Action field values for Endpoint Protection 12.1 and 14