ocsf-schema icon indicating copy to clipboard operation
ocsf-schema copied to clipboard

Published 20 hours ago • verified publisher icon ocsf

Adjust Entity Management class (3004) to be aligned with Windows event 4662

Open eliraz-levi opened this issue 8 months ago • 1 comments

Adjust Entity Management class (3004) to be aligned with fields exist in Windows event 4662 - “An operation was performed on an object”. https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/auditing/event-4662

Related Issue:

https://github.com/ocsf/ocsf-schema/issues/1090

Description of changes:

We add the attributes access_list, access_mask. Screenshot 2024-06-04 at 15 50 27

Signed-off-by: Eliraz Levi [email protected]

eliraz-levi avatar Jun 16 '24 15:06 eliraz-levi