Skip Navigation

Memory event fields

The following information displays in the Events List:
Memory Event
Description
Acknowledged
Acknowledging an event means it has been reviewed.
Action
This is the action taken on the event.
Device Name
This is the name of the device.
File Path
This is the path to the file that triggered the memory event.
Hash
This is the SHA256 hash information for the event.
Reported On
This is the date and time the event was first discovered in your organization.
Process ID
This is the ID of the process that caused the memory event.
Type
This is the exploit type.
Username
This is the user that was logged in to the device when the memory event occurred.