Enum Metadata.EventType (0.3.0)

0.3.0 (latest) 0.2.0 0.1.0

public enum Metadata.EventType extends Enum<Metadata.EventType> implements ProtocolMessageEnum

An event type. Choose event type not based on the product that generated the event but the one that logged the event itself. So, for example, an antivirus (AV) scanning email on a client would generate an SMTP_PROXY event, not an AV event. A DLP device scanning a web upload would generate an HTTP_PROXY event and not a DLP or process activity event. Note: In the case of a HTTP_PROXY event, you might also include process details if this occurred on an endpoint. That would be optional, but there are a certain set of required fields and banned fields due to its status as an HTTP_PROXY event.

Protobuf enum google.backstory.Metadata.EventType

Implements

ProtocolMessageEnum

Inherited Members

Enum.<T>valueOf(Class<T>,String)

Enum.clone()

Enum.compareTo(E)

Enum.equals(Object)

Enum.finalize()

Enum.getDeclaringClass()

Enum.hashCode()

Enum.name()

Enum.ordinal()

Enum.toString()

Object.getClass()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Fields
Name	Description
ANALYST_ADD_COMMENT	Analyst addition of a comment for a finding. ANALYST_ADD_COMMENT = 24008;
ANALYST_ADD_COMMENT_VALUE	Analyst addition of a comment for a finding. ANALYST_ADD_COMMENT = 24008;
ANALYST_UPDATE_PRIORITY	Analyst update about the priority (such as low, medium, or high) for a finding. ANALYST_UPDATE_PRIORITY = 24009;
ANALYST_UPDATE_PRIORITY_VALUE	Analyst update about the priority (such as low, medium, or high) for a finding. ANALYST_UPDATE_PRIORITY = 24009;
ANALYST_UPDATE_REASON	Analyst update about the reason (such as malicious or not malicious) for a finding. ANALYST_UPDATE_REASON = 24011;
ANALYST_UPDATE_REASON_VALUE	Analyst update about the reason (such as malicious or not malicious) for a finding. ANALYST_UPDATE_REASON = 24011;
ANALYST_UPDATE_REPUTATION	Analyst update about the Reputation (such as useful or not useful) of a finding. ANALYST_UPDATE_REPUTATION = 24001;
ANALYST_UPDATE_REPUTATION_VALUE	Analyst update about the Reputation (such as useful or not useful) of a finding. ANALYST_UPDATE_REPUTATION = 24001;
ANALYST_UPDATE_RISK_SCORE	Analyst update about the risk score (0-100) of a finding. ANALYST_UPDATE_RISK_SCORE = 24012;
ANALYST_UPDATE_RISK_SCORE_VALUE	Analyst update about the risk score (0-100) of a finding. ANALYST_UPDATE_RISK_SCORE = 24012;
ANALYST_UPDATE_ROOT_CAUSE	Analyst update about the root cause for a finding. ANALYST_UPDATE_ROOT_CAUSE = 24010;
ANALYST_UPDATE_ROOT_CAUSE_VALUE	Analyst update about the root cause for a finding. ANALYST_UPDATE_ROOT_CAUSE = 24010;
ANALYST_UPDATE_SEVERITY_SCORE	Analyst update about the Severity score (0-100) of a finding. ANALYST_UPDATE_SEVERITY_SCORE = 24002;
ANALYST_UPDATE_SEVERITY_SCORE_VALUE	Analyst update about the Severity score (0-100) of a finding. ANALYST_UPDATE_SEVERITY_SCORE = 24002;
ANALYST_UPDATE_STATUS	Analyst update about the finding status. ANALYST_UPDATE_STATUS = 24007;
ANALYST_UPDATE_STATUS_VALUE	Analyst update about the finding status. ANALYST_UPDATE_STATUS = 24007;
ANALYST_UPDATE_VERDICT	Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding. ANALYST_UPDATE_VERDICT = 24000;
ANALYST_UPDATE_VERDICT_VALUE	Analyst update about the Verdict (such as true positive, false positive, or disregard) of a finding. ANALYST_UPDATE_VERDICT = 24000;
DEVICE_CONFIG_UPDATE	Configuration update. DEVICE_CONFIG_UPDATE = 25001;
DEVICE_CONFIG_UPDATE_VALUE	Configuration update. DEVICE_CONFIG_UPDATE = 25001;
DEVICE_FIRMWARE_UPDATE	Firmware update. DEVICE_FIRMWARE_UPDATE = 25000;
DEVICE_FIRMWARE_UPDATE_VALUE	Firmware update. DEVICE_FIRMWARE_UPDATE = 25000;
DEVICE_PROGRAM_DOWNLOAD	A program or application downloaded to a device. DEVICE_PROGRAM_DOWNLOAD = 25003;
DEVICE_PROGRAM_DOWNLOAD_VALUE	A program or application downloaded to a device. DEVICE_PROGRAM_DOWNLOAD = 25003;
DEVICE_PROGRAM_UPLOAD	A program or application uploaded to a device. DEVICE_PROGRAM_UPLOAD = 25002;
DEVICE_PROGRAM_UPLOAD_VALUE	A program or application uploaded to a device. DEVICE_PROGRAM_UPLOAD = 25002;
EMAIL_TRANSACTION	An email transaction. EMAIL_TRANSACTION = 19001;
EMAIL_TRANSACTION_VALUE	An email transaction. EMAIL_TRANSACTION = 19001;
EMAIL_UNCATEGORIZED	Email messages EMAIL_UNCATEGORIZED = 19000;
EMAIL_UNCATEGORIZED_VALUE	Email messages EMAIL_UNCATEGORIZED = 19000;
EMAIL_URL_CLICK	Deprecated: use NETWORK_HTTP instead. An email URL click event. EMAIL_URL_CLICK = 19002 [deprecated = true];
EMAIL_URL_CLICK_VALUE	Deprecated: use NETWORK_HTTP instead. An email URL click event. EMAIL_URL_CLICK = 19002 [deprecated = true];
ENTITY_RISK_CHANGE	An update to an entity risk score. This event type is restricted to events published by Google Securit Operations Risk Analytics. ENTITY_RISK_CHANGE = 26000;
ENTITY_RISK_CHANGE_VALUE	An update to an entity risk score. This event type is restricted to events published by Google Securit Operations Risk Analytics. ENTITY_RISK_CHANGE = 26000;
EVENTTYPE_UNSPECIFIED	Default event type EVENTTYPE_UNSPECIFIED = 0;
EVENTTYPE_UNSPECIFIED_VALUE	Default event type EVENTTYPE_UNSPECIFIED = 0;
FILE_COPY	File copied. Used for file copies, for example, to a thumb drive. FILE_COPY = 14005;
FILE_COPY_VALUE	File copied. Used for file copies, for example, to a thumb drive. FILE_COPY = 14005;
FILE_CREATION	File created. FILE_CREATION = 14001;
FILE_CREATION_VALUE	File created. FILE_CREATION = 14001;
FILE_DELETION	File deleted. FILE_DELETION = 14002;
FILE_DELETION_VALUE	File deleted. FILE_DELETION = 14002;
FILE_MODIFICATION	File modified. FILE_MODIFICATION = 14003;
FILE_MODIFICATION_VALUE	File modified. FILE_MODIFICATION = 14003;
FILE_MOVE	File moved or renamed. FILE_MOVE = 14007;
FILE_MOVE_VALUE	File moved or renamed. FILE_MOVE = 14007;
FILE_OPEN	File opened. FILE_OPEN = 14006;
FILE_OPEN_VALUE	File opened. FILE_OPEN = 14006;
FILE_READ	File read. FILE_READ = 14004;
FILE_READ_VALUE	File read. FILE_READ = 14004;
FILE_SYNC	File synced (for example, Google Drive, Dropbox, backup). FILE_SYNC = 14008;
FILE_SYNC_VALUE	File synced (for example, Google Drive, Dropbox, backup). FILE_SYNC = 14008;
FILE_UNCATEGORIZED	File event which does not match any of the other event types. FILE_UNCATEGORIZED = 14000;
FILE_UNCATEGORIZED_VALUE	File event which does not match any of the other event types. FILE_UNCATEGORIZED = 14000;
GENERIC_EVENT	Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs. GENERIC_EVENT = 100000;
GENERIC_EVENT_VALUE	Operating system events that are not described by any of the other event types. Might include uncategorized Microsoft Windows event logs. GENERIC_EVENT = 100000;
GROUP_CREATION	A group creation. GROUP_CREATION = 23001;
GROUP_CREATION_VALUE	A group creation. GROUP_CREATION = 23001;
GROUP_DELETION	A group deletion. GROUP_DELETION = 23002;
GROUP_DELETION_VALUE	A group deletion. GROUP_DELETION = 23002;
GROUP_MODIFICATION	A group modification. GROUP_MODIFICATION = 23003;
GROUP_MODIFICATION_VALUE	A group modification. GROUP_MODIFICATION = 23003;
GROUP_UNCATEGORIZED	A group activity that does not fall into one of the other event types. GROUP_UNCATEGORIZED = 23000;
GROUP_UNCATEGORIZED_VALUE	A group activity that does not fall into one of the other event types. GROUP_UNCATEGORIZED = 23000;
MUTEX_CREATION	Mutex creation. MUTEX_CREATION = 13001;
MUTEX_CREATION_VALUE	Mutex creation. MUTEX_CREATION = 13001;
MUTEX_UNCATEGORIZED	Any mutex event other than creation. MUTEX_UNCATEGORIZED = 13000;
MUTEX_UNCATEGORIZED_VALUE	Any mutex event other than creation. MUTEX_UNCATEGORIZED = 13000;
NETWORK_CONNECTION	Network connection details like from a FW. NETWORK_CONNECTION = 16002;
NETWORK_CONNECTION_VALUE	Network connection details like from a FW. NETWORK_CONNECTION = 16002;
NETWORK_DHCP	DHCP payload. NETWORK_DHCP = 16004;
NETWORK_DHCP_VALUE	DHCP payload. NETWORK_DHCP = 16004;
NETWORK_DNS	DNS payload. NETWORK_DNS = 16005;
NETWORK_DNS_VALUE	DNS payload. NETWORK_DNS = 16005;
NETWORK_FLOW	Aggregated flow stats like netflow. NETWORK_FLOW = 16001;
NETWORK_FLOW_VALUE	Aggregated flow stats like netflow. NETWORK_FLOW = 16001;
NETWORK_FTP	FTP telemetry. NETWORK_FTP = 16003;
NETWORK_FTP_VALUE	FTP telemetry. NETWORK_FTP = 16003;
NETWORK_HTTP	HTTP telemetry. NETWORK_HTTP = 16006;
NETWORK_HTTP_VALUE	HTTP telemetry. NETWORK_HTTP = 16006;
NETWORK_SMTP	SMTP telemetry. NETWORK_SMTP = 16007;
NETWORK_SMTP_VALUE	SMTP telemetry. NETWORK_SMTP = 16007;
NETWORK_UNCATEGORIZED	A network event that does not fit into one of the other event types. NETWORK_UNCATEGORIZED = 16000;
NETWORK_UNCATEGORIZED_VALUE	A network event that does not fit into one of the other event types. NETWORK_UNCATEGORIZED = 16000;
PROCESS_INJECTION	Process injecting into another process. PROCESS_INJECTION = 10002;
PROCESS_INJECTION_VALUE	Process injecting into another process. PROCESS_INJECTION = 10002;
PROCESS_LAUNCH	Process launch. PROCESS_LAUNCH = 10001;
PROCESS_LAUNCH_VALUE	Process launch. PROCESS_LAUNCH = 10001;
PROCESS_MODULE_LOAD	Process loading a module. PROCESS_MODULE_LOAD = 10006;
PROCESS_MODULE_LOAD_VALUE	Process loading a module. PROCESS_MODULE_LOAD = 10006;
PROCESS_OPEN	Process being opened. PROCESS_OPEN = 10005;
PROCESS_OPEN_VALUE	Process being opened. PROCESS_OPEN = 10005;
PROCESS_PRIVILEGE_ESCALATION	Process privilege escalation. PROCESS_PRIVILEGE_ESCALATION = 10003;
PROCESS_PRIVILEGE_ESCALATION_VALUE	Process privilege escalation. PROCESS_PRIVILEGE_ESCALATION = 10003;
PROCESS_TERMINATION	Process termination. PROCESS_TERMINATION = 10004;
PROCESS_TERMINATION_VALUE	Process termination. PROCESS_TERMINATION = 10004;
PROCESS_UNCATEGORIZED	Activity related to a process which does not match any other event types. PROCESS_UNCATEGORIZED = 10000;
PROCESS_UNCATEGORIZED_VALUE	Activity related to a process which does not match any other event types. PROCESS_UNCATEGORIZED = 10000;
REGISTRY_CREATION	Registry creation. REGISTRY_CREATION = 11001;
REGISTRY_CREATION_VALUE	Registry creation. REGISTRY_CREATION = 11001;
REGISTRY_DELETION	Registry deletion. REGISTRY_DELETION = 11003;
REGISTRY_DELETION_VALUE	Registry deletion. REGISTRY_DELETION = 11003;
REGISTRY_MODIFICATION	Registry modification. REGISTRY_MODIFICATION = 11002;
REGISTRY_MODIFICATION_VALUE	Registry modification. REGISTRY_MODIFICATION = 11002;
REGISTRY_UNCATEGORIZED	Registry event which does not match any of the other event types. REGISTRY_UNCATEGORIZED = 11000;
REGISTRY_UNCATEGORIZED_VALUE	Registry event which does not match any of the other event types. REGISTRY_UNCATEGORIZED = 11000;
RESOURCE_CREATION	The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION. RESOURCE_CREATION = 1;
RESOURCE_CREATION_VALUE	The resource was created/provisioned. This is equivalent to USER_RESOURCE_CREATION. RESOURCE_CREATION = 1;
RESOURCE_DELETION	The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION. RESOURCE_DELETION = 2;
RESOURCE_DELETION_VALUE	The resource was deleted/deprovisioned. This is equivalent to USER_RESOURCE_DELETION. RESOURCE_DELETION = 2;
RESOURCE_PERMISSIONS_CHANGE	The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS. RESOURCE_PERMISSIONS_CHANGE = 3;
RESOURCE_PERMISSIONS_CHANGE_VALUE	The resource had it's permissions or ACLs updated. This is equivalent to USER_RESOURCE_UPDATE_PERMISSIONS. RESOURCE_PERMISSIONS_CHANGE = 3;
RESOURCE_READ	The resource was read. This is equivalent to USER_RESOURCE_ACCESS. RESOURCE_READ = 4;
RESOURCE_READ_VALUE	The resource was read. This is equivalent to USER_RESOURCE_ACCESS. RESOURCE_READ = 4;
RESOURCE_WRITTEN	The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT. RESOURCE_WRITTEN = 5;
RESOURCE_WRITTEN_VALUE	The resource was written to. This is equivalent to USER_RESOURCE_UPDATE_CONTENT. RESOURCE_WRITTEN = 5;
SCAN_FILE	A file scan. SCAN_FILE = 18001;
SCAN_FILE_VALUE	A file scan. SCAN_FILE = 18001;
SCAN_HOST	Scan results from scanning an entire host device for threats/sensitive documents. SCAN_HOST = 18004;
SCAN_HOST_VALUE	Scan results from scanning an entire host device for threats/sensitive documents. SCAN_HOST = 18004;
SCAN_NETWORK	Scan network for suspicious activity SCAN_NETWORK = 18007;
SCAN_NETWORK_VALUE	Scan network for suspicious activity SCAN_NETWORK = 18007;
SCAN_PROCESS	Scan process. SCAN_PROCESS = 18003;
SCAN_PROCESS_BEHAVIORS	Scan process behaviors. Please use SCAN_PROCESS instead. SCAN_PROCESS_BEHAVIORS = 18002 [deprecated = true];
SCAN_PROCESS_BEHAVIORS_VALUE	Scan process behaviors. Please use SCAN_PROCESS instead. SCAN_PROCESS_BEHAVIORS = 18002 [deprecated = true];
SCAN_PROCESS_VALUE	Scan process. SCAN_PROCESS = 18003;
SCAN_UNCATEGORIZED	Scan item that does not fit into one of the other event types. SCAN_UNCATEGORIZED = 18000;
SCAN_UNCATEGORIZED_VALUE	Scan item that does not fit into one of the other event types. SCAN_UNCATEGORIZED = 18000;
SCAN_VULN_HOST	Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan). SCAN_VULN_HOST = 18005;
SCAN_VULN_HOST_VALUE	Vulnerability scan logs about host vulnerabilities (e.g., out of date software) and network vulnerabilities (e.g., unprotected service detected via a network scan). SCAN_VULN_HOST = 18005;
SCAN_VULN_NETWORK	Vulnerability scan logs about network vulnerabilities. SCAN_VULN_NETWORK = 18006;
SCAN_VULN_NETWORK_VALUE	Vulnerability scan logs about network vulnerabilities. SCAN_VULN_NETWORK = 18006;
SCHEDULED_TASK_CREATION	Scheduled task creation. SCHEDULED_TASK_CREATION = 20001;
SCHEDULED_TASK_CREATION_VALUE	Scheduled task creation. SCHEDULED_TASK_CREATION = 20001;
SCHEDULED_TASK_DELETION	Scheduled task deletion. SCHEDULED_TASK_DELETION = 20002;
SCHEDULED_TASK_DELETION_VALUE	Scheduled task deletion. SCHEDULED_TASK_DELETION = 20002;
SCHEDULED_TASK_DISABLE	Scheduled task being disabled. SCHEDULED_TASK_DISABLE = 20004;
SCHEDULED_TASK_DISABLE_VALUE	Scheduled task being disabled. SCHEDULED_TASK_DISABLE = 20004;
SCHEDULED_TASK_ENABLE	Scheduled task being enabled. SCHEDULED_TASK_ENABLE = 20003;
SCHEDULED_TASK_ENABLE_VALUE	Scheduled task being enabled. SCHEDULED_TASK_ENABLE = 20003;
SCHEDULED_TASK_MODIFICATION	Scheduled task being modified. SCHEDULED_TASK_MODIFICATION = 20005;
SCHEDULED_TASK_MODIFICATION_VALUE	Scheduled task being modified. SCHEDULED_TASK_MODIFICATION = 20005;
SCHEDULED_TASK_UNCATEGORIZED	Scheduled task event that does not fall into one of the other event types. SCHEDULED_TASK_UNCATEGORIZED = 20000;
SCHEDULED_TASK_UNCATEGORIZED_VALUE	Scheduled task event that does not fall into one of the other event types. SCHEDULED_TASK_UNCATEGORIZED = 20000;
SERVICE_CREATION	A service creation. SERVICE_CREATION = 22001;
SERVICE_CREATION_VALUE	A service creation. SERVICE_CREATION = 22001;
SERVICE_DELETION	A service deletion. SERVICE_DELETION = 22002;
SERVICE_DELETION_VALUE	A service deletion. SERVICE_DELETION = 22002;
SERVICE_MODIFICATION	A service modification. SERVICE_MODIFICATION = 22005;
SERVICE_MODIFICATION_VALUE	A service modification. SERVICE_MODIFICATION = 22005;
SERVICE_START	A service start. SERVICE_START = 22003;
SERVICE_START_VALUE	A service start. SERVICE_START = 22003;
SERVICE_STOP	A service stop. SERVICE_STOP = 22004;
SERVICE_STOP_VALUE	A service stop. SERVICE_STOP = 22004;
SERVICE_UNSPECIFIED	Service event that does not fit into one of the other event types. SERVICE_UNSPECIFIED = 22000;
SERVICE_UNSPECIFIED_VALUE	Service event that does not fit into one of the other event types. SERVICE_UNSPECIFIED = 22000;
SETTING_CREATION	Setting creation. SETTING_CREATION = 12001;
SETTING_CREATION_VALUE	Setting creation. SETTING_CREATION = 12001;
SETTING_DELETION	Setting deletion. SETTING_DELETION = 12003;
SETTING_DELETION_VALUE	Setting deletion. SETTING_DELETION = 12003;
SETTING_MODIFICATION	Setting modification. SETTING_MODIFICATION = 12002;
SETTING_MODIFICATION_VALUE	Setting modification. SETTING_MODIFICATION = 12002;
SETTING_UNCATEGORIZED	Settings-related event which does not match any of the other event types. SETTING_UNCATEGORIZED = 12000;
SETTING_UNCATEGORIZED_VALUE	Settings-related event which does not match any of the other event types. SETTING_UNCATEGORIZED = 12000;
STATUS_HEARTBEAT	Heartbeat indicating product is alive. STATUS_HEARTBEAT = 17001;
STATUS_HEARTBEAT_VALUE	Heartbeat indicating product is alive. STATUS_HEARTBEAT = 17001;
STATUS_SHUTDOWN	An agent shutdown. STATUS_SHUTDOWN = 17003;
STATUS_SHUTDOWN_VALUE	An agent shutdown. STATUS_SHUTDOWN = 17003;
STATUS_STARTUP	An agent startup. STATUS_STARTUP = 17002;
STATUS_STARTUP_VALUE	An agent startup. STATUS_STARTUP = 17002;
STATUS_UNCATEGORIZED	A status message that does not fit into one of the other event types. STATUS_UNCATEGORIZED = 17000;
STATUS_UNCATEGORIZED_VALUE	A status message that does not fit into one of the other event types. STATUS_UNCATEGORIZED = 17000;
STATUS_UPDATE	A software or fingerprint update. STATUS_UPDATE = 17004;
STATUS_UPDATE_VALUE	A software or fingerprint update. STATUS_UPDATE = 17004;
SYSTEM_AUDIT_LOG_UNCATEGORIZED	A system audit log event that is not a wipe. SYSTEM_AUDIT_LOG_UNCATEGORIZED = 21000;
SYSTEM_AUDIT_LOG_UNCATEGORIZED_VALUE	A system audit log event that is not a wipe. SYSTEM_AUDIT_LOG_UNCATEGORIZED = 21000;
SYSTEM_AUDIT_LOG_WIPE	A system audit log wipe. SYSTEM_AUDIT_LOG_WIPE = 21001;
SYSTEM_AUDIT_LOG_WIPE_VALUE	A system audit log wipe. SYSTEM_AUDIT_LOG_WIPE = 21001;
TRIAGE_AGENT_UPDATE_INVESTIGATION	Triage Agent has investigated the finding. TRIAGE_AGENT_UPDATE_INVESTIGATION = 27000;
TRIAGE_AGENT_UPDATE_INVESTIGATION_VALUE	Triage Agent has investigated the finding. TRIAGE_AGENT_UPDATE_INVESTIGATION = 27000;
UNRECOGNIZED
USER_BADGE_IN	User physically badging into a location. USER_BADGE_IN = 15007;
USER_BADGE_IN_VALUE	User physically badging into a location. USER_BADGE_IN = 15007;
USER_CHANGE_PASSWORD	User password change event. USER_CHANGE_PASSWORD = 15004;
USER_CHANGE_PASSWORD_VALUE	User password change event. USER_CHANGE_PASSWORD = 15004;
USER_CHANGE_PERMISSIONS	Change in user permissions. USER_CHANGE_PERMISSIONS = 15005;
USER_CHANGE_PERMISSIONS_VALUE	Change in user permissions. USER_CHANGE_PERMISSIONS = 15005;
USER_COMMUNICATION	User initiating communication through a medium (for example, video). USER_COMMUNICATION = 15012;
USER_COMMUNICATION_VALUE	User initiating communication through a medium (for example, video). USER_COMMUNICATION = 15012;
USER_CREATION	User creation. USER_CREATION = 15003;
USER_CREATION_VALUE	User creation. USER_CREATION = 15003;
USER_DELETION	User deletion. USER_DELETION = 15008;
USER_DELETION_VALUE	User deletion. USER_DELETION = 15008;
USER_LOGIN	User login. USER_LOGIN = 15001;
USER_LOGIN_VALUE	User login. USER_LOGIN = 15001;
USER_LOGOUT	User logout. USER_LOGOUT = 15002;
USER_LOGOUT_VALUE	User logout. USER_LOGOUT = 15002;
USER_RESOURCE_ACCESS	User accessing a virtual resource. This is equivalent to RESOURCE_READ. USER_RESOURCE_ACCESS = 15013;
USER_RESOURCE_ACCESS_VALUE	User accessing a virtual resource. This is equivalent to RESOURCE_READ. USER_RESOURCE_ACCESS = 15013;
USER_RESOURCE_CREATION	User creating a virtual resource. This is equivalent to RESOURCE_CREATION. USER_RESOURCE_CREATION = 15009;
USER_RESOURCE_CREATION_VALUE	User creating a virtual resource. This is equivalent to RESOURCE_CREATION. USER_RESOURCE_CREATION = 15009;
USER_RESOURCE_DELETION	User deleting a virtual resource. This is equivalent to RESOURCE_DELETION. USER_RESOURCE_DELETION = 15014;
USER_RESOURCE_DELETION_VALUE	User deleting a virtual resource. This is equivalent to RESOURCE_DELETION. USER_RESOURCE_DELETION = 15014;
USER_RESOURCE_UPDATE_CONTENT	User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN. USER_RESOURCE_UPDATE_CONTENT = 15010;
USER_RESOURCE_UPDATE_CONTENT_VALUE	User updating content of a virtual resource. This is equivalent to RESOURCE_WRITTEN. USER_RESOURCE_UPDATE_CONTENT = 15010;
USER_RESOURCE_UPDATE_PERMISSIONS	User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE. USER_RESOURCE_UPDATE_PERMISSIONS = 15011;
USER_RESOURCE_UPDATE_PERMISSIONS_VALUE	User updating permissions of a virtual resource. This is equivalent to RESOURCE_PERMISSIONS_CHANGE. USER_RESOURCE_UPDATE_PERMISSIONS = 15011;
USER_STATS	Deprecated. Used to update user info for an LDAP dump. USER_STATS = 15006 [deprecated = true];
USER_STATS_VALUE	Deprecated. Used to update user info for an LDAP dump. USER_STATS = 15006 [deprecated = true];
USER_UNCATEGORIZED	User activity which does not match any of the other event types. USER_UNCATEGORIZED = 15000;
USER_UNCATEGORIZED_VALUE	User activity which does not match any of the other event types. USER_UNCATEGORIZED = 15000;

Static Methods
Name	Description
forNumber(int value)
getDescriptor()
internalGetValueMap()
valueOf(Descriptors.EnumValueDescriptor desc)
valueOf(int value)	Deprecated. Use #forNumber(int) instead.
valueOf(String name)
values()

Methods
Name	Description
getDescriptorForType()
getNumber()
getValueDescriptor()