DST Causality Actor

Description

The DST Causality actor is the process identified by the operation system on the remote host as the process that performed an action that was responsible for the entire chain of execution.

Actor Fields

This actor uses:
dst_causality_actor
. It has the following fields:
Field Name
(Datatype)
Description
dst_​causality_​actor_​primary_​user_​sid
(STRING)
None Available
dst_​causality_​actor_​primary_​username
(STRING)
None Available
dst_​causality_​actor_​process_​auth_​id
(STRING)
None Available
dst_​causality_​actor_​process_​command_​line
(STRING)
None Available
dst_​causality_​actor_​process_​device_​info
(record)
Info about the device (volume + HW) from which this process started - these fields represent HW info and will be populated only for USB devices
dst_​causality_​actor_​process_​file_​create_​time
(INTEGER)
None Available
dst_​causality_​actor_​process_​file_​mod_​time
(INTEGER)
None Available
dst_​causality_​actor_​process_​file_​size
(INTEGER)
None Available
dst_​causality_​actor_​process_​image_​extension
(STRING)
None Available
dst_​causality_​actor_​process_​image_​md5
(STRING)
None Available
dst_​causality_​actor_​process_​image_​name
(STRING)
None Available
dst_​causality_​actor_​process_​image_​path
(STRING)
None Available
dst_​causality_​actor_​process_​image_​sha256
(STRING)
None Available
dst_​causality_​actor_​process_​logon_​id
(STRING)
None Available
dst_​causality_​actor_​process_​os_​pid
(INTEGER)
None Available
dst_​causality_​actor_​process_​session_​id
(INTEGER)
None Available
dst_​causality_​actor_​process_​signature_​is_​embedded
(BOOLEAN)
None Available
dst_​causality_​actor_​process_​signature_​product
(STRING)
None Available
dst_​causality_​actor_​process_​signature_​vendor
(STRING)
None Available
dst_​causality_​actor_​remote_​host
(STRING)
None Available
dst_​causality_​actor_​remote_​ip
(STRING)
None Available
dst_​causality_​actor_​remote_​pipe_​name
(STRING)
None Available
dst_​causality_​actor_​remote_​port
(INTEGER)
None Available

Recommended For You