Previous Topic: Dual Role Link Detected ActionNext Topic: Minimal Permissions Detected Action


Excessive Permissions Detected Action

The Excessive Permissions Link Detected action contains information on the discovery of discovery of excessive direct permission links between a user and many resources.

Information

Level

Source - User Information

Tertiary

Source - Host Information

Tertiary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Primary

Dest - Host Information

Secondary

Dest - Object Information

Primary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

Result

event_result

event_severity

Success

S

3