mirror of
https://github.com/forcedotcom/afv-library.git
synced 2026-08-08 00:10:29 +08:00
105 lines
4.6 KiB
JSON
105 lines
4.6 KiB
JSON
{
|
||
"sections": [
|
||
"title",
|
||
"description",
|
||
"fields",
|
||
"special_access_rules",
|
||
"associated_objects"
|
||
],
|
||
"title": "TenantSecurityCredentialStuffing - Data API",
|
||
"description": "Stores when a user successfully logs in to Salesforce during an identified credential stuffing attack. For more information, see Threat Detection. This object is available to Security Center subscribers in API version 53.0 and later.",
|
||
"fields_columns": [
|
||
"type",
|
||
"properties",
|
||
"description"
|
||
],
|
||
"fields": {
|
||
"AcceptLanguage": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, Nillable, Sort",
|
||
"description": "List of HTTP headers that specify the natural language, such as English, that the client understands."
|
||
},
|
||
"DetailIdentifier": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, idLookup, Sort",
|
||
"description": "The ID of the individual detail record. This field is unique within your org."
|
||
},
|
||
"EventDate": {
|
||
"type": "dateTime",
|
||
"properties": "Filter, Nillable, Sort",
|
||
"description": "The date when the hijacking event was reported. For example, 2020-01-20T19:12:26.965Z. Milliseconds are the most granular setting."
|
||
},
|
||
"EventIdentifier": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, idLookup, Nillable, Sort",
|
||
"description": "The unique ID of the event."
|
||
},
|
||
"EventName": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, idLookup, Nillable, Sort",
|
||
"description": "The name of the event, which is Credential Stuffing."
|
||
},
|
||
"LoginType": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, Nillable, Sort",
|
||
"description": "The type of login used to access the session. For the list of possible values, see the LoginType field of LoginHistory in the Object Reference."
|
||
},
|
||
"LoginUrl": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, Nillable, Sort",
|
||
"description": "The URL of the login page. For example, login.salesforce.com."
|
||
},
|
||
"MetricIdentifier": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, Sort",
|
||
"description": "The ID of the type of metric that was counted."
|
||
},
|
||
"MetricsType": {
|
||
"type": "picklist",
|
||
"properties": "Filter, Group, Restricted picklist, Sort",
|
||
"description": "The type of data collected."
|
||
},
|
||
"Name": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, idLookup, Sort",
|
||
"description": "The name of the metric for the data collected."
|
||
},
|
||
"Score": {
|
||
"type": "double",
|
||
"properties": "Filter, idLookup, Nillable, Sort",
|
||
"description": "Indicates that a user successfully logged in to Salesforce during an identified credential stuffing attack. The value of this field is always 1."
|
||
},
|
||
"Summary": {
|
||
"type": "textarea",
|
||
"properties": "Nillable",
|
||
"description": "A summary of the threat that caused this event to be created."
|
||
},
|
||
"Tenant": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, idLookup, Sort",
|
||
"description": "The ID of the tenant that was targeted in the event."
|
||
},
|
||
"TenantName": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, idLookup, Nillable, Sort",
|
||
"description": "The name of the tenant that was targeted in the event."
|
||
},
|
||
"UserAgent": {
|
||
"type": "textarea",
|
||
"properties": "Nillable",
|
||
"description": "UserAgent used in the HTTP request, post-processed by the server."
|
||
},
|
||
"UserIdentifier": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, Nillable, Sort",
|
||
"description": "The origin user’s unique ID."
|
||
},
|
||
"Username": {
|
||
"type": "string",
|
||
"properties": "Filter, Group, idLookup, Nillable, Sort",
|
||
"description": "The origin username in the format of user@company.com at the time the event was created."
|
||
}
|
||
},
|
||
"special_access_rules": "This object is read-only.",
|
||
"associated_objects": "This object has these associated objects. If the API version isn’t specified, it’s available in the same API versions as this object. Otherwise, it’s available in the specified API version and later.\n\n- **TenantSecurityCredentialStuffingChangeEvent**: Change events are available for the object.\n- **TenantSecurityCredentialStuffingFeed**: Feed tracking is available for the object.\n- **TenantSecurityCredentialStuffingHistory**: History is available for tracked fields of the object.\n- **TenantSecurityCredentialStuffingOwnerSharingRule**: Sharing rules are available for the object.\n- **TenantSecurityCredentialStuffingShare**: Sharing is available for the object."
|
||
} |