- Welcome to Exabeam Security Content
- What is Security Content?
- Common Information Model
- What is the Common Information Model?
- Common Information Model Context Elements
- Common Information Model Interface
- Common Information Model Event-naming Format
- Common Information Model Impact on Downstream Processes
- Using the Common Information Model to Create Custom Content
- Transitioning to the Common Information Model
- Understanding the Log
- Exabeam Parsers
- Exabeam Event Building
- Exabeam Enrichment
- Exabeam Persistence and Templates
- Exabeam Models
- Exabeam Rules
PrevNext
Identifying the Activity Type
The activity type is the operation taking place in the event. It defines the core nature of an event and it is the minimum property required to identify an event.
In the common information model event-naming format, the activity type is represented by the subject + the activity, without the outcome. For example, email-send, file-read, process-create.