XDM_CONST.OPERATION_TYPE

Cortex Data Model Schema Guide

Product
Cortex XSIAM
Last date published
2024-11-27
Category
XSIAM Data Model Schema

The operation type

Original

Mapped

Description

DIR_SET_SECURITY

XDM_CONST.OPERATION_TYPE_DIR_SET_SECURITY

The operation sets the security settings of a directory.

DIR_CHANGE_MODE

XDM_CONST.OPERATION_TYPE_DIR_CHANGE_MODE

The operation changes the mode of a directory.

DIR_CHANGE_OWNER

XDM_CONST.OPERATION_TYPE_DIR_CHANGE_OWNER

The operation changes the owner of a directory.

DIR_CREATE

XDM_CONST.OPERATION_TYPE_DIR_CREATE

The operation creates a directory.

DIR_LINK

XDM_CONST.OPERATION_TYPE_DIR_LINK

The operation creates a hard link to a directory.

DIR_OPEN

XDM_CONST.OPERATION_TYPE_DIR_OPEN

The operation opens a directory.

DIR_QUERY

XDM_CONST.OPERATION_TYPE_DIR_QUERY

The operation queries a directory.

DIR_REMOVE

XDM_CONST.OPERATION_TYPE_DIR_REMOVE

The operation removes a directory.

DIR_RENAME

XDM_CONST.OPERATION_TYPE_DIR_RENAME

The operation renames a directory.

DIR_SET_ATTRIBUTES

XDM_CONST.OPERATION_TYPE_DIR_SET_ATTRIBUTES

The operation sets the attributes of a directory.

DIR_STATS

XDM_CONST.OPERATION_TYPE_DIR_STATS

The operation retrieves statistics about a directory.

DIR_WRITE

XDM_CONST.OPERATION_TYPE_DIR_WRITE

The operation writes to a directory.

FILE_CHANGE_MODE

XDM_CONST.OPERATION_TYPE_FILE_CHANGE_MODE

The operation changes the mode of a file.

FILE_CHANGE_OWNER

XDM_CONST.OPERATION_TYPE_FILE_CHANGE_OWNER

The operation changes the owner of a file.

FILE_CREATE

XDM_CONST.OPERATION_TYPE_FILE_CREATE

The operation creates a file.

FILE_DELETE_EXT_ATTRIBUTES

XDM_CONST.OPERATION_TYPE_FILE_DELETE_EXT_ATTRIBUTES

The operation deletes the extended attributes of a file.

FILE_LINK

XDM_CONST.OPERATION_TYPE_FILE_LINK

The operation creates a hard link to a file.

FILE_OPEN

XDM_CONST.OPERATION_TYPE_FILE_OPEN

The operation opens a file.

FILE_REMOVE

XDM_CONST.OPERATION_TYPE_FILE_REMOVE

The operation removes a file.

FILE_RENAME

XDM_CONST.OPERATION_TYPE_FILE_RENAME

The operation renames a file.

FILE_REPARSE

XDM_CONST.OPERATION_TYPE_FILE_REPARSE

The operation reparses a file.

FILE_SET_ATTRIBUTES

XDM_CONST.OPERATION_TYPE_FILE_SET_ATTRIBUTES

The operation sets the attributes of a file.

FILE_SET_SECURITY

XDM_CONST.OPERATION_TYPE_FILE_SET_SECURITY

The operation sets the security settings of a file.

FILE_STATS

XDM_CONST.OPERATION_TYPE_FILE_STATS

The operation retrieves statistics about a file.

FILE_WRITE

XDM_CONST.OPERATION_TYPE_FILE_WRITE

The operation writes to a file.

IMAGE_LOAD

XDM_CONST.OPERATION_TYPE_IMAGE_LOAD

The operation loads an image file.

IMAGE_MPROTECT

XDM_CONST.OPERATION_TYPE_IMAGE_MPROTECT

The operation changes the memory protection of an image file.

IMAGE_PRE_LOAD

XDM_CONST.OPERATION_TYPE_IMAGE_PRE_LOAD

The operation pre-loads an image file.

IMAGE_SO_LOAD

XDM_CONST.OPERATION_TYPE_IMAGE_SO_LOAD

The operation loads a shared object image file.

IMAGE_UNLOAD

XDM_CONST.OPERATION_TYPE_IMAGE_UNLOAD

The operation unloads an image file.

PROCESS_CREATE

XDM_CONST.OPERATION_TYPE_PROCESS_CREATE

The operation creates a process.

PROCESS_TERMINATE

XDM_CONST.OPERATION_TYPE_PROCESS_TERMINATE

The operation terminates a process.

REGISTRY_CREATE_KEY

XDM_CONST.OPERATION_TYPE_REGISTRY_CREATE_KEY

The operation creates a registry key.

REGISTRY_DELETE_KEY

XDM_CONST.OPERATION_TYPE_REGISTRY_DELETE_KEY

The operation deletes a registry key.

REGISTRY_DELETE_VALUE

XDM_CONST.OPERATION_TYPE_REGISTRY_DELETE_VALUE

The operation deletes a registry value.

REGISTRY_LOAD

XDM_CONST.OPERATION_TYPE_REGISTRY_LOAD

The operation loads a registry hive.

REGISTRY_OPEN

XDM_CONST.OPERATION_TYPE_REGISTRY_OPEN

The operation opens a registry key.

REGISTRY_QUERY_VALUE

XDM_CONST.OPERATION_TYPE_REGISTRY_QUERY_VALUE

The operation retrieves the value of a registry key.

REGISTRY_RENAME_KEY

XDM_CONST.OPERATION_TYPE_REGISTRY_RENAME_KEY

The operation renames a registry key.

REGISTRY_RESTORE

XDM_CONST.OPERATION_TYPE_REGISTRY_RESTORE

The operation restores a registry hive.

REGISTRY_SAVE

XDM_CONST.OPERATION_TYPE_REGISTRY_SAVE

The operation saves a registry hive.

REGISTRY_SET_VALUE

XDM_CONST.OPERATION_TYPE_REGISTRY_SET_VALUE

The operation sets the value of a registry key.

REGISTRY_UNLOAD

XDM_CONST.OPERATION_TYPE_REGISTRY_UNLOAD

The operation unloads a registry hive.

AUTH_MFA

XDM_CONST.OPERATION_TYPE_AUTH_MFA

The operation authorizes an account using Multi-factor authentication (MFA).

AUTH_LOGIN

XDM_CONST.OPERATION_TYPE_AUTH_LOGIN

The operation is a login authentication.