[DRAFT] Add new authentication event types to the proto

northpolesec / santa

A binary authorization and monitoring system for macOS

https://northpole.dev

Apache License 2.0

30 stars 4 forks source link

Open mlw opened 18 hours ago

mlw commented 18 hours ago

This draft models the ES authentication events in Santa's schema with expected enrichments.