Skip to main content

Directory object

3actions
3reasons
1sources
Livestatus

A directory object that is neither an account nor a group, such as an organizational unit or a policy container.

Identified by: sparklogs.config_change.target, which carries a directory distinguished name.

ActionReported byWhat that reason says
createddirectory_object_created on Windows Security event logA directory service object was created. Typical on domain controllers when Directory Service Changes auditing is enabled for the object.
deleteddirectory_object_deleted on Windows Security event logA directory service object was deleted.
updateddirectory_object_changed on Windows Security event logA directory service object was modified or moved. Typical on domain controllers when Directory Service Changes auditing is enabled for the object.