ActivityClassificationSourceType
A source that can contribute evidence to an activity's classification.
Values
| Value | Description |
|---|---|
| CROWDSTRIKE | CrowdStrike threat intelligence. |
| IOC_FILE | An indicators-of-compromise file uploaded by the user. |
| MICROSOFT_DEFENDER | Microsoft Defender threat intelligence. |
| SAILPOINT | SailPoint identity governance. |
| WORKDAY | Workday HR system. |