Sharing_File_Revoked_Office 365_OneDrive

Event

Sharing File Revoked

SK4 unified event:
Connector/Service

Office 365/OneDrive

SK4 Version:

2.3.85

Created Date:

Sun Dec 02 2018 08:38:59 GMT+0000 (Coordinated Universal Time)

Last Update:

Mon Jun 10 2019 15:39:59 GMT+0000 (Coordinated Universal Time)

Category

Privilege Management

Description

This event is sent when a resource’s (e.g. ACL file/folder) permissions have been removed, added or updated.

Search query

cef_vendor="skyformation" cef_name="resource-acl-updated" destinationServiceName="Office 365" sourceServiceName="SharePoint" fileType="file"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources