Class Authentication
The Authentication extension captures details specific to authentication events. General guidelines for authentication events:
- Details about the source of the authentication event (for example, client IP or hostname), should be captured in principal. The principal may be empty if we have no details about the source of the login.
- Details about the target of the authentication event (for example, details about the machine that is being logged into or logged out of) should be captured in target.
- Some authentication events may involve a third-party. For example, a user logs into a cloud service (for example, Chronicle) via their company's SSO (the event is logged by their SSO solution). In this case, the principal captures information about the user's device, the target captures details about the cloud service they logged into, and the intermediary captures details about the SSO solution.
Implements
Namespace: Google.Backstory
Assembly: Google.Backstory.dll
Syntax
public sealed class Authentication : IMessage<Authentication>, IEquatable<Authentication>, IDeepCloneable<Authentication>, IBufferMessage, IMessage
Constructors
Authentication()
Declaration
public Authentication()
Authentication(Authentication)
Declaration
public Authentication(Authentication other)
Parameters
| Type | Name | Description |
|---|---|---|
| Authentication | other |
Properties
AuthDetails
The vendor defined details of the authentication.
Declaration
public string AuthDetails { get; set; }
Property Value
| Type | Description |
|---|---|
| string |
Mechanism
The authentication mechanism.
Declaration
public RepeatedField<Authentication.Types.Mechanism> Mechanism { get; }
Property Value
| Type | Description |
|---|---|
| RepeatedField<Authentication.Types.Mechanism> |
Outcome
The outcome of the authentication event.
Declaration
public Authentication.Types.Outcome Outcome { get; set; }
Property Value
| Type | Description |
|---|---|
| Authentication.Types.Outcome |
Type
The type of authentication.
Declaration
public Authentication.Types.AuthType Type { get; set; }
Property Value
| Type | Description |
|---|---|
| Authentication.Types.AuthType |