Microsoft ADFS Collection

Modeling Rule

Microsoft AD FS Collection

Details

IDMicrosoft_ADFS_Collection
From Version8.3.0
TagsMicrosoft Windows Active Directory Federation Services ADFS Event Colletion

Schema

microsoft_adfs_raw

Field Type Array?
_collector_type string
activity_id string
channel string
computer_name string
event_action string
event_data string
event_id string
event_result string
host_name string
log_level string
message string
opcode string
process_pid int
process_thread_id int
provider_name string
record_id int
task string
time_created datetime
user string
fromversion: 8.3.0
id: Microsoft_ADFS_Collection
name: Microsoft ADFS Collection
rules: ''
schema: ''
tags: Microsoft Windows Active Directory Federation Services ADFS Event Colletion
supportedModules:
- xsiam