EventTimestampAttribute

Enum representing the type of timestamp that the eventTimestamp field represents.

Enums
EVENT_TIMESTAMP_ATTRIBUTE_UNSPECIFIED Default event timestamp attribute.
FILE_LAST_ACCESS_TIME

Deprecated. Use LAST_ACCESSED instead.
FILE_LAST_MODIFIED_TIME

Deprecated. Use LAST_MODIFIED instead.
FILE_METADATA_LAST_CHANGE_TIME

Deprecated. Use METADATA_LAST_CHANGED instead.
FILE_CREATION_TIME

Deprecated. Use CREATED instead.
COLLECTED_TIME

Deprecated. Use COLLECTED instead.
COLLECTED The time when the event was collected by the vendor's local collection infrastructure.
ACCESSED The time when the file was accessed.
CHANGED The time when the file was changed.
CREATED The time when the file was first created.
FILE_NAME_ACCESSED The time when the file name was accessed.
FILE_NAME_CHANGED The time when the file name was changed.
FILE_NAME_CREATED The time when the file name was created.
FILE_NAME_LAST_ACCESSED The time when the file name was last accessed.
FILE_NAME_LAST_MODIFIED The time when the file name was last modified.
FILE_NAME_METADATA_LAST_CHANGED The time when the file name metadata was last changed.
FILE_NAME_MODIFIED The time when the file name was modified.
LAST_ACCESSED The time when the file was last accessed.
LAST_MODIFIED The time when the file was last modified.
METADATA_LAST_CHANGED The time when the file metadata was last changed.
MODIFIED The time when the file was modified.
ADDED Added Timestamp.
BACKED_UP Backed Up Timestamp.
LAST_CONNECTED Last Connected timestamp.
DELETED Deleted Timestamp.
ENDED Ended Timestamp.
EXITED Exited Timestamp.
EXPIRED Expired Timestamp.
FIRST_ACCESSED First Accessed Timestamp.
APPEARED Appeared Timestamp.
INSTALLED Installed Timestamp.
LAST_ACTIVE Last Active Timestamp.
LAST_LOGGED_IN Last Login Timestamp.
LAST_LOGIN_ATTEMPT Last Login Attempt Timestamp.
LAST_PASSWORD_SET Last Password Set Timestamp.
LAST_PRINTED Last Printed Timestamp.
LAST_RESUMED Last Resumed Timestamp.
LAST_EXECUTED Last Executed Timestamp.
LAST_SEEN Last Seen Timestamp.
LAST_SHUTDOWN Last Shutdown Timestamp.
LAST_UPDATED Last Updated Timestamp.
LAST_USED Last Used Timestamp.
LAST_VISITED Last Visited Timestamp.
LINKED Linked Timestamp.
METADATA_MODIFIED Metadata Modified Timestamp.
CONTENT_MODIFIED Modified Timestamp.
PURCHASED Purchased Timestamp.
RECORDED Recorded Timestamp.
REQUEST_RECEIVED Request Received Timestamp.
RESPONSE_SENT Response Sent Timestamp.
SCHEDULED_TO_END Scheduled to End Timestamp.
SCHEDULED_TO_START Scheduled to Start Timestamp.
SENT Sent Timestamp.
STARTED Started Timestamp.
UPDATED Updated Timestamp.
VALIDATED Validated Timestamp.
MOST_RECENT_RUN Most Recent Run Timestamp.
NEXT_RUN Next Run Timestamp.
VISITED Visited Timestamp.
TARGET_CREATED Target Created Timestamp.
VOLUME_CREATED Volume Created Timestamp.
POST_CHECKED Post Checked Timestamp.
SYNCHRONIZED Synchronized Timestamp.
ITEM_CREATED Item Created Timestamp.
ITEM_MODIFIED Item Modified Timestamp.
DOCUMENT_LAST_SAVED Document Last Saved Timestamp.
LAST_REGISTERED Last Registered Timestamp.
LAUNCHED Launched Timestamp.
FIRST_VISITED First Visited Timestamp.