Mappings: Zoom - Information Barrier Policy Modifications

Input Requirements

Input	Value
Vendor	Zoom
Product	Zoom
Log Format	JSON
Event ID Regex Pattern	`information_barriers.policy_created\|information_barriers.policy_deleted\|information_barriers.policy_updated`

Record Output

Output	Value
Vendor	Zoom
Product	Zoom
Record Type	Audit

Fields Mapped

Cloud SIEM Schema Field	Original Record Key	Notes
action	event
targetUser_email	payload.object.email
targetUser_userId	payload.object.id
targetUser_username	payload.object.email
user_email	payload.operator
user_userId	payload.operator_id
user_username	payload.operator