Overview#
EDirectory Common Event FormateDirectory moved from XDAS to using the Common Event Format (CEF) when Micro Focus acquired ArcSight
These values were obtained from empirical evidence at Large Organization. _
Although believed to be accurate LDAPWiki could not verify from Micro Focus documentation.
| CEF CODE | DSE Operation | LDAP Operation? |
| CEF0290066 | DSE_NMAS_LOG_GET_PWD_STATUS | QUERY_CREDENTIALS |
| CEF0290067 | DSE_NMAS_LOG_SET_DIST_PWD | CHANGE_PASSWORD |
| CEF0290068 | DSE_NMAS_LOG_GET_DIST_PWD | QUERY_CREDENTIALS |
| CEF029006A | DSE_NMAS_LOG_SET_PWD | CHANGE_PASSWORD |
| CEF0B0001 | DSE_CREATE_ENTRY | CREATE_OBJECT |
| CEF0B0003 | DSE_RENAME_ENTRY | RENAME_OBJECT |
| CEF0B0004 | DSE_MOVE_SOURCE_ENTRY | MOVE_OBJECT |
| CEF0B0006 | DSE_ADD_VALUE | ADD_VALUE |
| CEF0B0007 | DSE_DELETE_VALUE | DELETE_VALUE |
| CEF0B0009 | DSE_DELETE_ATTRIBUTE | DELETE_ATTRIBUTE |
| CEF0B0302 | DSE_CHGPASS | CHANGE_PASSWORD |
| CEF0B0309 | DSE_REMOVE_ENTRY | DELETE_OBJECT |
| CEF0B030E | DSE_VERIFY_PASS | VERIFY_PASSWORD |
| CEF0B0336 | DSE_ADD_VALUE | ADD_MEMBER |
| CEF0B0337 | DSE_DELETE_VALUE | DELETE_MEMBER |
| CEF0B0341 | DSE_DELETE_VALUE | CHANGE_SECURITY_EQUALS |
| CEF0B0343 | DSE_ADD_ENTRY | CREATE_OBJECT |
| CEF0B0354 | DSE_ADD_VALUE | ACL_CHANGED |
| CEF0B0355 | DSE_DELETE_VALUE | LOGIN_ENABLED |
| CEF0B0356 | DSE_ADD_VALUE | LOGIN_DISABLED |
| CEF0B0357 | DSE_ADD_VALUE | INTRUDER_DETECTED |
| CEF0B035C | DSE_NMAS_LOG_FINISH_LOGIN_STATUS | LOGIN |
| CEF0B035D | DSE_AUTHENTICATE | AUTHENTICATE |
| CEF0B035F | DSE_DELETE_VALUE | ACCOUNT_UNLOCK |
| CEF0B0401 | DSE_LDAP_BIND | LDAP_BIND |
| CEF0B0402 | DSE_LDAP_BINDRESPONSE | LDAP_BIND_RESPONSE |
| CEF0B0403 | DSE_LDAP_UNBIND | LDAP_UNBIND |
| CEF0B0408 | DSE_LDAP_ADD | LDAP_ADD |
| CEF0B0409 | DSE_LDAP_ADDRESPONSE | LDAP_ADD_RESPONSE |
| CEF0B0410 | DSE_LDAP_COMPARE | LDAP_COMPARE |
| CEF0B0411 | DSE_LDAP_COMPARERESPONSE | LDAP_COMPARE_RESPONSE |
| CEF0B0412 | DSE_LDAP_MODIFY | LDAP_MODIFY |
| CEF0B0413 | DSE_LDAP_MODIFYRESPONSE | LDAP_MODIFY_RESPONSE |
| CEF0B0414 | DSE_LDAP_DELETE | LDAP_DELETE |
| CEF0B0415 | DSE_LDAP_DELETERESPONSE | LDAP_DELETE_RESPONSE |
| CEF0B0416 | DSE_LDAP_MODDN | LDAP_MODDN |
| CEF0B0417 | DSE_LDAP_MODDNRESPONSE | LDAP_MODDN_RESPONSE |
| CEF0B0418 | DSE_LDAP_ABANDON | LDAP_ABANDON |
| CEF0B0419 | DSE_LDAP_EXTOP | LDAP_EXTENDED_OP |
| CEF0B0421 | DSE_LDAP_EXTOP_RESPONSE | LDAP_EXTENDED_OP_RESPONSE |
| CEF0B0424 | DSE_LDAP_PASSWDMODIFY | LDAP_PASSWORD_MODIFY |
