A service was created
| Parameter | Value |
|---|---|
| Subject | service |
| Activity | create |
| Activity Type | service-create |
| Pretty Name | Service Create |
| Success | Fail |
|---|---|
| service-created |
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
| Field | Core | Detection | Informational |
|---|---|---|---|
| service_type_text | ✓ | ||
| src_zone | |||
| local_user_name | |||
| process_path | ✓ | ||
| process_command_line | ✓ | ||
| user | ✓ | ||
| dest_zone |
A failure activity is not currently supported for this activity-type.