User Account Event
Access Control Administration Event
Access Control Event
Access Denied Event
Access Granted Event
Access Mediation Event
Add User to Group Event
Application Deletion Event
Application Disable Event
Application Enable Event
Application Event
Application Installation Event
Application Layer Event
Application Restart Event
Application Start Event
Application Stop Event
Application Update Event
Assign Privileges to Group Event
Authentication Event
Authorization Event
Compute Device Event
DHCP Ack Event
DHCP Discover Event
DHCP Event
DHCP Inform Event
DHCP Lease Expire Event
DHCP Nak Event
DHCP Offer Event
DHCP Release Event
DHCP Request Event
DNS Event
DNS Query Event
DNS Response Event
Detection Event
Digital Event
Email Event
Email Receive Event
Email Scan Event
Email Send Event
Event Log Archive Event
Event Log Clear Event
Event Log Delete Event
Event Log Disable Event
Event Log Enable Event
Event Log Event
Event Log Export Event
Event Log Restart Event
Event Log Rotate Event
Event Log Start Event
Event Log Stop Event
Eviction Event
FTP Delete Event
FTP Event
FTP Get Event
FTP List Event
FTP Poll Event
FTP Put Event
FTP Rename Event
File Access Event
File Copy Event
File Creation Event
File Decryption Event
File Deletion Event
File Encryption Event
File Event
File Get Attributes Event
File Get Permissions Event
File Mount Event
File Renaming Event
File Set Attributes Event
File Set Permissions Event
File Unmount Event
File Update Event
Group Creation Event
Group Deletion Event
Group Management Event
HTTP CONNECT Event
HTTP DELETE Event
HTTP Event
HTTP GET Event
HTTP HEAD Event
HTTP OPTIONS Event
HTTP POST Event
HTTP PUT Event
HTTP Request Event
HTTP Response Event
HTTP TRACE Event
Hardening Event
Hardware Device Bind Event
Hardware Device Connection Event
Hardware Device Disabled Event
Hardware Device Disconnection Event
Hardware Device Enabled Event
Hardware Device Event
Hardware Device Move Event
Hardware Device State Event
Hardware Device Unbind Event
Hardware Device Update Event
Input Device Event
Isolation Event
Kernel Event
Kernel Module Event
Kernel Module Load Event
Kernel Module Unload Event
Load Library Event
Logoff Event
Logon Event
Memory Allocation Event
Memory Deletion Event
Memory Device Event
Memory Event
Memory Map Event
Memory Modification Event
Memory Read Event
Memory Write Event
NTP Broadcast Event
NTP Client Synchronization Event
NTP Control Message Event
NTP Event
NTP Server Response Event
NTP Symmetric Active Exchange Event
NTP Symmetric Passive Exchange Event
Network Connection Close Event
Network Connection Event
Network Connection Fail Event
Network Connection Listen Event
Network Connection Open Event
Network Connection Refuse Event
Network Connection Reset Event
Network Device Event
Network Event
Output Device Event
Peripheral Device Event
Permission Granting Event
Permission Revoking Event
Power and Thermal Device Event
Pre-Authentication Event
Process Access Event
Process Creation Event
Process Event
Process Set User ID Event
Process Termination Event
RDP Connect Request Event
RDP Connect Response Event
RDP Event
RDP Initial Request Event
RDP Initial Response Event
RDP TLS Handshake Event
Remove User from Group Event
Restoration Event
Revoke Privileges from Group Event
SMB Event
SMB File Create Event
SMB File Open Event
SMB File Open If Event
SMB File Overwrite Event
SMB File Overwrite If Event
SMB File Supersede Event
SSH Connection Close Event
SSH Connection Fail Event
SSH Connection Open Event
SSH Connection Refuse Event
SSH Connection Reset Event
SSH Event
SSH Listen Event
Scheduled Job Creation Event
Scheduled Job Deletion Event
Scheduled Job Disable Event
Scheduled Job Enable Event
Scheduled Job Event
Scheduled Job Start Event
Scheduled Job Update Event
Security Event
Service Deletion Event
Service Disable Event
Service Enable Event
Service Event
Service Installation Event
Service Restart Event
Service Start Event
Service Stop Event
Service Update Event
Storage Device Event
System Call Event
TCP Event
Transport Layer Event
Tunnel Close Event
Tunnel Event
Tunnel Open Event
Tunnel Renew Event
UDP Event
Unload Library Event
User Account Attach Policy Event
User Account Creation Event
User Account Deletion Event
User Account Detach Policy Event
User Account Disable Event
User Account Enable Event
User Account Event
User Account Lock Event
User Account MFA Disable Event
User Account MFA Enable Event
User Account Password Change Event
User Account Password Reset Event
User Account Update Event
Windows Registry Event
Windows Registry Key Creation Event
Windows Registry Key Deletion Event
Windows Registry Key Event
Windows Registry Key Export Event
Windows Registry Key Import Event
Windows Registry Key Read Event
Windows Registry Key Renaming Event
Windows Registry Key Restore Event
Windows Registry Key Set Security Event
Windows Registry Key Update Event
Windows Registry Value Deletion Event
Windows Registry Value Event
Windows Registry Value Get Event
Windows Registry Value Set Event
Windows Registry Value Update Event
Properties
- name
- User Account Event
- definition
- An event capturing operations or state changes performed on user accounts, including lifecycle management, access control modifications, and policy assignments.
- see also
- https://schema.ocsf.io/1.3.0/classes/account_change
Neighbors
graph LR;
UserAccountEvent["User Account Event"] -->
| has-participant | UserAccount["User Account"];
class UserAccountEvent EventNode;
class UserAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click UserAccount href "/dao/artifact/d3f:UserAccount";UserAccountEvent["User Account Event"] -->
| has-participant | CloudUserAccount["Cloud User Account"];
class UserAccountEvent EventNode;
class CloudUserAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click CloudUserAccount href "/dao/artifact/d3f:CloudUserAccount";UserAccountEvent["User Account Event"] -->
| has-participant | DefaultUserAccount["Default User Account"];
class UserAccountEvent EventNode;
class DefaultUserAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click DefaultUserAccount href "/dao/artifact/d3f:DefaultUserAccount";UserAccountEvent["User Account Event"] -->
| has-participant | DomainUserAccount["Domain User Account"];
class UserAccountEvent EventNode;
class DomainUserAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click DomainUserAccount href "/dao/artifact/d3f:DomainUserAccount";UserAccountEvent["User Account Event"] -->
| has-participant | GlobalUserAccount["Global User Account"];
class UserAccountEvent EventNode;
class GlobalUserAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click GlobalUserAccount href "/dao/artifact/d3f:GlobalUserAccount";UserAccountEvent["User Account Event"] -->
| has-participant | LocalUserAccount["Local User Account"];
class UserAccountEvent EventNode;
class LocalUserAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click LocalUserAccount href "/dao/artifact/d3f:LocalUserAccount";UserAccountEvent["User Account Event"] -->
| has-participant | PrivilegedUserAccount["Privileged User Account"];
class UserAccountEvent EventNode;
class PrivilegedUserAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click PrivilegedUserAccount href "/dao/artifact/d3f:PrivilegedUserAccount";UserAccountEvent["User Account Event"] -->
| has-participant | ServiceAccount["Service Account"];
class UserAccountEvent EventNode;
class ServiceAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click ServiceAccount href "/dao/artifact/d3f:ServiceAccount";UserAccountEvent["User Account Event"] -->
| has-participant | KerberosTicketGrantingTicketAccount["Kerberos Ticket Granting Ticket Account"];
class UserAccountEvent EventNode;
class KerberosTicketGrantingTicketAccount ArtifactNode;
click UserAccountEvent href "/event/d3f:UserAccountEvent";
click KerberosTicketGrantingTicketAccount href "/dao/artifact/d3f:KerberosTicketGrantingTicketAccount";