The File Rename action occurs when renaming an infected file on a given host.
|
Information |
Level |
|---|---|
|
Source - User Information |
Primary |
|
Source - Host Information |
Secondary |
|
Source - Object Information |
Primary |
|
Source - Process Information |
Tertiary |
|
Source - Group Information |
Tertiary |
|
Dest - User Information |
Secondary |
|
Dest - Host Information |
Primary |
|
Dest - Object Information |
Primary |
|
Dest - Process Information |
Tertiary |
|
Dest - Group Information |
Tertiary |
|
Agent - Information |
Primary |
|
Agent - Host Information |
Primary |
|
Event Source - Host Information |
Primary |
|
Event Source - Information |
Tertiary |
|
Event - Information |
Primary |
|
Result - Information |
Primary |
The important information for this action is which account renamed which file on which host. The event information was expressed on which host and recorded by which agent on which host.
The source_objectname is the original name of the object and the dest_objectname is the new name of the object.
|
Result |
event_result |
event_severity |
|---|---|---|
|
Success |
S |
3 |
|
Failure |
F |
3 |
|
Copyright © 2013 CA.
All rights reserved.
|
|