| Event ID | Label |
|---|---|
| d3f:Access | Access |
| d3f:AccessControlAdministrationEvent | Access Control Administration Event |
| d3f:AccessControlEvent | Access Control Event |
| d3f:AccessDeniedEvent | Access Denied Event |
| d3f:AccessGrantedEvent | Access Granted Event |
| d3f:AccessMediationEvent | Access Mediation Event |
| d3f:Action | Action |
| d3f:AddUserToGroupEvent | Add User to Group Event |
| d3f:ApplicationConfigurationModificationEvent | Application Configuration Modification Event |
| d3f:ApplicationDeletionEvent | Application Deletion Event |
| d3f:ApplicationDisableEvent | Application Disable Event |
| d3f:ApplicationEnableEvent | Application Enable Event |
| d3f:ApplicationEvent | Application Event |
| d3f:ApplicationInstallationEvent | Application Installation Event |
| d3f:ApplicationLayerEvent | Application Layer Event |
| d3f:ApplicationRestartEvent | Application Restart Event |
| d3f:ApplicationStartEvent | Application Start Event |
| d3f:ApplicationStopEvent | Application Stop Event |
| d3f:ApplicationUpdateEvent | Application Update Event |
| d3f:AssignPrivilegesToGroupEvent | Assign Privileges to Group Event |
| d3f:Authentication | Authentication |
| d3f:AuthenticationEvent | Authentication Event |
| d3f:Authorization | Authorization |
| d3f:AuthorizationEvent | Authorization Event |
| d3f:ClockEvent | Clock Event |
| d3f:ClockSynchronizationEvent | Clock Synchronization Event |
| d3f:CloudConfigurationModificationEvent | Cloud Configuration Modification Event |
| d3f:CloudServiceAuthentication | Cloud Service Authentication |
| d3f:CloudServiceAuthorization | Cloud Service Authorization |
| d3f:ComputeDeviceEvent | Compute Device Event |
| d3f:ConfigurationEvent | Configuration Event |
| d3f:ConfigurationModificationEvent | Configuration Modification Event |
| d3f:CyberAction | Cyber Action |
| d3f:DHCPAckEvent | DHCP Ack Event |
| d3f:DHCPDiscoverEvent | DHCP Discover Event |
| d3f:DHCPEvent | DHCP Event |
| d3f:DHCPInformEvent | DHCP Inform Event |
| d3f:DHCPLeaseExpireEvent | DHCP Lease Expire Event |
| d3f:DHCPNakEvent | DHCP Nak Event |
| d3f:DHCPOfferEvent | DHCP Offer Event |
| d3f:DHCPReleaseEvent | DHCP Release Event |
| d3f:DHCPRequestEvent | DHCP Request Event |
| d3f:DNSEvent | DNS Event |
| d3f:DNSQueryEvent | DNS Query Event |
| d3f:DNSResponseEvent | DNS Response Event |
| d3f:DefensiveAction | Defensive Action |
| d3f:DetectionEvent | Detection Event |
| d3f:DigitalEvent | Digital Event |
| d3f:ElectronicCombinationLockEvent | Electronic Combination Lock Event |
| d3f:EmailEvent | Email Event |
| d3f:EmailReceiveEvent | Email Receive Event |
| d3f:EmailScanEvent | Email Scan Event |
| d3f:EmailSendEvent | Email Send Event |
| d3f:Event | Event |
| d3f:EventLogArchiveEvent | Event Log Archive Event |
| d3f:EventLogClearEvent | Event Log Clear Event |
| d3f:EventLogDeleteEvent | Event Log Delete Event |
| d3f:EventLogDisableEvent | Event Log Disable Event |
| d3f:EventLogEnableEvent | Event Log Enable Event |
| d3f:EventLogEvent | Event Log Event |
| d3f:EventLogExportEvent | Event Log Export Event |
| d3f:EventLogRestartEvent | Event Log Restart Event |
| d3f:EventLogRotateEvent | Event Log Rotate Event |
| d3f:EventLogStartEvent | Event Log Start Event |
| d3f:EventLogStopEvent | Event Log Stop Event |
| d3f:EvictionEvent | Eviction Event |
| d3f:FTPDeleteEvent | FTP Delete Event |
| d3f:FTPEvent | FTP Event |
| d3f:FTPGetEvent | FTP Get Event |
| d3f:FTPListEvent | FTP List Event |
| d3f:FTPPollEvent | FTP Poll Event |
| d3f:FTPPutEvent | FTP Put Event |
| d3f:FTPRenameEvent | FTP Rename Event |
| d3f:FileAccessEvent | File Access Event |
| d3f:FileCopyEvent | File Copy Event |
| d3f:FileCreationEvent | File Creation Event |
| d3f:FileDecryptionEvent | File Decryption Event |
| d3f:FileDeletionEvent | File Deletion Event |
| d3f:FileEncryptionEvent | File Encryption Event |
| d3f:FileEvent | File Event |
| d3f:FileGetAttributesEvent | File Get Attributes Event |
| d3f:FileGetPermissionsEvent | File Get Permissions Event |
| d3f:FileMountEvent | File Mount Event |
| d3f:FileRenamingEvent | File Renaming Event |
| d3f:FileSetAttributesEvent | File Set Attributes Event |
| d3f:FileSetPermissionsEvent | File Set Permissions Event |
| d3f:FileUnmountEvent | File Unmount Event |
| d3f:FileUpdateEvent | File Update Event |
| d3f:GroupCreationEvent | Group Creation Event |
| d3f:GroupDeletionEvent | Group Deletion Event |
| d3f:GroupManagementEvent | Group Management Event |
| d3f:HTTPConnectEvent | HTTP CONNECT Event |
| d3f:HTTPDeleteEvent | HTTP DELETE Event |
| d3f:HTTPEvent | HTTP Event |
| d3f:HTTPGetEvent | HTTP GET Event |
| d3f:HTTPHeadEvent | HTTP HEAD Event |
| d3f:HTTPOptionsEvent | HTTP OPTIONS Event |
| d3f:HTTPPostEvent | HTTP POST Event |
| d3f:HTTPPutEvent | HTTP PUT Event |
| d3f:HTTPRequestEvent | HTTP Request Event |
| d3f:HTTPResponseEvent | HTTP Response Event |
| d3f:HTTPTraceEvent | HTTP TRACE Event |
| d3f:HardeningEvent | Hardening Event |
| d3f:HardwareClockEvent | Hardware Clock Event |
| d3f:HardwareDeviceBindEvent | Hardware Device Bind Event |
| d3f:HardwareDeviceConnectionEvent | Hardware Device Connection Event |
| d3f:HardwareDeviceDisabledEvent | Hardware Device Disabled Event |
| d3f:HardwareDeviceDisconnectionEvent | Hardware Device Disconnection Event |
| d3f:HardwareDeviceEnabledEvent | Hardware Device Enabled Event |
| d3f:HardwareDeviceEvent | Hardware Device Event |
| d3f:HardwareDeviceMoveEvent | Hardware Device Move Event |
| d3f:HardwareDeviceStateEvent | Hardware Device State Event |
| d3f:HardwareDeviceUnbindEvent | Hardware Device Unbind Event |
| d3f:HardwareDeviceUpdateEvent | Hardware Device Update Event |
| d3f:HardwareTimerConfigurationEvent | Hardware Timer Configuration Event |
| d3f:HardwareTimerEvent | Hardware Timer Event |
| d3f:HardwareTimerInterruptEvent | Hardware Timer Interrupt Event |
| d3f:InputDeviceEvent | Input Device Event |
| d3f:IsolationEvent | Isolation Event |
| d3f:KernelEvent | Kernel Event |
| d3f:KernelModuleEvent | Kernel Module Event |
| d3f:KernelModuleLoadEvent | Kernel Module Load Event |
| d3f:KernelModuleUnloadEvent | Kernel Module Unload Event |
| d3f:LoadLibraryEvent | Load Library Event |
| d3f:LogoffEvent | Logoff Event |
| d3f:LogonEvent | Logon Event |
| d3f:MemoryAllocationEvent | Memory Allocation Event |
| d3f:MemoryDeletionEvent | Memory Deletion Event |
| d3f:MemoryDeviceEvent | Memory Device Event |
| d3f:MemoryEvent | Memory Event |
| d3f:MemoryMapEvent | Memory Map Event |
| d3f:MemoryModificationEvent | Memory Modification Event |
| d3f:MemoryReadEvent | Memory Read Event |
| d3f:MemoryWriteEvent | Memory Write Event |
| d3f:MotionDetectedEvent | Motion Detected Event |
| d3f:NTPBroadcastEvent | NTP Broadcast Event |
| d3f:NTPClientSyncEvent | NTP Client Synchronization Event |
| d3f:NTPControlMessageEvent | NTP Control Message Event |
| d3f:NTPEvent | NTP Event |
| d3f:NTPServerResponseEvent | NTP Server Response Event |
| d3f:NTPSymmetricActiveExchangeEvent | NTP Symmetric Active Exchange Event |
| d3f:NTPSymmetricPassiveExchangeEvent | NTP Symmetric Passive Exchange Event |
| d3f:NetworkConnectionCloseEvent | Network Connection Close Event |
| d3f:NetworkConnectionEvent | Network Connection Event |
| d3f:NetworkConnectionFailEvent | Network Connection Fail Event |
| d3f:NetworkConnectionListenEvent | Network Connection Listen Event |
| d3f:NetworkConnectionOpenEvent | Network Connection Open Event |
| d3f:NetworkConnectionRefuseEvent | Network Connection Refuse Event |
| d3f:NetworkConnectionResetEvent | Network Connection Reset Event |
| d3f:NetworkDeviceEvent | Network Device Event |
| d3f:NetworkEvent | Network Event |
| d3f:OTAbortCommandEvent | OT Abort Command Event |
| d3f:OTAlarmMessageEvent | OT Alarm Message Event |
| d3f:OTChangeControlProgramCommandEvent | OT Change Control Program Command Event |
| d3f:OTChangeDataCommandEvent | OT Change Data Command Event |
| d3f:OTConnectionCommandEvent | OT Connection Command Event |
| d3f:OTControlCommandEvent | OT Control Command Event |
| d3f:OTCreateDataCommandEvent | OT Create Data Command Event |
| d3f:OTCreateNewControlProgramCommandEvent | OT Create New Control Program Command Event |
| d3f:OTDebugCommandEvent | OT Debug Command Event |
| d3f:OTDeleteControlProgramCommandEvent | OT Delete Control Program Command Event |
| d3f:OTDeleteDataCommandEvent | OT Delete Data Command Event |
| d3f:OTDeviceConfigurationCommandEvent | OT Device Configuration Command Event |
| d3f:OTDeviceDescriptionMessageEvent | OT Device Description Message Event |
| d3f:OTDeviceFirmwareCommandEvent | OT Device Firmware Command Event |
| d3f:OTDeviceIdentificationMessageEvent | OT Device Identification Message Event |
| d3f:OTDeviceManagementMessageEvent | OT Device Management Message Event |
| d3f:OTDiagnosticsMessageEvent | OT Diagnostics Message Event |
| d3f:OTDisconnectRemoteConnectionCommandEvent | OT Disconnect Remote Connection Command Event |
| d3f:OTDownloadControlProgramCommandEvent | OT Download Control Program Command Event |
| d3f:OTErrorMessageEvent | OT Error Message Event |
| d3f:OTEstablishRemoteConnectionCommandEvent | OT Establish Remote Connection Command Event |
| d3f:OTEvent | OT Event |
| d3f:OTExceptionMessageEvent | OT Exception Message Event |
| d3f:OTModifyControlProgramCommandEvent | OT Modify Control Program Command Event |
| d3f:OTModifyDeviceConfigurationCommandEvent | OT Modify Device Configuration Command Event |
| d3f:OTModifyDeviceOperatingModeCommandEvent | OT Modify Device Operating Mode Command Event |
| d3f:OTNetworkManagementCommandEvent | OT Network Management Command Event |
| d3f:OTPauseCommandEvent | OT Pause Command Event |
| d3f:OTProcessDataCommandEvent | OT Process Data Command Event |
| d3f:OTProgramModeCommandEvent | OT Program Mode Command Event |
| d3f:OTProprietaryMessageEvent | OT Proprietary Message Event |
| d3f:OTReadCommandEvent | OT Read Command Event |
| d3f:OTReadDeviceConfigurationCommandEvent | OT Read Device Configuration Command Event |
| d3f:OTReadFileCommandEvent | OT Read File Command Event |
| d3f:OTReadTimeCommandEvent | OT Read Time Command Event |
| d3f:OTReadValueCommandEvent | OT Read Value Command Event |
| d3f:OTRemoteModeCommandEvent | OT Remote Mode Command Event |
| d3f:OTRunCommandEvent | OT Run Command Event |
| d3f:OTSecurityCommandEvent | OT Security Command Event |
| d3f:OTSetTimeCommandEvent | OT Set Time Command Event |
| d3f:OTStopCommandEvent | OT Stop Command Event |
| d3f:OTSynchronizeTimeCommandEvent | OT Synchronize Time Command Event |
| d3f:OTTestCommandEvent | OT Test Command Event |
| d3f:OTTimeCommandEvent | OT Time Command Event |
| d3f:OTTransportConfigurationCommandEvent | OT Transport Configuration Command Event |
| d3f:OTWriteCommandEvent | OT Write Command Event |
| d3f:OffensiveAction | Offensive Action |
| d3f:OperatingSystemConfigurationModificationEvent | Operating System Configuration Modification Event |
| d3f:OperationalEvent | Operational Event |
| d3f:OutputDeviceEvent | Output Device Event |
| d3f:PeripheralDeviceEvent | Peripheral Device Event |
| d3f:PermissionGrantingEvent | Permission Granting Event |
| d3f:PermissionRevokingEvent | Permission Revoking Event |
| d3f:PhysicalAccessAlarmEvent | Physical Access Alarm Event |
| d3f:PhysicalLinkConnectEvent | Physical Link Connect Event |
| d3f:PhysicalLinkDisableEvent | Physical Link Disable Event |
| d3f:PhysicalLinkDisconnectEvent | Physical Link Disconnect Event |
| d3f:PhysicalLinkDownEvent | Physical Link Down Event |
| d3f:PhysicalLinkErrorDisableEvent | Physical Link Error Disable Event |
| d3f:PhysicalLinkEvent | Physical Link Event |
| d3f:PhysicalLinkUpEvent | Physical Link Up Event |
| d3f:PowerAndThermalDeviceEvent | Power and Thermal Device Event |
| d3f:PreAuthenticationEvent | Pre-Authentication Event |
| d3f:ProcessAccessEvent | Process Access Event |
| d3f:ProcessCreationEvent | Process Creation Event |
| d3f:ProcessEvent | Process Event |
| d3f:ProcessSetUserIDEvent | Process Set User ID Event |
| d3f:ProcessTerminationEvent | Process Termination Event |
| d3f:ProximitySensorEvent | Proximity Sensor Event |
| d3f:RDPConnectRequestEvent | RDP Connect Request Event |
| d3f:RDPConnectResponseEvent | RDP Connect Response Event |
| d3f:RDPEvent | RDP Event |
| d3f:RDPInitialRequestEvent | RDP Initial Request Event |
| d3f:RDPInitialResponseEvent | RDP Initial Response Event |
| d3f:RDPTLSHandshakeEvent | RDP TLS Handshake Event |
| d3f:RTCUpdateEvent | RTC Update Event |
| d3f:RemoveUserFromGroupEvent | Remove User from Group Event |
| d3f:RestorationEvent | Restoration Event |
| d3f:RevokePrivilegesFromGroupEvent | Revoke Privileges from Group Event |
| d3f:SMBEvent | SMB Event |
| d3f:SMBFileCreateEvent | SMB File Create Event |
| d3f:SMBFileOpenEvent | SMB File Open Event |
| d3f:SMBFileOpenIfEvent | SMB File Open If Event |
| d3f:SMBFileOverwriteEvent | SMB File Overwrite Event |
| d3f:SMBFileOverwriteIfEvent | SMB File Overwrite If Event |
| d3f:SMBFileSupersedeEvent | SMB File Supersede Event |
| d3f:SSHConnectionCloseEvent | SSH Connection Close Event |
| d3f:SSHConnectionFailEvent | SSH Connection Fail Event |
| d3f:SSHConnectionOpenEvent | SSH Connection Open Event |
| d3f:SSHConnectionRefuseEvent | SSH Connection Refuse Event |
| d3f:SSHConnectionResetEvent | SSH Connection Reset Event |
| d3f:SSHEvent | SSH Event |
| d3f:SSHListenEvent | SSH Listen Event |
| d3f:ScheduledJobCreationEvent | Scheduled Job Creation Event |
| d3f:ScheduledJobDeletionEvent | Scheduled Job Deletion Event |
| d3f:ScheduledJobDisableEvent | Scheduled Job Disable Event |
| d3f:ScheduledJobEnableEvent | Scheduled Job Enable Event |
| d3f:ScheduledJobEvent | Scheduled Job Event |
| d3f:ScheduledJobStartEvent | Scheduled Job Start Event |
| d3f:ScheduledJobUpdateEvent | Scheduled Job Update Event |
| d3f:SecurityEvent | Security Event |
| d3f:ServiceDeletionEvent | Service Deletion Event |
| d3f:ServiceDisableEvent | Service Disable Event |
| d3f:ServiceEnableEvent | Service Enable Event |
| d3f:ServiceEvent | Service Event |
| d3f:ServiceInstallationEvent | Service Installation Event |
| d3f:ServiceRestartEvent | Service Restart Event |
| d3f:ServiceStartEvent | Service Start Event |
| d3f:ServiceStopEvent | Service Stop Event |
| d3f:ServiceUpdateEvent | Service Update Event |
| d3f:Software-definedRadioEvent | Software-defined Radio Event |
| d3f:Software-definedRadioRFStateChangeEvent | Software-defined Radio RF State Change Event |
| d3f:Software-definedRadioWaveformConfigurationEvent | Software-defined Radio Waveform Application Configuration Event |
| d3f:Software-definedRadioWaveformLoadEvent | Software-defined Radio Waveform Application Load Event |
| d3f:SoftwareClockEvent | Software Clock Event |
| d3f:SoftwareTimerEvent | Software Timer Event |
| d3f:StorageDeviceEvent | Storage Device Event |
| d3f:SystemCallEvent | System Call Event |
| d3f:SystemClockUpdateEvent | System Clock Update Event |
| d3f:TCPEvent | TCP Event |
| d3f:TimerEvent | Timer Event |
| d3f:TimerExpirationEvent | Timer Expiration Event |
| d3f:TimerModificationEvent | Timer Modification Event |
| d3f:TimerSetEvent | Timer Set Event |
| d3f:TransportLayerEvent | Transport Layer Event |
| d3f:TunnelCloseEvent | Tunnel Close Event |
| d3f:TunnelEvent | Tunnel Event |
| d3f:TunnelOpenEvent | Tunnel Open Event |
| d3f:TunnelRenewEvent | Tunnel Renew Event |
| d3f:UDPEvent | UDP Event |
| d3f:UnloadLibraryEvent | Unload Library Event |
| d3f:UserAccountAttachPolicyEvent | User Account Attach Policy Event |
| d3f:UserAccountCreationEvent | User Account Creation Event |
| d3f:UserAccountDeletionEvent | User Account Deletion Event |
| d3f:UserAccountDetachPolicyEvent | User Account Detach Policy Event |
| d3f:UserAccountDisableEvent | User Account Disable Event |
| d3f:UserAccountEnableEvent | User Account Enable Event |
| d3f:UserAccountEvent | User Account Event |
| d3f:UserAccountLockEvent | User Account Lock Event |
| d3f:UserAccountMFADisableEvent | User Account MFA Disable Event |
| d3f:UserAccountMFAEnableEvent | User Account MFA Enable Event |
| d3f:UserAccountPasswordChangeEvent | User Account Password Change Event |
| d3f:UserAccountPasswordResetEvent | User Account Password Reset Event |
| d3f:UserAccountUpdateEvent | User Account Update Event |
| d3f:WatchdogTimerConfigurationEvent | Watchdog Timer Configuration Event |
| d3f:WatchdogTimerEvent | Watchdog Timer Event |
| d3f:WatchdogTimerExpirationEvent | Watchdog Timer Expiration Event |
| d3f:WatchdogTimerResetEvent | Watchdog Timer Reset Event |
| d3f:WatchdogTimerServiceEvent | Watchdog Timer Service Event |
| d3f:WebAuthentication | Web Authentication |
| d3f:WindowsRegistryEvent | Windows Registry Event |
| d3f:WindowsRegistryKeyCreationEvent | Windows Registry Key Creation Event |
| d3f:WindowsRegistryKeyDeletionEvent | Windows Registry Key Deletion Event |
| d3f:WindowsRegistryKeyEvent | Windows Registry Key Event |
| d3f:WindowsRegistryKeyExportEvent | Windows Registry Key Export Event |
| d3f:WindowsRegistryKeyImportEvent | Windows Registry Key Import Event |
| d3f:WindowsRegistryKeyReadEvent | Windows Registry Key Read Event |
| d3f:WindowsRegistryKeyRenamingEvent | Windows Registry Key Renaming Event |
| d3f:WindowsRegistryKeyRestoreEvent | Windows Registry Key Restore Event |
| d3f:WindowsRegistryKeySetSecurityEvent | Windows Registry Key Set Security Event |
| d3f:WindowsRegistryKeyUpdateEvent | Windows Registry Key Update Event |
| d3f:WindowsRegistryValueDeletionEvent | Windows Registry Value Deletion Event |
| d3f:WindowsRegistryValueEvent | Windows Registry Value Event |
| d3f:WindowsRegistryValueGetEvent | Windows Registry Value Get Event |
| d3f:WindowsRegistryValueSetEvent | Windows Registry Value Set Event |
| d3f:WindowsRegistryValueUpdateEvent | Windows Registry Value Update Event |
total count: 317