Event Categories

Application Activity

Name: application

• API Activity
• Application Lifecycle
• Datastore Activity
• Scan Activity
• Web Resource Access Activity
• Web Resources Activity
• Application Error
• File Hosting Activity

Discovery

Name: discovery

• Cloud Resources Inventory Info
• Device Config State Change
• Device Inventory Info
• OSINT Inventory Info
• Operating System Patch State
• Software Inventory Info
• User Inventory Info
• Admin Group Query
• Device Config State
• File Query
• Folder Query
• Job Query
• Kernel Object Query
• Module Query
• Network Connection Query
• Networks Query
• Peripheral Device Query
• Process Query
• Service Query
• User Session Query
• Startup Item Query
• User Query
• Live Evidence Info
• Prefetch Query
• Registry Key Query
• Registry Value Query

Findings

Name: findings

• Data Security Finding
• Security Finding
• Vulnerability Finding
• Detection Finding
• Application Security Posture Finding
• Compliance Finding
• IAM Analysis Finding
• Incident Finding

Identity & Access Management

Name: iam

• Account Change
• Authorize Session
• Entity Management
• User Access Management
• Authentication
• Group Management

Network Activity

Name: network

• DNS Activity
• Email File Activity
• Email URL Activity
• FTP Activity
• Network File Activity
• NTP Activity
• SMB Activity
• SSH Activity
• Tunnel Activity
• DHCP Activity
• Email Activity
• HTTP Activity
• Network Activity
• RDP Activity

Remediation

Name: remediation

• File Remediation Activity
• Network Remediation Activity
• Process Remediation Activity
• Remediation Activity

System Activity

Name: system

• Event Log Activity
• File System Activity
• Kernel Activity
• Kernel Extension Activity
• Memory Activity
• Module Activity
• Process Activity
• Scheduled Job Activity
• Script Activity
• Airborne Broadcast Activity
• Drone Flights Activity
• Registry Key Activity
• Registry Value Activity
• Windows Resource Activity
• Windows Service Activity

Unmanned Systems

Name: unmanned_systems

• Airborne Broadcast Activity
• Drone Flights Activity

This page describes qdm-1.5.1+ocsf-1.6.0