Using the Common Information Model (CIM 2.0)
To assess which event statements would be most useful for your needs, you should become familiar with the Common Information Model (CIM 2.0).
If you selected Review Exabeam Default Statements during the initial configuration, this information can help you decide which default statements to enable, based on your needs.
If you selected Manually Create Event Selection Statements during the initial configuration, and are building your own event statements from the ground up, this information can help you determine which subjects and activity types you can leverage for your particular Use Case or Data Source.
For more information, see the Exabeam Security Content documentation.
You may also want to visit the public-facing source of information for the Common Information Model on GitHub. This repository is divided into pages according to the different interface layers: