Class UsageLogEvent
An event logged on the device.
Implements
Inherited Members
Namespace: Google.Apis.AndroidManagement.v1.Data
Assembly: Google.Apis.AndroidManagement.v1.dll
Syntax
public class UsageLogEvent : IDirectResponseSchema
Properties
AdbShellCommandEvent
A shell command was issued over ADB via “adb shell command”. Part of SECURITY_LOGS.
Declaration
[JsonProperty("adbShellCommandEvent")]
public virtual AdbShellCommandEvent AdbShellCommandEvent { get; set; }
Property Value
Type | Description |
---|---|
AdbShellCommandEvent |
AdbShellInteractiveEvent
An ADB interactive shell was opened via “adb shell”. Part of SECURITY_LOGS.
Declaration
[JsonProperty("adbShellInteractiveEvent")]
public virtual AdbShellInteractiveEvent AdbShellInteractiveEvent { get; set; }
Property Value
Type | Description |
---|---|
AdbShellInteractiveEvent |
AppProcessStartEvent
An app process was started. Part of SECURITY_LOGS.
Declaration
[JsonProperty("appProcessStartEvent")]
public virtual AppProcessStartEvent AppProcessStartEvent { get; set; }
Property Value
Type | Description |
---|---|
AppProcessStartEvent |
CertAuthorityInstalledEvent
A new root certificate was installed into the system's trusted credential storage. Part of SECURITY_LOGS.
Declaration
[JsonProperty("certAuthorityInstalledEvent")]
public virtual CertAuthorityInstalledEvent CertAuthorityInstalledEvent { get; set; }
Property Value
Type | Description |
---|---|
CertAuthorityInstalledEvent |
CertAuthorityRemovedEvent
A root certificate was removed from the system's trusted credential storage. Part of SECURITY_LOGS.
Declaration
[JsonProperty("certAuthorityRemovedEvent")]
public virtual CertAuthorityRemovedEvent CertAuthorityRemovedEvent { get; set; }
Property Value
Type | Description |
---|---|
CertAuthorityRemovedEvent |
CertValidationFailureEvent
An X.509v3 certificate failed to validate, currently this validation is performed on the Wi-FI access point and failure may be due to a mismatch upon server certificate validation. However it may in the future include other validation events of an X.509v3 certificate. Part of SECURITY_LOGS.
Declaration
[JsonProperty("certValidationFailureEvent")]
public virtual CertValidationFailureEvent CertValidationFailureEvent { get; set; }
Property Value
Type | Description |
---|---|
CertValidationFailureEvent |
ConnectEvent
A TCP connect event was initiated through the standard network stack. Part of NETWORK_ACTIVITY_LOGS.
Declaration
[JsonProperty("connectEvent")]
public virtual ConnectEvent ConnectEvent { get; set; }
Property Value
Type | Description |
---|---|
ConnectEvent |
CryptoSelfTestCompletedEvent
Validates whether Android’s built-in cryptographic library (BoringSSL) is valid. Should always succeed on device boot, if it fails, the device should be considered untrusted. Part of SECURITY_LOGS.
Declaration
[JsonProperty("cryptoSelfTestCompletedEvent")]
public virtual CryptoSelfTestCompletedEvent CryptoSelfTestCompletedEvent { get; set; }
Property Value
Type | Description |
---|---|
CryptoSelfTestCompletedEvent |
DnsEvent
A DNS lookup event was initiated through the standard network stack. Part of NETWORK_ACTIVITY_LOGS.
Declaration
[JsonProperty("dnsEvent")]
public virtual DnsEvent DnsEvent { get; set; }
Property Value
Type | Description |
---|---|
DnsEvent |
ETag
The ETag of the item.
Declaration
public virtual string ETag { get; set; }
Property Value
Type | Description |
---|---|
string |
EnrollmentCompleteEvent
Device has completed enrollment. Part of AMAPI_LOGS.
Declaration
[JsonProperty("enrollmentCompleteEvent")]
public virtual EnrollmentCompleteEvent EnrollmentCompleteEvent { get; set; }
Property Value
Type | Description |
---|---|
EnrollmentCompleteEvent |
EventId
Unique id of the event.
Declaration
[JsonProperty("eventId")]
public virtual long? EventId { get; set; }
Property Value
Type | Description |
---|---|
long? |
EventTime
object representation of EventTimeRaw.
Declaration
[JsonIgnore]
[Obsolete("This property is obsolete and may behave unexpectedly; please use EventTimeDateTimeOffset instead.")]
public virtual object EventTime { get; set; }
Property Value
Type | Description |
---|---|
object |
EventTimeDateTimeOffset
DateTimeOffset representation of EventTimeRaw.
Declaration
[JsonIgnore]
public virtual DateTimeOffset? EventTimeDateTimeOffset { get; set; }
Property Value
Type | Description |
---|---|
DateTimeOffset? |
EventTimeRaw
Device timestamp when the event was logged.
Declaration
[JsonProperty("eventTime")]
public virtual string EventTimeRaw { get; set; }
Property Value
Type | Description |
---|---|
string |
EventType
The particular usage log event type that was reported on the device. Use this to determine which event field to access.
Declaration
[JsonProperty("eventType")]
public virtual string EventType { get; set; }
Property Value
Type | Description |
---|---|
string |
FilePulledEvent
A file was downloaded from the device. Part of SECURITY_LOGS.
Declaration
[JsonProperty("filePulledEvent")]
public virtual FilePulledEvent FilePulledEvent { get; set; }
Property Value
Type | Description |
---|---|
FilePulledEvent |
FilePushedEvent
A file was uploaded onto the device. Part of SECURITY_LOGS.
Declaration
[JsonProperty("filePushedEvent")]
public virtual FilePushedEvent FilePushedEvent { get; set; }
Property Value
Type | Description |
---|---|
FilePushedEvent |
KeyDestructionEvent
A cryptographic key including user installed, admin installed and system maintained private key is removed from the device either by the user or management. Part of SECURITY_LOGS.
Declaration
[JsonProperty("keyDestructionEvent")]
public virtual KeyDestructionEvent KeyDestructionEvent { get; set; }
Property Value
Type | Description |
---|---|
KeyDestructionEvent |
KeyGeneratedEvent
A cryptographic key including user installed, admin installed and system maintained private key is installed on the device either by the user or management. Part of SECURITY_LOGS.
Declaration
[JsonProperty("keyGeneratedEvent")]
public virtual KeyGeneratedEvent KeyGeneratedEvent { get; set; }
Property Value
Type | Description |
---|---|
KeyGeneratedEvent |
KeyImportEvent
A cryptographic key including user installed, admin installed and system maintained private key is imported on the device either by the user or management. Part of SECURITY_LOGS.
Declaration
[JsonProperty("keyImportEvent")]
public virtual KeyImportEvent KeyImportEvent { get; set; }
Property Value
Type | Description |
---|---|
KeyImportEvent |
KeyIntegrityViolationEvent
A cryptographic key including user installed, admin installed and system maintained private key is determined to be corrupted due to storage corruption, hardware failure or some OS issue. Part of SECURITY_LOGS.
Declaration
[JsonProperty("keyIntegrityViolationEvent")]
public virtual KeyIntegrityViolationEvent KeyIntegrityViolationEvent { get; set; }
Property Value
Type | Description |
---|---|
KeyIntegrityViolationEvent |
KeyguardDismissAuthAttemptEvent
An attempt was made to unlock the device. Part of SECURITY_LOGS.
Declaration
[JsonProperty("keyguardDismissAuthAttemptEvent")]
public virtual KeyguardDismissAuthAttemptEvent KeyguardDismissAuthAttemptEvent { get; set; }
Property Value
Type | Description |
---|---|
KeyguardDismissAuthAttemptEvent |
KeyguardDismissedEvent
The keyguard was dismissed. Part of SECURITY_LOGS.
Declaration
[JsonProperty("keyguardDismissedEvent")]
public virtual KeyguardDismissedEvent KeyguardDismissedEvent { get; set; }
Property Value
Type | Description |
---|---|
KeyguardDismissedEvent |
KeyguardSecuredEvent
The device was locked either by user or timeout. Part of SECURITY_LOGS.
Declaration
[JsonProperty("keyguardSecuredEvent")]
public virtual KeyguardSecuredEvent KeyguardSecuredEvent { get; set; }
Property Value
Type | Description |
---|---|
KeyguardSecuredEvent |
LogBufferSizeCriticalEvent
The audit log buffer has reached 90% of its capacity, therefore older events may be dropped. Part of SECURITY_LOGS.
Declaration
[JsonProperty("logBufferSizeCriticalEvent")]
public virtual LogBufferSizeCriticalEvent LogBufferSizeCriticalEvent { get; set; }
Property Value
Type | Description |
---|---|
LogBufferSizeCriticalEvent |
LoggingStartedEvent
usageLog policy has been enabled. Part of SECURITY_LOGS.
Declaration
[JsonProperty("loggingStartedEvent")]
public virtual LoggingStartedEvent LoggingStartedEvent { get; set; }
Property Value
Type | Description |
---|---|
LoggingStartedEvent |
LoggingStoppedEvent
usageLog policy has been disabled. Part of SECURITY_LOGS.
Declaration
[JsonProperty("loggingStoppedEvent")]
public virtual LoggingStoppedEvent LoggingStoppedEvent { get; set; }
Property Value
Type | Description |
---|---|
LoggingStoppedEvent |
LostModeLocationEvent
A lost mode location update when a device in lost mode.
Declaration
[JsonProperty("lostModeLocationEvent")]
public virtual LostModeLocationEvent LostModeLocationEvent { get; set; }
Property Value
Type | Description |
---|---|
LostModeLocationEvent |
LostModeOutgoingPhoneCallEvent
An outgoing phone call has been made when a device in lost mode.
Declaration
[JsonProperty("lostModeOutgoingPhoneCallEvent")]
public virtual LostModeOutgoingPhoneCallEvent LostModeOutgoingPhoneCallEvent { get; set; }
Property Value
Type | Description |
---|---|
LostModeOutgoingPhoneCallEvent |
MediaMountEvent
Removable media was mounted. Part of SECURITY_LOGS.
Declaration
[JsonProperty("mediaMountEvent")]
public virtual MediaMountEvent MediaMountEvent { get; set; }
Property Value
Type | Description |
---|---|
MediaMountEvent |
MediaUnmountEvent
Removable media was unmounted. Part of SECURITY_LOGS.
Declaration
[JsonProperty("mediaUnmountEvent")]
public virtual MediaUnmountEvent MediaUnmountEvent { get; set; }
Property Value
Type | Description |
---|---|
MediaUnmountEvent |
OsShutdownEvent
Device was shutdown. Part of SECURITY_LOGS.
Declaration
[JsonProperty("osShutdownEvent")]
public virtual OsShutdownEvent OsShutdownEvent { get; set; }
Property Value
Type | Description |
---|---|
OsShutdownEvent |
OsStartupEvent
Device was started. Part of SECURITY_LOGS.
Declaration
[JsonProperty("osStartupEvent")]
public virtual OsStartupEvent OsStartupEvent { get; set; }
Property Value
Type | Description |
---|---|
OsStartupEvent |
RemoteLockEvent
The device or profile has been remotely locked via the LOCK command. Part of SECURITY_LOGS.
Declaration
[JsonProperty("remoteLockEvent")]
public virtual RemoteLockEvent RemoteLockEvent { get; set; }
Property Value
Type | Description |
---|---|
RemoteLockEvent |
StopLostModeUserAttemptEvent
An attempt to take a device out of lost mode.
Declaration
[JsonProperty("stopLostModeUserAttemptEvent")]
public virtual StopLostModeUserAttemptEvent StopLostModeUserAttemptEvent { get; set; }
Property Value
Type | Description |
---|---|
StopLostModeUserAttemptEvent |
WipeFailureEvent
The work profile or company-owned device failed to wipe when requested. This could be user initiated or admin initiated e.g. delete was received. Part of SECURITY_LOGS.
Declaration
[JsonProperty("wipeFailureEvent")]
public virtual WipeFailureEvent WipeFailureEvent { get; set; }
Property Value
Type | Description |
---|---|
WipeFailureEvent |