FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
FortiKoala
Staff
Staff
Article Id 195752
Description

What is the difference between a system event and a user event


Scope

FAQ


Solution

Currently only Windows agents differentiate between system and user events.  System events are configured as anything in these folders:

  • Program Files
  • Program Files (x86)
  • Windows
  • AppData
  • Desktop.ini



Contributors