Which Resource Query Language (RQL) query monitors all "delete" activities for the user "user1"?
event where crud = 'delete’ AND subject = 'user1'
event where crud = 'delete'
event where crud = 'delete' AND subject = 'user1' AND cloud.type = 'aws'
event where subject = 'user1'
Submit