An endpoint object or instance properties\configuration were modified
| Parameter | Value |
|---|---|
| Subject | endpoint |
| Activity | modify |
| Activity Type | endpoint-modify |
| Pretty Name | Endpoint Modify |
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
| Field | Core | Detection | Informational |
|---|---|---|---|
| instance_id | ✓ | ||
| modified_keys | ✓ | ||
| added_keys | ✓ |
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| instance_id | ✓ | ||
| modified_keys | ✓ | ||
| added_keys | ✓ | ||
| failure_reason | ✓ |