| 710030 | Linux User Account Activity Remove User from Group (via Splunk): audit (USER_ACCT) | info |
| 710029 | Linux User Account Activity Add User to Group (via Splunk): audit (USER_CHAUTHTOK) | info |
| 710028 | Windows Assets Discovery Windows DHCP Expire (via Splunk) | info |
| 710027 | Linux Assets Discovery Linux DHCP Expire (via Splunk) | info |
| 710025 | Windows Assets Discovery Windows DHCP Lease (via Splunk) | info |
| 710024 | Linux Assets Discovery Linux DHCP Renew (via Splunk) | info |
| 710023 | Linux Assets Discovery Linux DHCP Lease (via Splunk) | info |
| 710021 | Linux Service Modification Service Stop (via Splunk) | info |
| 710020 | Linux Service Modification Service Start (via Splunk): audit (SERVICE_START) | info |
| 710018 | Linux Software Detection Application Removal (via Splunk): non-yum | info |
| 710017 | Linux Software Detection Application Install (via Splunk): completed install or update | info |
| 710016 | Linux User Account Activity Delete User (via Splunk): userdel, plain | info |
| 710015 | Linux User Account Activity Change Password (via Splunk): usermod, plain | info |
| 710014 | Linux User Account Activity Remove User from Group (via Splunk): audit (USER_MGMT) | info |
| 710013 | Linux User Account Activity Add User to Group (via Splunk): audit (USER_MGMT) | info |
| 710012 | Linux User Account Activity Create User (via Splunk): useradd, plain | info |
| 710010 | Windows Service Modification Service Stop (via Splunk): code 7036 | info |
| 710009 | Windows Service Modification Service Start (via Splunk): code 7036 | info |
| 710007 | Windows Software Detection Application Removal (via Splunk): code 1001 | info |
| 710006 | Windows Software Detection Application Install (via Splunk): code 1033 | info |
| 710005 | Windows User Account Activity Delete User (via Splunk) | info |
| 710004 | Windows User Account Activity Change Password (via Splunk) | info |
| 710003 | Windows User Account Activity Remove User from Group (via Splunk) | info |
| 710002 | Windows User Account Activity Add User to Group (via Splunk) | info |
| 710001 | Windows User Account Activity Create User (via Splunk) | info |
| 1204 | Policy - BattleField 1942 Gaming Client Detection | info |
| 1203 | Policy - HALO Internet Gaming Client Detection | info |
| 1201 | Policy - DirectX Gaming Server Detection | info |
| 1197 | Policy - Halo LAN Gaming Client Detection | info |
| 1194 | Policy - Civilization III Gaming Server Detection | info |
| 1193 | Policy - Unreal Tournament Gaming Client Detection | info |
| 1192 | Policy - Unreal Gaming Server Detection | info |
| 1191 | Policy - America's Army Game Client Detection | info |
| 1190 | Policy - Quake Gaming Server Detection | info |
| 1189 | Policy - Command and Conquer Gaming Server Detection | info |
| 1187 | Policy - BattleField 1942 Network Gaming Server Detection | info |
| 1186 | Policy - Time of Defiance Gaming Client Detection | info |
| 1159 | Nessus Scanner Detection | info |
| 1158 | BeyondTrust Retina Scanner Detection | info |
| 5205 | Policy - Dopewars Gaming Server Detection | info |
| 4566 | RatProxy Detection | info |
| 4558 | Kismet Server Information Disclosure | medium |
| 4525 | ipMonitor Device Version Detection | info |
| 2503 | Policy - Xlink Online Gaming Client Detection (UDP) (deprecated) | low |
| 2502 | Policy - Xlink Online Gaming Server Detection | medium |
| 2501 | Policy - Xlink Online Gaming Client Detection (TCP) | medium |
