Skip to main content

Security ContentThreat Detection, Investigation, and Response for Public Cloud Guide

View Cloud Content Activity

Cloud content is designed to work equally well in Exabeam products that use either the latest common information model or the legacy data structure. However, there are some differences in the way that cloud content is categorized in the two data structures. Understanding the categorization methods in the relevant data structure for your Exabeam product is essential for effective searching, reporting, and event building related to cloud content activity.

  • Legacy data structure – For Advanced Analytics i62.4 and later, cloud-related event types are categorized under a single Cloud activity type. These event types include cloud-admin-activity, storage-activity, and storage-access. You can also identify cloud content by the relevant vendors.

  • Common information model structure – For Advanced Analytics i63 and later, this data structure is based on context elements and it includes a Landscape element. All cloud-related content is categorized under landscape = cloud. You can also identify cloud content by the relevant vendors or platforms.