Replies: 1 comment 1 reply
-
|
You mean the ACTION column of "FS_Forensic_Timeline"? I will ask Ulf if he may update this info in his wiki. Cheers! RD = Read |
Beta Was this translation helpful? Give feedback.
1 reply
-
|
Thank you |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Hi.
When looking at events in Elastic particularly NFTS events, what do the action properties (RD, MOD, CRE, etc) mean?
Beta Was this translation helpful? Give feedback.
All reactions