| mariadb-connect |
mariadb-m-csv-database-login-success-connect |
| mariadb-connect-1 |
mariadb-m-csv-database-login-success-connect-1 |
| mariadb-create |
mariadb-m-kv-database-modify-success-create |
| mariadb-disconnect |
mariadb-m-str-database-logout-success-disconnect |
| mariadb-drop |
mariadb-m-str-database-delete-success-drop |
| mariadb-failedconnect |
mariadb-m-csv-database-login-fail-failedconnect |
| mariadb-query |
mariadb-m-str-database-query-success-query-2 |
| mariadb-read |
mariadb-m-str-database-activity-success-read |
| mariadb-read-1 |
mariadb-m-str-database-activity-success-mariadb |
| mariadb-write |
mariadb-m-csv-database-modify-success-write |
| mariadb-write-1 |
mariadb-m-str-database-modify-success-write |
| mastersam-pam-app-activity |
mastersam-pam-kv-app-activity-updateresource |
| mastersam-pam-app-activity-1 |
mastersam-pam-kv-app-activity-apiaccountrequest |
| mastersam-pam-auth-4 |
mastersam-pam-kv-app-authentication-success-verifypasswordaccount |
| mastersam-pam-auth-failed-2 |
mastersam-pam-kv-endpoint-authentication-fail-loginfail |
| mastersam-pam-auth-failed-3 |
mastersam-pam-kv-endpoint-authentication-fail-otpfailed |
| mastersam-pam-auth-successful-1 |
mastersam-pam-kv-endpoint-authentication-success-login |
| mastersam-pam-auth-successful-2 |
mastersam-pam-kv-app-authentication-success-apilogin |
| mastersam-pam-auth-successful-3 |
mastersam-pam-kv-endpoint-authentication-success-verifiedotp |
| mastersam-pam-logout-1 |
mastersam-pam-kv-app-logout-success-logout |
| mastersam-pam-logout-2 |
mastersam-pam-kv-app-logout-success-logouttimeout |
| mastersam-pam-password-change |
mastersam-pam-kv-user-password-modify-success-resetaccountpassword |
| mastersam-pam-remote-logon |
mastersam-pam-kv-endpoint-login-success-connect |
| mcafee-app-activity |
mcafee-sncasb-kv-app-success-mvision |
| mcafee-dlp-alert |
mcafee-es-kv-alert-trigger-success-dataloss |
| mcafee-dlp-email-alert |
mcafee-ep-kv-email-send-fail-emailstatus |
| mcafee-dlp-email-alert-1 |
mcafee-ep-kv-email-send-fail-emailstatus-1 |
| mcafee-dlp-mem-dev |
mcafee-es-kv-file-write-success-memorydevices |
| mcafee-dlp-pnp |
mcafee-es-kv-file-write-success-pnp |
| mcafee-dlp-pnp-2 |
mcafee-es-kv-file-write-success-plugandplay |
| mcafee-dlp-print |
mcafee-dlp-kv-printer-activity-success-printer |
| mcafee-dlp-print-2 |
mcafee-dlp-kv-printer-activity-success-printer-1 |
| mcafee-dlp-rem-stor |
mcafee-es-kv-file-write-success-removablestorage |
| mcafee-dlp-rem-stor-2 |
mcafee-es-kv-file-write-success-removablestorage-1 |
| mcafee-dlp-upload |
mcafee-dlp-kv-alert-trigger-success-alerttrigger |
| mcafee-epp-alert |
mcafee-es-str-alert-trigger-success-epolicy |
| mcafee-file-write-denied |
"mcafee-es-xml-file-write-success-epoevents |
| mcafee-hbss-dlp-alert |
mcafee-atd-json-alert-trigger-success-dlpwindows |
| mcafee-hbss-dlp-alert-2 |
mcafee-atd-json-alert-trigger-success-threathandled |
| mcafee-idps-network-alert |
mcafee-idps-str-alert-trigger-success-ivrelevance |
| mcafee-ips-network-alert |
mcafee-nsp-kv-alert-trigger-success-sensorname |
| mcafee-ips-network-error |
mcafee-nsp-str-app-notification-faultforwarder |
| mcafee-ips-network-info |
mcafee-nsp-str-app-notification-auditlogforwarder |
| mcafee-logout |
mcafee-es-json-app-logout-success-userlogout |
| mcafee-machineinfo |
mcafee-epo-xml-endpoint-notification-success-epoevents |
| mcafee-network-alert |
mcafee-nsp-json-alert-trigger-success-threatsource |
| mcafee-network-alert-1 |
mcafee-nsp-kv-alert-trigger-success-result |
| mcafee-nsm-app-login |
mcafee-nsm-csv-app-login-success-succeeded |
| mcafee-nsm-app-login-failed |
mcafee-nsm-csv-app-login-fail-failed |
| mcafee-process-created-failed |
mcafee-es-csv-process-create-fail-executiondenied |
| mcafee-remote-logon |
mcafee-es-json-endpoint-login-success-successfuluserlogin |
| mcafee-security-alert-1 |
mcafee-es-kv-alert-trigger-success-hostintrusionprevention |
| mcafee-security-alert-1027 |
"mcafee-epo-xml-alert-trigger-success-1027 |
| mcafee-security-alert-2 |
mcafee-es-kv-alert-trigger-success-moveavoffloadserver |
| mcafee-security-alert-3 |
mcafee-es-kv-alert-trigger-success-endpointsecurity |
| mcafee-security-alert-4 |
mcafee-es-kv-alert-trigger-success-virusscanenterprise |
| mcafee-security-alert-5 |
mcafee-epo-kv-alert-trigger-success-string |
| mcafee-siem-4624 |
microsoft-evsecurity-json-endpoint-login-success-anaccountwassuccessfullyloggedon |
| mcafee-siem-4625 |
microsoft-evsecurity-json-endpoint-login-fail-anaccountfailedtologon |
| mcafee-siem-4648 |
microsoft-evsecurity-json-user-switch-success-4648-1 |
| mcafee-siem-4672 |
microsoft-evsecurity-json-user-privilege-assign-success-4672-3 |
| mcafee-siem-4720 |
microsoft-evsecurity-json-user-create-success-useraccountcreated |
| mcafee-siem-4722 |
microsoft-evsecurity-json-user-enable-success-auseraccountwasenabled |
| mcafee-siem-4723 |
microsoft-evsecurity-json-user-password-modify-4723-3 |
| mcafee-siem-4724 |
microsoft-evsecurity-json-user-password-reset-success-resetaccountspassword |
| mcafee-siem-4725 |
microsoft-evsecurity-json-user-disable-success-mcafeesiem |
| mcafee-siem-4726 |
microsoft-evsecurity-json-user-delete-fail-deleted |
| mcafee-siem-4740 |
microsoft-evsecurity-json-user-delete-fail-user |
| mcafee-siem-4768 |
microsoft-evsecurity-json-endpoint-kerberosauth |
| mcafee-siem-4769 |
microsoft-evsecurity-json-endpoint-login-4769-4 |
| mcafee-siem-4770 |
microsoft-evsecurity-json-endpoint-login-4770-2 |
| mcafee-siem-4771 |
microsoft-evsecurity-json-endpoint-login-fail-authfailed |
| mcafee-siem-4776 |
microsoft-evsecurity-json-endpoint-login-account |
| mcafee-siem-4778 |
microsoft-evsecurity-json-endpoint-login-success-4778 |
| mcafee-siem-4779 |
microsoft-evsecurity-json-endpoint-logout-success-sessiondisconnected |
| mcafee-siem-5136 |
microsoft-evsecurity-json-ds-object-modify-success-5136-1 |
| mcafee-siem-5137 |
microsoft-evsecurity-json-ds-object-modify-success-5137 |
| mcafee-siem-5141 |
microsoft-evsecurity-json-ds-object-modify-success-5141 |
| mcafee-siem-process-created |
microsoft-evsecurity-json-process-create-success-newprocess |
| mcafee-skyhigh-dlp-alert |
mcafee-sncasb-kv-alert-trigger-success-actoridtype |
| mcafee-skyhigh-dlp-alert-1 |
mcafee-sncasb-cef-alert-trigger-success-alertdata |
| mcafee-system-info |
mcafee-es-kv-app-notification-propertytranslator |
| mcafee-system-info-1 |
mcafee-es-kv-policy-apply-fail-pointproduct |
| mcafee-usb-activity |
"mcafee-es-xml-peripheral-storage-activity-success-20504 |
| mcafee-usb-activity-1 |
"mcafee-es-xml-peripheral-storage-activity-success-20508 |
| mcafee-usb-insert |
"mcafee-es-xml-peripheral-storage-insert-success-20500 |
| mcafee-usb-insert-1 |
"mcafee-es-xml-peripheral-storage-insert-success-20507 |
| mcafee-usb-write |
mcafee-es-kv-file-write-success-monitor |
| mcafee-vse-epo-alert |
mcafee-es-kv-alert-trigger-success-analyzername |
| mcafee-windows-error |
mcafee-es-kv-endpoint-notification-windowserror |
| mcas-security-alert |
microsoft-mcas-json-alert-trigger-success-riskysignin |
| mcas-security-alert-1 |
microsoft-mcas-json-alert-trigger-success-mcasalertexfiltrationdiscoveryanomalydetection |
| mcas-security-alert-2 |
microsoft-mcas-json-alert-trigger-success-velocity |
| mcas-security-alert-3 |
microsoft-mcas-json-alert-trigger-success-login |
| mcas-security-alert-4 |
microsoft-mcas-json-alert-trigger-success-download |
| mcas-security-alert-5 |
microsoft-mcas-json-alert-trigger-success-ransomware |
| medigate-alert-iot |
claroty-c-json-alert-trigger-success-iot |
| medigate-security-alert |
claroty-c-json-alert-trigger-success-23585 |
| meraki-dhcp |
cisco-mma-sk4-dhcp-traffic-dhcplease |
| meraki-firepower-active-dir |
cisco-fp-str-endpoint-login-success-connectedtoserver |
| meraki-firepower-authentication |
cisco-fp-kv-app-authentication-success-original |
| meraki-firepower-dhcp |
cisco-fp-str-dhcp-traffic-success-address |
| meraki-firepower-failover |
cisco-fp-str-app-notification-failover |
| meraki-firepower-ids |
cisco-fp-str-app-activity-ids |
| meraki-ip-flow-end |
cisco-mma-kv-network-traffic-flowend |
| meraki-ip-flow-start |
cisco-mma-kv-network-traffic-success-ip-flow |
| meraki-network-alert |
cisco-mma-cef-alert-trigger-success-securityevent |
| meraki-network-connection |
cisco-mma-kv-network-traffic-flows |
| meraki-network-connection-1 |
cisco-mma-kv-network-traffic-success-association |
| meraki-system-info |
cisco-mma-kv-alert-trigger-airmarshalevents |
| meraki-web-activity-denied |
cisco-mma-kv-http-session-fail-url |
| messagelabs-email-in |
symantec-esc-json-email-receive-success-emailinfo |
| messagelabs-email-out |
symantec-esc-json-email-send-success-emailinfo |
| metricbeat-5156 |
microsoft-evsecurity-json-network-session-success-5156 |
| microsoft-app-activity-1 |
microsoft-o365-sk4-app-activity-success-authzgroupupdated |
| microsoft-app-activity-10 |
microsoft-o365-sk4-app-activity-success-office365 |
| microsoft-app-activity-11 |
microsoft-o365-sk4-app-activity-success-authzgrouprenamed |
| microsoft-app-activity-12 |
microsoft-o365-json-app-activity-success-graphdirectoryauditlogs |
| microsoft-app-activity-2 |
microsoft-o365-sk4-app-activity-success-userupdated |
| microsoft-app-activity-4 |
microsoft-o365-sk4-app-activity-success-groupmanagement |
| microsoft-app-activity-5 |
microsoft-o365-sk4-app-activity-success-office365-1 |
| microsoft-app-activity-6 |
microsoft-o365-sk4-app-activity-success-authzgrouprenamed-1 |
| microsoft-app-activity-7 |
microsoft-o365-sk4-app-activity-success-graphdirectoryauditlogs-1 |
| microsoft-app-activity-8 |
microsoft-o365-sk4-app-activity-success-groupmanagement-1 |
| microsoft-app-activity-9 |
microsoft-o365-sk4-app-activity-success-usermanagement |
| microsoft-applocker-security-alert |
"microsoft-evapplocker-xml-alert-trigger-success-policyname |
| microsoft-azure-network-connection-successful |
microsoft-azure-sk4-network-traffic-success-firewallapp |
| microsoft-cloud-app-dlp-alert |
microsoft-mcas-json-alert-trigger-success-alertcabineteventmatchfile |
| microsoft-cloud-app-security-alert |
microsoft-mcas-json-alert-trigger-success-alertanubisdetectionrepeatedactivitydelete |
| microsoft-cloud-app-security-alert-1 |
microsoft-mcas-json-alert-trigger-success-alertanubisdetectionvelocity |
| microsoft-cloud-app-security-alert-2 |
microsoft-mcas-sk4-alert-trigger-success-cabineteventmatchfile |
| microsoft-dns-renew-jp |
microsoft-windows-csv-dhcp-session-success-dhcp |
| microsoft-dns-renew-jp-1 |
microsoft-windows-kv-dhcp-session-success-dns |
| microsoft-dns-renew-jp-2 |
microsoft-windows-kv-dhcp-session-success-dns-1 |
| microsoft-dns-renew-jp-3 |
microsoft-windows-csv-network-notification-success-dnsrenew |
| microsoft-dns-renew-jp-4 |
microsoft-windows-csv-network-notification-success-dnsrenew-1 |
| microsoft-dns-renew-jp-5 |
microsoft-windows-csv-dhcp-session-success-dns |
| microsoft-dns-update-failed |
microsoft-dhcpsyslog-csv-dns-record-modify-fail-updatefail |
| microsoft-dns-update-request |
microsoft-dhcpsyslog-csv-dns-record-modify-update |
| microsoft-dns-update-successful |
microsoft-windows-str-dns-record-modify-success-update |
| microsoft-network-alert |
microsoft-azure-cef-alert-trigger-success-block |
| microsoft-network-alert-1 |
microsoft-azuremon-sk4-http-request-frontdoorwebapplicationfirewalllog |
| microsoft-npc-failed-logon-1 |
"microsoft-nps-xml-radius-traffic-fail-3 |
| microsoft-npc-nac-logon-1 |
"microsoft-nps-xml-radius-traffic-success-2 |
| microsoft-nps-6272 |
"microsoft-nps-xml-endpoint-authentication-success-6272 |
| microsoft-nps-6273 |
"microsoft-nps-xml-radius-traffic-fail-6273 |
| microsoft-nps-6274 |
"microsoft-nps-xml-radius-traffic-fail-6274 |
| microsoft-nps-6278 |
"microsoft-nps-xml-radius-traffic-success-6278 |
| microsoft-nps-nac-logon |
microsoft-nps-cef-endpoint-login-success-accessaccept |
| microsoft-o365-alert-1 |
microsoft-o365-json-alert-trigger-success-threatmgmt |
| microsoft-print-activity |
microsoft-evprintservice-kv-printer-activity-success-document |
| microsoft-print-activity-1 |
"microsoft-evprintservice-xml-printer-activity-success-printingdocument |
| microsoft-print-activity-2 |
microsoft-evprintservice-str-printer-activity-success-307 |
| microsoft-remote-desktop |
microsoft-evterminalservicesgateway-str-rdp-traffic-success-connectedtoresource |
| microsoft-rra-auth-failed |
microsoft-rras-str-app-notification-erroroccurred |
| microsoft-rra-auth-successful |
microsoft-rras-kv-authentication-success-authsuccess |
| microsoft-rra-vpn-login |
microsoft-rras-str-vpn-login-success-assignedaddress |
| microsoft-rra-vpn-logout |
microsoft-rras-kv-vpn-logout-success-coid |
| microsoft-rra-vpn-logout-1 |
microsoft-rras-kv-vpn-logout-success-disconnected |
| microsoft-scep-epp-alert |
microsoft-defenderep-kv-alert-trigger-success-syscenterendpointprotection |
| microsoft-scep-security-alert |
microsoft-defenderep-kv-alert-trigger-success-malwareinfection |
| microsoft-system-info-1 |
"microsoft-nps-xml-endpoint-authentication-ias |
| microsoft-system-info-2 |
"microsoft-nps-xml-endpoint-authentication-11 |
| microsoft-system-info-3 |
"microsoft-nps-xml-endpoint-authentication-packettype4 |
| microsoft-system-info-5 |
microsoft-evapp-kv-endpoint-notification-3005 |
| microsoft-web-activity-3 |
microsoft-azuremon-sk4-http-session-frontdooraccesslog |
| microsoft-windows-system-info |
microsoft-evsystem-xml-app-activity-success-304 |
| microsoft-windows-system-info-1 |
microsoft-evsystem-xml-app-activity-success-305 |
| microsoft-windows-system-info-2 |
microsoft-evsystem-xml-app-activity-success-307 |
| mimecast-dlp-email |
mimecast-seg-kv-email-sender |
| mobileiron-security-alert |
mobileiron-mi-cef-alert-trigger-success-mobileiron |
| mongodb-database-update |
mongodb-m-json-database-modify-success-createcollection |
| mongodb-database-update-1 |
mongodb-m-json-database-modify-success-createdb |
| moveit-account-password-change |
ipswitch-moveittransfer-kv-user-password-modify-success-pwdfailed |
| moveit-app-activity-1 |
ipswitch-moveittransfer-str-log-read-viewauditlog |
| moveit-authentication-failed |
ipswitch-moveittransfer-kv-endpoint-authentication-fail-moveit |
| moveit-authentication-failed-1 |
ipswitch-moveittransfer-str-endpoint-authentication-fail-authfailed |
| moveit-authentication-successful |
ipswitch-moveittransfer-kv-app-login-success-signedon |
| moveit-authentication-successful-1 |
ipswitch-moveittransfer-kv-endpoint-login-success-signedon |
| moveit-failed-logon |
ipswitch-moveittransfer-kv-endpoint-login-fail-signon |
| moveit-failed-logon-1 |
ipswitch-moveittransfer-kv-endpoint-login-fail-signon-1 |
| moveit-file-delete |
ipswitch-mdmz-kv-file-delete-success-moveitdelfile |
| moveit-file-delete-1 |
ipswitch-mdmz-kv-file-delete-success-moveitdmzdelfile |
| moveit-file-delete-2 |
ipswitch-mdmz-kv-file-delete-success-moveitdmzdelfolder |
| moveit-file-download |
ipswitch-mdmz-kv-file-download-success-moveitdownload |
| moveit-file-download-1 |
ipswitch-mdmz-kv-file-download-success-moveitdmzdownload |
| moveit-file-upload |
ipswitch-mdmz-kv-file-upload-success-moveitupload |
| moveit-file-upload-1 |
ipswitch-mdmz-kv-file-upload-success-moveitdmzupload |
| moveit-file-upload-2 |
ipswitch-mdmz-kv-file-upload-success-moveitdmzsend |
| moveit-file-upload-3 |
ipswitch-moveitdmz-kv-file-upload-success-move |
| moveit-file-write-1 |
ipswitch-mdmz-kv-file-write-success-moveitdmzaddfolder |
| moveit-file-write-2 |
ipswitch-moveitdmz-kv-file-write-success-rename |
| moveit-logout |
ipswitch-moveittransfer-str-app-logout-signoff |
| moveit-logout-1 |
ipswitch-moveittransfer-str-app-logout-dmzsignoff |
| moveit-member-added-1 |
ipswitch-moveittransfer-kv-group-member-add-success-adduser |
| moveit-member-added-2 |
ipswitch-moveitdmz-kv-group-member-add-success-addgroupmember |
| moveit-ssh-login-failed |
ipswitch-moveitdmz-kv-endpoint-login-fail-sshfail |
| ms-azure-eventhubs-app-activity |
microsoft-azure-json-app-activity-eventhubazurerecord |
| ms-azure-eventhubs-login |
microsoft-azure-json-app-login-azurerecord |
| ms-azure-signin-app-login |
microsoft-azure-json-app-login-userdisplayname |
| ms-dhcp |
msdhcp-m-str-dhcp-session-success-dnsupdate |
| msnetwork-nac-logon |
microsoft-nps-csv-endpoint-authentication-success-wirelessconnection |
| msnetwork-nac-logon-2 |
microsoft-nps-csv-endpoint-login-success-13 |
| msnetwork-nac-logon-3 |
microsoft-nps-csv-endpoint-login-success-ias |
| msnetwork-nac-logon-4 |
microsoft-nps-csv-endpoint-login-success-ras |
| msnetwork-nac-logon-5 |
microsoft-nps-csv-endpoint-login-success-ias-1 |
| mssql-app-activity |
microsoft-mssql-kv-app-activity-mssqlserver |
| mssql-database-login |
microsoft-mssql-kv-database-login-success-14 |
| mssql-database-login-1 |
microsoft-mssql-kv-database-login-fail-permission |
| mssql-database-query-2 |
microsoft-mssql-json-database-query-success-sqlserver |
| mssql-database-query-3 |
microsoft-mssql-json-database-query-success-databasequery |
| mssql-member-added |
microsoft-mssql-str-group-member-add-aprl |
| mssql-member-removed |
microsoft-mssql-str-group-member-remove-dprl |
| mulesoft-web-activity |
mulesoft-m-kv-http-request-entrytime |
| mwg-proxy-1 |
mcafee-wg-json-http-session-sha256 |
| mwg-proxy-2 |
mcafee-wg-json-http-session-mwg |
| mwg-proxy-3 |
mcafee-wg-csv-http-session-3 |
| mysql-db-activity-json |
mysql-m-json-database-query-success-activity |