AD_Audit_Policy_Change_Translate
ID: 100273
Description:
Processor to translate CategoryId/SubcategoryId from EventID 4719 events
Repository: Group: AD Type: event
Default Status:
Enabled
| Tags: |
|---|
Selector:
Query:
Filters:
| Field | MUST hit |
|---|---|
| @eventType | nxlogAD |
| @fields.EventID | 4719 |
| Field | MUST NOT hit |
|---|---|
History:
| User | Date |
|---|---|
| ho*d@fluencysecurity.com | 2021 Jul 5 12:52:52 EDT |
This page was automatically created/formatted on Wed, 2022 May 4 21:43:53 EDT, from rule_dump.json (4d88bffdfb1cea26b3985f2193033606)