Chronicle V1 API - Module Google::Backstory::Metadata::EventTimestampAttribute (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API module Google::Backstory::Metadata::EventTimestampAttribute.

Enum representing the type of timestamp that the event_timestamp field represents.

Constants

EVENT_TIMESTAMP_ATTRIBUTE_UNSPECIFIED

value: 0
Default event timestamp attribute.

FILE_LAST_ACCESS_TIME

value: 1
Deprecated. Use LAST_ACCESSED instead.

FILE_LAST_MODIFIED_TIME

value: 2
Deprecated. Use LAST_MODIFIED instead.

FILE_METADATA_LAST_CHANGE_TIME

value: 3
Deprecated. Use METADATA_LAST_CHANGED instead.

FILE_CREATION_TIME

value: 4
Deprecated. Use CREATED instead.

COLLECTED_TIME

value: 5
Deprecated. Use COLLECTED instead.

COLLECTED

value: 6
The time when the event was collected by the vendor's local collection infrastructure.

ACCESSED

value: 7
The time when the file was accessed.

CHANGED

value: 8
The time when the file was changed.

CREATED

value: 9
The time when the file was first created.

FILE_NAME_ACCESSED

value: 10
The time when the file name was accessed.

FILE_NAME_CHANGED

value: 11
The time when the file name was changed.

FILE_NAME_CREATED

value: 12
The time when the file name was created.

FILE_NAME_LAST_ACCESSED

value: 13
The time when the file name was last accessed.

FILE_NAME_LAST_MODIFIED

value: 14
The time when the file name was last modified.

FILE_NAME_METADATA_LAST_CHANGED

value: 15
The time when the file name metadata was last changed.

FILE_NAME_MODIFIED

value: 16
The time when the file name was modified.

LAST_ACCESSED

value: 17
The time when the file was last accessed.

LAST_MODIFIED

value: 18
The time when the file was last modified.

METADATA_LAST_CHANGED

value: 19
The time when the file metadata was last changed.

MODIFIED

value: 20
The time when the file was modified.

ADDED

value: 21
Added Timestamp.

BACKED_UP

value: 22
Backed Up Timestamp.

LAST_CONNECTED

value: 23
Last Connected timestamp.

DELETED

value: 24
Deleted Timestamp.

ENDED

value: 25
Ended Timestamp.

EXITED

value: 26
Exited Timestamp.

EXPIRED

value: 27
Expired Timestamp.

FIRST_ACCESSED

value: 28
First Accessed Timestamp.

APPEARED

value: 29
Appeared Timestamp.

INSTALLED

value: 30
Installed Timestamp.

LAST_ACTIVE

value: 31
Last Active Timestamp.

LAST_LOGGED_IN

value: 32
Last Login Timestamp.

LAST_LOGIN_ATTEMPT

value: 33
Last Login Attempt Timestamp.

LAST_PASSWORD_SET

value: 34
Last Password Set Timestamp.

LAST_PRINTED

value: 35
Last Printed Timestamp.

LAST_RESUMED

value: 36
Last Resumed Timestamp.

LAST_EXECUTED

value: 37
Last Executed Timestamp.

LAST_SEEN

value: 38
Last Seen Timestamp.

LAST_SHUTDOWN

value: 39
Last Shutdown Timestamp.

LAST_UPDATED

value: 40
Last Updated Timestamp.

LAST_USED

value: 41
Last Used Timestamp.

LAST_VISITED

value: 42
Last Visited Timestamp.

LINKED

value: 43
Linked Timestamp.

METADATA_MODIFIED

value: 44
Metadata Modified Timestamp.

CONTENT_MODIFIED

value: 45
Modified Timestamp.

PURCHASED

value: 46
Purchased Timestamp.

RECORDED

value: 47
Recorded Timestamp.

REQUEST_RECEIVED

value: 48
Request Received Timestamp.

RESPONSE_SENT

value: 49
Response Sent Timestamp.

SCHEDULED_TO_END

value: 50
Scheduled to End Timestamp.

SCHEDULED_TO_START

value: 51
Scheduled to Start Timestamp.

SENT

value: 52
Sent Timestamp.

STARTED

value: 53
Started Timestamp.

UPDATED

value: 54
Updated Timestamp.

VALIDATED

value: 55
Validated Timestamp.

MOST_RECENT_RUN

value: 56
Most Recent Run Timestamp.

NEXT_RUN

value: 57
Next Run Timestamp.

VISITED

value: 58
Visited Timestamp.

TARGET_CREATED

value: 59
Target Created Timestamp.

VOLUME_CREATED

value: 60
Volume Created Timestamp.

POST_CHECKED

value: 61
Post Checked Timestamp.

SYNCHRONIZED

value: 62
Synchronized Timestamp.

ITEM_CREATED

value: 63
Item Created Timestamp.

ITEM_MODIFIED

value: 64
Item Modified Timestamp.

DOCUMENT_LAST_SAVED

value: 65
Document Last Saved Timestamp.

LAST_REGISTERED

value: 66
Last Registered Timestamp.

LAUNCHED

value: 67
Launched Timestamp.

FIRST_VISITED

value: 68
First Visited Timestamp.

FIRST_SEEN

value: 69
First Seen Timestamp.

DOWNLOADED

value: 70
Downloaded Timestamp.