CdaMonitoredFile

Represents monitored file details, if advanced monitoring is enabled. The following properties are defined for this object.

Property Type Description

User

String

The user name associated with the event

Machine

String

The computer name associated with the event

Time

DateTime

The date and time when the command was executed

FileName

String

The filename of the file being accessed

Command

String

The name of the executed command

RunAsUser

String

The run as user name

SystemCallName

String

The name of the system call

AccessType

String

The type of the file access: Write or ChangeAttribute

AccessStatus

String

The access status: Succeeded or Failed

AccessStatusDetails

String

The detailed message about the status

CurrentDirectory

String

The current directory of the command execution

ProcessId

String

The process ID of the command execution

ParentProcessId

String

The process ID of the parent process of the command execution