-configuration-save-saveconfig |
| citrix-device-snmp-info |
citrix-cgateway-str-app-notification-trap_sent |
| citrix-device-ssltcp-info |
citrix-cgateway-str-vpn-logout-tcpconntimeout |
| citrix-device-transform-info |
citrix-cgateway-str-network-notification-filerequest |
| citrix-device-up-info |
citrix-cgateway-str-app-notification-diviceup |
| citrix-endpoint-mgmt-activity |
citrix-endpointmgmt-kv-app-activity-success-audit |
| citrix-file-download |
citrix-sharefile-cef-file-download-success-download |
| citrix-file-share |
citrix-cgateway-sk4-app-activity-success-sharessend |
| citrix-file-upload |
citrix-sharefile-cef-file-upload-success-fileupload |
| citrix-logout |
citrix-cvapps-json-endpoint-logout-desktopstop |
| citrix-logout-1 |
citrix-cvapps-json-app-logout-success-applicationstop |
| citrix-remote-logon |
citrix-cvapps-json-endpoint-login-success-shadowuser |
| citrix-remote-logon-1 |
citrix-cvapps-json-rdp-traffic-success-message |
| citrix-system-info |
citrix-cvapps-json-app-activity-adminaction |
| citrix-vpn-connection |
citrix-cgateway-str-vpn-login-success-acessallowed |
| citrix-vpn-connection-1 |
citrix-cgateway-str-vpn-session-tcpconnstat |
| citrix-vpn-logout |
citrix-cgateway-str-vpn-logout-success-removesessiondebug |
| citrix-vpn-logout-1 |
citrix-cgateway-str-vpn-logout-success-icaend |
| citrix-vpn-system-info |
citrix-cgateway-str-app-notification-sslvpn |
| citrix-xenapp-login |
citrix-cvapps-kv-app-login-success-sslvpn |
| cl-cisco-dns-response-sk4-4 |
cisco-umbrella-json-dns-response-success-tenantid |
| clearsense-app-activity |
clearsense-cs-sk4-app-activity-success-clearsenseaudit |
| clearsense-app-login |
clearsense-cs-sk4-app-login-success-loginsuccessful |
| clearswift-dlp-email |
clearswiftseg-cseg-str-email-send-receive-msgsiacpt |
| clickstudio-passwordstate-account-disabled |
clickstudios-passwordstate-kv-user-disable-success-servicedisable |
| clickstudio-passwordstate-account-password-change |
clickstudios-passwordstate-kv-user-password-modify-success-modifiedpassword |
| clickstudio-passwordstate-account-password-change-failed |
clickstudios-passwordstate-kv-user-password-modify-fail-resetpassword |
| clickstudio-passwordstate-account-password-reset |
clickstudios-passwordstate-kv-user-password-reset-fail-apifailed |
| clickstudio-passwordstate-account-password-reset-1 |
clickstudios-passwordstate-kv-user-password-reset-success-resetsuccess |
| clickstudio-passwordstate-account-password-reset-2 |
clickstudios-passwordstate-kv-user-password-reset-success-apiresetsuccess |
| clickstudio-passwordstate-app-activity |
clickstudios-passwordstate-kv-app-activity-success-updatepassword |
| clickstudio-passwordstate-app-activity-1 |
clickstudios-passwordstate-kv-app-activity-success-modifyaccess |
| clickstudio-passwordstate-auth-attempt |
clickstudios-pwdstate-str-app-notification-success-retrievedpassword |
| clickstudio-passwordstate-auth-success |
clickstudios-passwordstate-kv-app-authentication-success-authtoapi |
| clickstudio-passwordstate-auth-success-1 |
clickstudios-passwordstate-kv-app-authentication-success-loginforuserid |
| clickstudio-passwordstate-logout |
clickstudios-pwdstate-str-app-logout-success-manuallogoff |
| clickstudio-passwordstate-logout-1 |
clickstudios-pwdstate-str-app-logout-success-autologoff |
| clickstudio-passwordstate-member-removed |
clickstudios-passwordstate-kv-group-member-remove-success-serviceremove |
| clickstudio-passwordstate-remote-logon |
clickstudios-passwordstate-kv-endpoint-login-success-remotesession |
| clickstudio-passwordstate-system-info |
clickstudios-pwdstate-str-app-notification-success-checkfailed |
| clickstudio-passwordstate-system-info-1 |
clickstudios-pwdstate-str-app-notification-success-clientip |
| cloud-iq-network-info |
extremenetworks-eciq-kv-endpoint-authentication-success-authsuccess |
| cloudflare-app-activity |
cloudflare-insights-sk4-app-member-success-cloudflare |
| cloudflare-app-activity-1 |
cloudflare-insights-sk4-app-member-success-cloudflare-1 |
| cloudflare-network-alert |
cloudfare-waf-sk4-alert-trigger-success-firewall |
| cloudflare-network-alert-2 |
cloudfare-cdn-sk4-alert-trigger-success-edgestart |
| code42-alert-1 |
code42-incydr-sk4-alert-trigger-success-cloudstorage |
| code42-alert-2 |
code42-incydr-sk4-alert-trigger-success-publicshares |
| code42-alert-3 |
code42-incydr-sk4-alert-trigger-success-sourcecode |
| code42-app-activity |
code42-incydr-sk4-app-activity-success-appclient |
| code42-email-out-operations |
code42-incydr-sk4-email-send-success-emailed |
| code42-file-operations |
code42-incydr-str-file-success-logcollector |
| code42-file-operations-2 |
code42-incydr-json-file-delete-success-deviceaddress |
| code42-file-operations-3 |
code42-incydr-csv-file-delete-success-code42logcollector |
| code42-file-operations-4 |
code42-incydr-json-file-success-oshostname |
| code42-file-read |
code42-incydr-sk4-file-read-succes-appread |
| code42-print-operations |
code42-incydr-sk4-printer-activity-success-printed |
| code42-system-info |
code42-cp-json-endpoint-notification-computer |
| code42-usb-insert |
code42-incydr-json-peripheral-storage-insert-success-deviceappeared |
| code42-usb-removed |
code42-incydr-json-peripheral-storage-activity-success-deviceaddress |
| cognitas-vpn-start |
cognitascrosslink-cc-cef-vpn-login-success-authsuccess |
| cohesity-app-login |
cohesity-dataplatform-json-app-login-success-actionlogin |
| cohesity-system-info-1 |
cohesity-dataplatform-json-app-activity-kphysical |
| cohesity-system-info-2 |
cohesity-dataplatform-json-user-token-create-accesstoken |
| cohesity-system-info-3 |
cohesity-dataplatform-json-app-activity-appactivity |
| common-ftp-app-login |
ftp-f-csv-app-login-success-successlogin |
| common-ftp-failed-app-login |
ftp-f-csv-app-login-fail-failurelogin |
| common-ftp-file-delete |
ftp-f-csv-file-delete-success-filedeleted |
| common-ftp-file-download |
ftp-f-csv-file-read-success-filedownloaded |
| common-ftp-file-upload |
ftp-f-csv-file-write-success-fileuploaded |
| common-ftp-logout |
ftp-f-csv-ftp-close-success-sessionclosed |
| confer-alert |
vmware-carbonblack-mix-alert-trigger-success-threat |
| connectra-auth-failed |
checkpoint-vsec-kv-vpn-login-fail-authcryptfailed |
| connectra-auth-successful |
checkpoint-vsec-kv-vpn-authentication-success-connectra |
| connectra-failed-vpn-login |
checkpoint-sg-kv-vpn-login-fail-connectra |
| connectra-vpn-end |
checkpoint-sg-kv-vpn-logout-success-logout-1 |
| connectra-vpn-login |
checkpoint-sg-kv-vpn-login-success-connectraloginsuccess |
| connectra-vpn-login-1 |
checkpoint-vsec-kv-vpn-login-success-ipchanged |
| connectra-vpn-logout |
checkpoint-sg-kv-vpn-logout-success-logout |
| contivity-vpn-end |
nortelcontivity-vpn-str-vpn-logout-success-loggedout |
| contivity-vpn-exceeded-idle-timeout |
nortelcontivity-vpn-str-vpn-logout-exceedtimeout |
| contivity-vpn-set-ip |
nortelcontivity-vpn-json-vpn-login-success-assignip |
| contivity-vpn-start |
nortelcontivity-vpn-json-vpn-login-success-address |
| corelight-dns-query |
zeek-z-json-dns-request-success-dns |
| cortex-xdr-app-activity |
pan-cortex-cef-app-login-success-loginsuccess |
| counteract-config-change |
forescout-couteract-str-configuration-modify-success-session |
| counteract-logout |
forescout-couteract-cef-app-logout-success-logoffevent |
| counteract-nac-logon-successful |
forescout-counteract-cef-endpoint-login-success-intractivelogonevents |
| counteract-network-alert |
forescout-couteract-kv-alert-trigger-success-deviceblocked |
| counteract-network-alert-1 |
forescout-counteract-str-alert-trigger-success-unauthorizedhostevent |
| counteract-network-alert-2 |
forescout-couteract-kv-alert-trigger-success-alerttrigger |
| counteract-network-alert-3 |
forescout-couteract-kv-alert-trigger-success-mainappliance |
| counteract-network-alert-4 |
forescout-couteract-cef-alert-trigger-success-rule |
| counteract-network-alert-5 |
forescout-couteract-json-alert-trigger-success-alerttrigger |
| counteract-network-alert-6 |
forescout-couteract-kv-alert-trigger-success-virtualfirewall |
| counteract-network-connection |
forescout-counteract-str-network-traffic-success-established |
| counteract-network-connection-1 |
forescout-counteract-kv-network-traffic-status |
| counteract-network-info-1 |
forescout-couteract-kv-app-activity-source |
| counteract-network-info-2 |
forescout-couteract-kv-alert-trigger-counteract |
| counteract-network-info-3 |
forescout-couteract-kv-app-activity-info |
| crowdstrike-app-activity |
crowdstrike-falcon-cef-app-activity-useractivityauditevent |
| crowdstrike-app-activity-1 |
crowdstrike-falcon-json-app-activity-awsec2securitygroup |
| crowdstrike-app-activity-10 |
crowdstrike-falcon-sk4-app-activity-updateuser |
| crowdstrike-app-activity-11 |
crowdstrike-falcon-cef-app-activity-deleteuser |
| crowdstrike-app-activity-12 |
crowdstrike-falcon-sk4-case-modify-success-detectionupdate |
| crowdstrike-app-activity-13 |
crowdstrike-falcon-sk4-app-activity-success-quarantinedfileupdate |
| crowdstrike-app-activity-14 |
crowdstrike-falcon-sk4-group-modify-success-updategroup |
| crowdstrike-app-activity-15 |
crowdstrike-falcon-sk4-app-activity-success-assert |
| crowdstrike-app-activity-16 |
crowdstrike-falcon-sk4-policy-modify-success-updatepriority |
| crowdstrike-app-activity-17 |
crowdstrike-falcon-sk4-group-success-aufitevent |
| crowdstrike-app-activity-18 |
crowdstrike-falcon-sk4-file-download-success-downloadsensorinstaller |
| crowdstrike-app-activity-19 |
crowdstrike-falcon-sk4-user-password-modify-success-changepassword |
| crowdstrike-app-activity-2 |
crowdstrike-falcon-sk4-app-activity-awsec2networkinterface |
| crowdstrike-app-activity-20 |
crowdstrike-falcon-sk4-group-success-addgroup |
| crowdstrike-app-activity-21 |
crowdstrike-falcon-sk4-app-activity-success-revealtoken |
| crowdstrike-app-activity-22 |
crowdstrike-falcon-sk4-app-activity-success-hidehostrequested |
| crowdstrike-app-activity-23 |
crowdstrike-falcon-sk4-user-password-reset-success-requestresetpassword |
| crowdstrike-app-activity-24 |
crowdstrike-falcon-sk4-policy-modify-success-updatepolicy |
| crowdstrike-app-activity-25 |
crowdstrike-falcon-sk4-app-activity-success-selfaccepteula |
| crowdstrike-app-activity-26 |
crowdstrike-falcon-sk4-user-role-assign-success-grantuserroles |
| crowdstrike-app-activity-27 |
crowdstrike-falcon-sk4-user-create-success-createuser |
| crowdstrike-app-activity-28 |
crowdstrike-falcon-sk4-policy-enable-success-enablepoliy |
| crowdstrike-app-activity-29 |
crowdstrike-falcon-sk4-policy-create-success-createpolicy |
| crowdstrike-app-activity-3 |
crowdstrike-falcon-json-app-activity-awsec2networkaclentry |
| crowdstrike-app-activity-30 |
crowdstrike-falcon-json-app-activity-success-sourceip |
| crowdstrike-app-activity-4 |
crowdstrike-falcon-json-app-activity-awsec2networkacl |
| crowdstrike-app-activity-5 |
crowdstrike-falcon-cef-app-activity-useraccountadded |
| crowdstrike-app-activity-7 |
crowdstrike-falcon-cef-app-activity-grantuserroles |
| crowdstrike-app-activity-8 |
crowdstrike-falcon-cef-app-activity-revokeuserroles |
| crowdstrike-app-activity-9 |
crowdstrike-falcon-cef-app-activity-createuser |
| crowdstrike-auth-failed-1 |
crowdstrike-falcon-json-endpoint-login-fail-userlogonfail |
| crowdstrike-auth-failed-2 |
crowdstrike-falcon-json-endpoint-login-fail-userlogonfail-1 |
| crowdstrike-config-change |
crowdstrike-falcon-json-configuration-modify-success-firewall |
| crowdstrike-falcon-usb-write |
crowdstrike-falcon-sk4-file-write-success-written |
| crowdstrike-falcon-usb-write-1 |
crowdstrike-falcon-json-file-write-success-written |
| crowdstrike-file-alert |
crowdstrike-falcon-sk4-alert-trigger-success-quarantinedfilestate |
| crowdstrike-file-delete |
crowdstrike-falcon-json-file-delete-success-deleted |
| crowdstrike-file-delete-1 |
crowdstrike-falcon-json-file-delete-success-executabledeleted |
| crowdstrike-file-download |
crowdstrike-falcon-json-file-download-success-bitsjobcreated |
| crowdstrike-file-download-1 |
crowdstrike-falcon-cef-file-download-success-loadconfirmation |
| crowdstrike-file-operations-1 |
crowdstrike-falcon-cef-file-success-info |
| crowdstrike-file-process-alert |
crowdstrike-falcon-sk4-alert-trigger-lsasshandlefromunsignedmodule |
| crowdstrike-file-process-alert-2 |
crowdstrike-falcon-json-alert-trigger-success-lsasshandlefromunsignedmodule |
| crowdstrike-file-read |
crowdstrike-falcon-json-file-read-success-criticalfileaccessed |
| crowdstrike-file-read-2 |
crowdstrike-falcon-json-file-read-success-criticalfileaccessed-1 |
| crowdstrike-file-read-3 |
crowdstrike-falcon-json-file-read-success-ransomware |
| crowdstrike-file-write |
crowdstrike-falcon-cef-file-write-success-written |
| crowdstrike-file-write-1 |
crowdstrike-falcon-mix-file-write-success-directorycreate |
| crowdstrike-file-write-10 |
crowdstrike-falcon-json-file-write-success-olefilewritten |
| crowdstrike-file-write-11 |
crowdstrike-falcon-json-file-write-success-pdffilewritten |
| crowdstrike-file-write-12 |
crowdstrike-falcon-json-file-write-success-dwgfilewritten |
| crowdstrike-file-write-13 |
crowdstrike-falcon-json-file-write-success-dmpfilewritten |
| crowdstrike-file-write-14 |
crowdstrike-falcon-json-file-write-success-directorycreate |
| crowdstrike-file-write-2 |
crowdstrike-falcon-json-file-write-success-renamed |
| crowdstrike-file-write-3 |
crowdstrike-falcon-json-file-write-success-asepfilechange |
| crowdstrike-file-write-4 |
crowdstrike-falcon-json-file-write-success-machofilewritten |
| crowdstrike-file-write-5 |
crowdstrike-falcon-cef-file-write-success-fsvolumemounted |
| crowdstrike-file-write-6 |
crowdstrike-falcon-cef-file-write-success-critialfilemodified |
| crowdstrike-file-write-7 |
crowdstrike-falcon-cef-file-write-success-unmounted |
| crowdstrike-file-write-8 |
crowdstrike-falcon-json-file-write-success-pefilewritten |
| crowdstrike-file-write-9 |
"crowdstrike-falcon-json-file-write-success-ooxmlfilewritten |
| crowdstrike-host-info |
crowdstrike-falcon-mix-endpoint-login-success-hostinfo |
| crowdstrike-incident-summary |
crowdstrike-falcon-sk4-alert-trigger-incidentsummaryevent |
| crowdstrike-logon |
crowdstrike-falcon-mix-endpoint-login-success-userlogon |
| crowdstrike-logon-2 |
crowdstrike-falcon-json-endpoint-login-userlogin |
| crowdstrike-modify-binary |
crowdstrike-falcon-json-file-write-success-modifyservicebinary |
| crowdstrike-network-connection |
crowdstrike-falcon-json-network-traffic-success-connectip |
| crowdstrike-process-created |
crowdstrike-falcon-json-process-create-success-processrollup |
| crowdstrike-process-created-1 |
crowdstrike-falcon-json-process-create-success-processroll |
| crowdstrike-process-created-2 |
crowdstrike-falcon-json-process-create-success-syntheticprocessroll |
| crowdstrike-process-info-1 |
crowdstrike-falcon-json-dll-load-imagehash |
| crowdstrike-process-info-2 |
crowdstrike-falcon-json-process-create-processrollup2stats |
| crowdstrike-process-info-3 |
crowdstrike-falcon-json-process-close-terminateprocess |
| crowdstrike-process-info-4 |
crowdstrike-falcon-json-process-create-syntheticprocessrollup2 |
| crowdstrike-process-info-5 |
crowdstrike-falcon-sk4-process-thread-create-success-suspectcreatethreadstack |
| crowdstrike-process-info-6 |
crowdstrike-falcon-sk4-alert-trigger-userexceptiondep |
| crowdstrike-process-info-all |
"crowdstrike-falcon-sk4-app-activity-eventsimplename |
| crowdstrike-process-network |
crowdstrike-falcon-json-network-session-success-listenip |
| crowdstrike-registry-update |
crowdstrike-falcon-cef-registry-modify-asepvalueupdate |
| crowdstrike-registry-update-1 |
crowdstrike-falcon-cef-registry-modify-asepkeyupdate |
| crowdstrike-security-alert |
crowdstrike-falcon-json-alert-trigger-success-eventsimplename |
| crowdstrike-security-alert-1 |
crowdstrike-falcon-sk4-alert-trigger-suspiciousdnsrequest |
| crowdstrike-security-alert-2 |
crowdstrike-falcon-mix-alert-trigger-success-detectionsummaryevent |
| crowdstrike-security-alert-4 |
crowdstrike-falcon-json-alert-trigger-success-dllinjection |
| crowdstrike-security-alert-5 |
crowdstrike-falcon-json-alert-trigger-success-scenario |
| crowdstrike-security-alert-6 |
crowdstrike-falcon-json-alert-trigger-success-falconhostlink |
| crowdstrike-security-alert-7 |
"crowdstrike-falcon-sk4-alert-trigger-success-idpdetection |
| crowdstrike-service-created |
crowdstrike-falcon-json-process-create-success-servicestarted |
| crowdstrike-service-created-1 |
crowdstrike-falcon-json-process-create-success-createservice |
| crowdstrike-system-error |
crowdstrike-falcon-kv-app-notification-crashnotification |
| crowdstrike-system-info |
crowdstrike-falcon-kv-log-clear-eventlogcleared |
| crowdstrike-system-info-1 |
crowdstrike-falcon-sk4-endpoint-notification-timestamp |
| crowdstrike-system-info-2 |
crowdstrike-falcon-json-endpoint-name-modify-hostnamechanged |
| crowdstrike-system-info-3 |
crowdstrike-falcon-sk4-app-notification-mbcsfdrv2 |
| crowdstrike-system-info-4 |
"crowdstrike-falcon-cef-app-notification-stramstarted |
| crowdstrike-system-info-5 |
"crowdstrike-falcon-cef-app-notification-streamstopped |
| crowdstrike-system-info-6 |
crowdstrike-falcon-sk4-app-activity-success-resetapiclientsecret |
| crowdstrike-system-info-7 |
"crowdstrike-falcon-sk4-endpoint-activity-customeridstring |
| crowdstrike-system-info-8 |
"crowdstrike-falcon-sk4-alert-trigger-firewallmatchevent |
| crowdstrike-usb-activity |
crowdstrike-falcon-sk4-peripheral-storage-activity-dcusb |
| crowdstrike-usb-alert |
crowdstrike-falcon-sk4-alert-trigger-success-dcusbdevicepolicyviolation |
| crowdstrike-usb-connect |
crowdstrike-falcon-cef-peripheral-storage-insert-success-dcusbdeviceconnected |
| crowdstrike-usb-disconnect |
crowdstrike-falcon-cef-peripheral-storage-activity-success-dcusbdevicedisconnected |
| crowdstrike-usb-insert |
crowdstrike-falcon-mix-peripheral-storage-insert-success-removablemediavolumemounted |
| crowdstrike-user-identity |
crowdstrike-falcon-mix-endpoint-login-success-useridentity |
| crowdstrike-win-task-created |
crowdstrike-falcon-cef-scheduled-task-create-success-win |
| crowdstrike-win-task-updated |
crowdstrike-falcon-cef-scheduled-task-modify-win |
| cws-proxy |
cisco-cws-cef-http-session-requestmethod |
| cws-proxy-1 |
cisco-cws-csv-http-session-accesslogs |
| cyberark-account-switch |
cyberark-pam-mix-user-switch-success-retrievepassword |
| cyberark-account-switch-1 |
cyberark-pam-kv-user-switch-success-retrievepassword |
| cyberark-alert |
cyberark-pam-kv-alert-trigger-success-attackblock |
| cyberark-app-activity |
cyberark-pam-kv-app-activity-auditrecord |
| cyberark-app-login |
cyberark-pam-mix-app-login-success-logon |
| cyberark-password-change |
cyberark-pam-mix-user-password-modify-success-changepassword |
| cyberark-privileged-access |
cyberark-epm-json-user-privilege-use-success-elevationrequest |
| cyberark-process-alert |
cyberark-epm-str-alert-trigger-success-detected |
| cyberark-system-event |
cyberark-pam-kv-app-notification-moniterrecord |
| cylance-alert |
blackberry-protect-kv-alert-trigger-success-threat |
| cylance-alert-1 |
blackberry-protect-kv-alert-trigger-success-scriptcontrol |
| cylance-alert-2 |
blackberry-protect-sk4-alert-trigger-success-cyclaneprotect |
| cylance-alert-3 |
blackberry-protect-json-alert-trigger-success-cylanceprotect |
| cylance-dlp-alert |
blackberry-protect-kv-alert-trigger-success-devicecontrol |
| cylance-process-alert |
blackberry-protect-sk4-alert-trigger-success-terminate |
| cylance-protect-file-alert |
blackberry-c-json-alert-trigger-success-cylancescore |
| cylance-protect-security-alert |
blackberry-protect-json-alert-trigger-success-cylancescore |
| cylance-security-alert |
blackberry-protect-kv-alert-trigger-success-exploitattempt |
| cylance-security-alert-1 |
"blackberry-protect-xml-alert-trigger-success-32 |
| cylance-security-alert-2 |
cylance-protect-json-alert-trigger-detection |
| cylance-system-info-1 |
cylance-protect-kv-endpoint-activity-device |
| cylance-system-info-2 |
"cylance-protect-xml-app-notification-8 |
| cylance-system-info-3 |
"cylance-protect-xml-endpoint-notification-16 |
| cylance-system-info-4 |
"cylance-protect-xml-service-stop-success-0 |
| cyphort-alert |
juniper-jn-cef-alert-trigger-success-cyphort |