Raw Events - дэмжигдэх үйл явдлын төрлүүд
Доорх хүснэгтэд дэмжигдэх үйл явдлын төрлүүдийг харуулав.
| Event type | Category | Sensor type | OS type |
|---|---|---|---|
| Added | Service | Endpoint | Windows, Linux |
| Change status | Service | Endpoint | Windows |
| Create | File | Endpoint | Windows, macOS, Linux |
| Create | Process | Endpoint | Windows, macOS, Linux |
| Create | Scheduled task | Endpoint | Windows |
| Create key | Registry | Endpoint | Windows |
| Connection | Network | Endpoint | Windows, macOS, Linux |
| Delete | File | Endpoint | Windows, macOS, Linux |
| Delete | Scheduled task | Endpoint | Windows |
| Delete key | Registry | Endpoint | Windows |
| Delete value | Registry | Endpoint | Windows |
| Extended Email Security | Extended Email Security | Windows, macOS, Linux | |
| Injection | Process | Endpoint | Windows, Linux |
| Logon | User | Endpoint | Windows, macOS, Linux |
| Logon failed | User | Endpoint | Windows, Linux |
| Logout | User | Endpoint | Windows, macOS, Linux |
| Modify | File | Endpoint | Windows, macOS, Linux |
| Modify | Scheduled task | Endpoint | Windows |
| Modify | Service | Endpoint | Windows |
| Modify value | Registry | Endpoint | Windows |
| Move | File | Endpoint | Windows, macOS, Linux |
| O365 Mail | Office 365 | Office 365 | Windows, macOS, Linux |
| Read | File | Endpoint | Windows, macOS, Linux |
| Settings changed | User | Endpoint | Windows |
| Terminate | Process | Endpoint | Windows, macOS, Linux |
| Add file | BITS jobs activity | Endpoint | Windows |
| Create | BITS jobs activity | Endpoint | Windows |
| Delete | BITS jobs activity | Endpoint | Windows |
| Create local account | User | Endpoint | Windows |
| Delete local account | User | Endpoint | Windows |
| WMI execution method | WMI activity | Endpoint | Windows |
| WMI new activity | WMI activity | Endpoint | Windows |
| WMI new binding | WMI activity | Endpoint | Windows |
| Modify group policy | Other | Endpoint | Windows |
| Hardware mount | Device | Endpoint | Windows |
| Hardware unmount | Device | Endpoint | Windows |
| Initiate agent uninstall | Other | Endpoint | Windows |
| Driver module load | Other | Endpoint | Windows |
Энэ хуудсанд гарсан нэр томъёо
- Endpoint
- Хамгаалж буй компьютер, сервер, виртуал машин
- Policy
- Хамгаалалтын тохиргооны багц; төхөөрөмж эсвэл бүлэгт оноодог
- Network
- Таны байгууллагын бүх төхөөрөмжийн жагсаалт (Inventory)