ValimailEnforceEvents_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (11 columns)

Source: Connector definition

Column Name Type Description
Computer string Constant: ValimailReportingAPI
EventCategory string Event category: User, Domain or Service management, DMARC, SPF, DKIM and policy changes
EventChange string Detail of the action performed
EventSeverity string Impact of the change: high, medium,low or informational
EventType string Action perfomed on the subject
IsHighValueEvent bool True if the event can impact email deliverability
PerformedAt datetime Date and time (UTC) when the action was performed
SourceSystem string Constant: ValimailEnforce
Subject string Subject of the performed action. Currently domains and application users
TimeGenerated datetime Date and time (UTC) when the event was registered
User string email address or organization that performed the action

Solutions (1)

This table is used by the following solutions:

Connectors (1)

This table is ingested by the following connectors:

Connector Selection Criteria
Valimail Enforce Configuration Events

Content Items Using This Table (8)

Analytic Rules (4)

In solution ValimailEnforce:

Analytic Rule Selection Criteria
Valimail Enforce - DMARC Policy Weakened to None
Valimail Enforce - Email Authentication Key Deleted
Valimail Enforce - High-Value User Management Event
Valimail Enforce - Unusual Rate of Configuration Changes or User Additions

Hunting Queries (4)

In solution ValimailEnforce:

Hunting Query Selection Criteria
Valimail Enforce - Bulk Domain Changes by Single User
Valimail Enforce - Configuration Change Rate Trend
Valimail Enforce - DMARC Policy Change History
Valimail Enforce - High Value Event Summary

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index