Enum representing the type of timestamp that the eventTimestamp field represents.
| Enums | |
|---|---|
EVENT_TIMESTAMP_ATTRIBUTE_UNSPECIFIED
|
Default event timestamp attribute. |
FILE_LAST_ACCESS_TIME
|
Deprecated. Use LAST_ACCESSED instead. |
FILE_LAST_MODIFIED_TIME
|
Deprecated. Use LAST_MODIFIED instead. |
FILE_METADATA_LAST_CHANGE_TIME
|
Deprecated. Use METADATA_LAST_CHANGED instead. |
FILE_CREATION_TIME
|
Deprecated. Use CREATED instead. |
COLLECTED_TIME
|
Deprecated. Use COLLECTED instead. |
COLLECTED
|
The time when the event was collected by the vendor's local collection infrastructure. |
ACCESSED
|
The time when the file was accessed. |
CHANGED
|
The time when the file was changed. |
CREATED
|
The time when the file was first created. |
FILE_NAME_ACCESSED
|
The time when the file name was accessed. |
FILE_NAME_CHANGED
|
The time when the file name was changed. |
FILE_NAME_CREATED
|
The time when the file name was created. |
FILE_NAME_LAST_ACCESSED
|
The time when the file name was last accessed. |
FILE_NAME_LAST_MODIFIED
|
The time when the file name was last modified. |
FILE_NAME_METADATA_LAST_CHANGED
|
The time when the file name metadata was last changed. |
FILE_NAME_MODIFIED
|
The time when the file name was modified. |
LAST_ACCESSED
|
The time when the file was last accessed. |
LAST_MODIFIED
|
The time when the file was last modified. |
METADATA_LAST_CHANGED
|
The time when the file metadata was last changed. |
MODIFIED
|
The time when the file was modified. |
ADDED
|
Added Timestamp. |
BACKED_UP
|
Backed Up Timestamp. |
LAST_CONNECTED
|
Last Connected timestamp. |
DELETED
|
Deleted Timestamp. |
ENDED
|
Ended Timestamp. |
EXITED
|
Exited Timestamp. |
EXPIRED
|
Expired Timestamp. |
FIRST_ACCESSED
|
First Accessed Timestamp. |
APPEARED
|
Appeared Timestamp. |
INSTALLED
|
Installed Timestamp. |
LAST_ACTIVE
|
Last Active Timestamp. |
LAST_LOGGED_IN
|
Last Login Timestamp. |
LAST_LOGIN_ATTEMPT
|
Last Login Attempt Timestamp. |
LAST_PASSWORD_SET
|
Last Password Set Timestamp. |
LAST_PRINTED
|
Last Printed Timestamp. |
LAST_RESUMED
|
Last Resumed Timestamp. |
LAST_EXECUTED
|
Last Executed Timestamp. |
LAST_SEEN
|
Last Seen Timestamp. |
LAST_SHUTDOWN
|
Last Shutdown Timestamp. |
LAST_UPDATED
|
Last Updated Timestamp. |
LAST_USED
|
Last Used Timestamp. |
LAST_VISITED
|
Last Visited Timestamp. |
LINKED
|
Linked Timestamp. |
METADATA_MODIFIED
|
Metadata Modified Timestamp. |
CONTENT_MODIFIED
|
Modified Timestamp. |
PURCHASED
|
Purchased Timestamp. |
RECORDED
|
Recorded Timestamp. |
REQUEST_RECEIVED
|
Request Received Timestamp. |
RESPONSE_SENT
|
Response Sent Timestamp. |
SCHEDULED_TO_END
|
Scheduled to End Timestamp. |
SCHEDULED_TO_START
|
Scheduled to Start Timestamp. |
SENT
|
Sent Timestamp. |
STARTED
|
Started Timestamp. |
UPDATED
|
Updated Timestamp. |
VALIDATED
|
Validated Timestamp. |
MOST_RECENT_RUN
|
Most Recent Run Timestamp. |
NEXT_RUN
|
Next Run Timestamp. |
VISITED
|
Visited Timestamp. |
TARGET_CREATED
|
Target Created Timestamp. |
VOLUME_CREATED
|
Volume Created Timestamp. |
POST_CHECKED
|
Post Checked Timestamp. |
SYNCHRONIZED
|
Synchronized Timestamp. |
ITEM_CREATED
|
Item Created Timestamp. |
ITEM_MODIFIED
|
Item Modified Timestamp. |
DOCUMENT_LAST_SAVED
|
Document Last Saved Timestamp. |
LAST_REGISTERED
|
Last Registered Timestamp. |
LAUNCHED
|
Launched Timestamp. |
FIRST_VISITED
|
First Visited Timestamp. |
