The attributes that identify host/device attributes.
Attributes
Section titled “Attributes”device
- Type:
device - Requirement: recommended
An addressable device, computer system or host.
actor
- Type:
actor - Requirement: optional
The actor object describes details about the user/role/process that was the source of the activity.
Available In
Section titled “Available In”account_changeadmin_group_queryapplication_lifecycleauthenticationauthorize_sessioncompliance_findingconfig_statedata_security_findingdetection_findingdevice_config_state_changedhcp_activitydns_activityemail_activityemail_file_activityemail_url_activityentity_managementevent_logfile_activityfile_queryfile_remediation_activityfolder_queryftp_activitygroup_managementhttp_activityinventory_infojob_querykernel_activitykernel_extensionkernel_object_querymemory_activitymodule_activitymodule_querynetwork_activitynetwork_connection_querynetwork_file_activitynetwork_remediation_activitynetworks_queryntp_activitypatch_stateperipheral_device_queryprocess_activityprocess_queryprocess_remediation_activityrdp_activityremediation_activityscan_activityscheduled_job_activityservice_querysession_querysmb_activitysoftware_infossh_activitytunnel_activityuser_accessuser_queryvulnerability_findingweb_resource_access_activityweb_resources_activitywin/prefetch_querywin/registry_key_activitywin/registry_key_querywin/registry_value_activitywin/registry_value_querywin/resource_activitywin/win_service_activity