For an EventMajorType of '1', the possible values of EventMinorType are:

6

Web page.

For an EventMajorType of '2', the possible values of EventMinorType are:

2

An email that the user has read (client integration).

3

An email captured manually by the user (client integration).

4

An email that was captured in transit (server integration).

16

An email that has been sent (client integration).

17

An email that has been received but was not read (i.e. blocked - client integration).

18

An email that was cancelled after being sent (not transmitted - client integration).

32

An email that contains an embedded IM conversation

48

An email that contains an embedded FAX (usually as an image file attachment)

64

An email from a Bloomberg terminal

For an EventMajorType of '3', the possible values of EventMinorType are:

1

An active application updated its monitored data.

16

The active application was de-activated.

For an EventMajorType of '4', the possible values of EventMinorType are:

1

A chapter of an IM conversation.

For an EventMajorType of '5', the possible values of EventMinorType are:

1

A file at rest on a local or network volume.

2

A file at rest in a Microsoft Exchange public folder

3

A file at rest in a Microsoft Sharepoint folder

4

Data at rest in a database

16

A file moving on the network (capture by the Network Boundary Agent or ICAP agent)

32

A file moving to a removable storage device

48

A file moving to a printer