mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Bhavin Patel
27 lines
443 B
YAML
27 lines
443 B
YAML
name: Endpoint.Filesystem
|
|
prefix: Filesystem
|
|
fields:
|
|
- action
|
|
- dest
|
|
- dest_bunit
|
|
- dest_category
|
|
- dest_priority
|
|
- dest_requires_av
|
|
- dest_should_timesync
|
|
- dest_should_update
|
|
- file_access_time
|
|
- file_create_time
|
|
- file_hash
|
|
- file_modify_time
|
|
- file_name
|
|
- file_path
|
|
- file_acl
|
|
- file_size
|
|
- process_guid
|
|
- process_id
|
|
- tag
|
|
- user
|
|
- user_bunit
|
|
- user_category
|
|
- user_priority
|
|
- vendor_product |