Data Model RelationshipsΒΆ

Source

Relationship

Target

host

blocked connection on

process

host

blocked connection to

process

host

blocked connection to

ip

host

blocked connection to

port

host

blocked connection from

process

host

blocked connection from

ip

host

blocked connection from

port

host

permitted listener on

process

host

permitted listener on

ip

host

permitted listener on

port

host

blocked listener on

process

host

blocked listener on

ip

host

blocked listener on

port

host

permitted local port bind on

process

host

permitted local port bind on

ip

host

permitted local port bind on

port

host

blocked local port bind on

process

host

blocked local port bind on

ip

host

blocked local port bind on

port

process

created

process

process

created

thread

process

accessed

process

process

requested access

process

process

connected to

port

process

connected to

ip

process

connected to

host

process

connected from

port

process

connected from

ip

process

connected from

host

process

attempted connection to

ip

process

attempted connection to

port

process

attempted connection from

ip

process

attempted connection from

port

process

listened on

port

process

attempted to listen on

port

process

bound to

port

process

attempted to bind on

port

process

loaded

dll

process

loaded

executable

process

created

file

process

deleted

file

process

accessed

file

process

requested access

file

process

modified

file

process

requested access

ad object

process

created

pipe

process

connected to

pipe

process

created

windows registry key

process

created

windows registry key value

process

deleted

windows registry key

process

deleted

windows registry key value

process

modified

windows registry key

process

modified

windows registry key value

process

accessed

windows registry key

process

requested access

windows registry key

process

executed

command

process

executed

dns query

user

created

user

user

deleted

user

user

enabled

user

user

disabled

user

user

locked

user

user

unlocked

user

user

requested modification

user

user

modified

user

user

granted access

user

user

removed access

user

user

created

schedule task

user

deleted

schedule task

user

enabled

schedule task

user

disabled

schedule task

user

modified

schedule task

user

created

wmi filter

user

created

wmi consumer

user

created

wmi subscription

user

deleted

wmi filter

user

deleted

wmi consumer

user

deleted

wmi subscription

user

created

process

user

terminated

process

user

connected to

port

user

connected to

ip

user

connected to

host

user

connected from

port

user

connected from

ip

user

connected from

host

user

created

service

user

requested access

service

user

deleted

file

user

accessed

file

user

requested access

file

user

modified

file

user

created

file share

user

deleted

file share

user

accessed

file share

user

modified

file share

user

created

ad object

user

deleted

ad object

user

undeleted

ad object

user

requested access

ad object

user

accessed

ad object

user

modified

ad object

user

deleted

windows registry key

user

modified

windows registry key

user

modified

windows registry key value

user

accessed

windows registry key

user

requested access

windows registry key

user

requested creation

logon session

user

requested logon session creation from

ip

user

requested logon session creation from

port

user

created

logon session

user

created logon session from

ip

user

created logon session from

port

user

failed creation

host

user

failed logon session creation from

ip

user

failed logon session creation from

port

user

requested termination

logon session

user

terminated

logon session

user

started

application host