Replies: 1 comment 1 reply
-
|
You mean the ACTION column of "FS_Forensic_Timeline"? I will ask Ulf if he may update this info in his wiki. Cheers! RD = Read |
Beta Was this translation helpful? Give feedback.
1 reply
-
|
Thank you |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi.
When looking at events in Elastic particularly NFTS events, what do the action properties (RD, MOD, CRE, etc) mean?
Beta Was this translation helpful? Give feedback.
All reactions