EventTimestampAttribute

Enum representing the type of timestamp that the eventTimestamp field represents.

Enums
EVENT_TIMESTAMP_ATTRIBUTE_UNSPECIFIED	Default event timestamp attribute.
FILE_LAST_ACCESS_TIME	Deprecated. Use LAST_ACCESSED instead. This item is deprecated!
FILE_LAST_MODIFIED_TIME	Deprecated. Use LAST_MODIFIED instead. This item is deprecated!
FILE_METADATA_LAST_CHANGE_TIME	Deprecated. Use METADATA_LAST_CHANGED instead. This item is deprecated!
FILE_CREATION_TIME	Deprecated. Use CREATED instead. This item is deprecated!
COLLECTED_TIME	Deprecated. Use COLLECTED instead. This item is deprecated!
COLLECTED	The time when the event was collected by the vendor's local collection infrastructure.
ACCESSED	The time when the file was accessed.
CHANGED	The time when the file was changed.
CREATED	The time when the file was first created.
FILE_NAME_ACCESSED	The time when the file name was accessed.
FILE_NAME_CHANGED	The time when the file name was changed.
FILE_NAME_CREATED	The time when the file name was created.
FILE_NAME_LAST_ACCESSED	The time when the file name was last accessed.
FILE_NAME_LAST_MODIFIED	The time when the file name was last modified.
FILE_NAME_METADATA_LAST_CHANGED	The time when the file name metadata was last changed.
FILE_NAME_MODIFIED	The time when the file name was modified.
LAST_ACCESSED	The time when the file was last accessed.
LAST_MODIFIED	The time when the file was last modified.
METADATA_LAST_CHANGED	The time when the file metadata was last changed.
MODIFIED	The time when the file was modified.
ADDED	Added Timestamp.
BACKED_UP	Backed Up Timestamp.
LAST_CONNECTED	Last Connected timestamp.
DELETED	Deleted Timestamp.
ENDED	Ended Timestamp.
EXITED	Exited Timestamp.
EXPIRED	Expired Timestamp.
FIRST_ACCESSED	First Accessed Timestamp.
APPEARED	Appeared Timestamp.
INSTALLED	Installed Timestamp.
LAST_ACTIVE	Last Active Timestamp.
LAST_LOGGED_IN	Last Login Timestamp.
LAST_LOGIN_ATTEMPT	Last Login Attempt Timestamp.
LAST_PASSWORD_SET	Last Password Set Timestamp.
LAST_PRINTED	Last Printed Timestamp.
LAST_RESUMED	Last Resumed Timestamp.
LAST_EXECUTED	Last Executed Timestamp.
LAST_SEEN	Last Seen Timestamp.
LAST_SHUTDOWN	Last Shutdown Timestamp.
LAST_UPDATED	Last Updated Timestamp.
LAST_USED	Last Used Timestamp.
LAST_VISITED	Last Visited Timestamp.
LINKED	Linked Timestamp.
METADATA_MODIFIED	Metadata Modified Timestamp.
CONTENT_MODIFIED	Modified Timestamp.
PURCHASED	Purchased Timestamp.
RECORDED	Recorded Timestamp.
REQUEST_RECEIVED	Request Received Timestamp.
RESPONSE_SENT	Response Sent Timestamp.
SCHEDULED_TO_END	Scheduled to End Timestamp.
SCHEDULED_TO_START	Scheduled to Start Timestamp.
SENT	Sent Timestamp.
STARTED	Started Timestamp.
UPDATED	Updated Timestamp.
VALIDATED	Validated Timestamp.
MOST_RECENT_RUN	Most Recent Run Timestamp.
NEXT_RUN	Next Run Timestamp.
VISITED	Visited Timestamp.
TARGET_CREATED	Target Created Timestamp.
VOLUME_CREATED	Volume Created Timestamp.
POST_CHECKED	Post Checked Timestamp.
SYNCHRONIZED	Synchronized Timestamp.
ITEM_CREATED	Item Created Timestamp.
ITEM_MODIFIED	Item Modified Timestamp.
DOCUMENT_LAST_SAVED	Document Last Saved Timestamp.
LAST_REGISTERED	Last Registered Timestamp.
LAUNCHED	Launched Timestamp.
FIRST_VISITED	First Visited Timestamp.