mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
bpatel
5 lines
315 B
YAML
5 lines
315 B
YAML
description: A table of users seen making instance modifications, and the first and last time that the activity was observed
|
|
collection: previously_seen_cloud_instance_modifications_by_user
|
|
name: previously_seen_cloud_instance_modifications_by_user
|
|
fields_list: _key, firstTimeSeen, lastTimeSeen, user, enough_data
|