Skip to content

Enum: AnalyticStateIdEnum

The Analytic state identifier.

URI: ocsf:AnalyticStateIdEnum

Permissible Values

Value Meaning Description
ACTIVE None The Analytic is active
SUPPRESSED None The Analytic is suppressed
EXPERIMENTAL None The Analytic is still under development and considered experimental
UNKNOWN None The state is unknown
OTHER None The state is not mapped

Slots

Name Description
state_id The Analytic state identifier

Identifier and Mapping Information

Schema Source

LinkML Source

name: AnalyticStateIdEnum
description: The Analytic state identifier.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  ACTIVE:
    text: ACTIVE
    description: The Analytic is active.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Active
  SUPPRESSED:
    text: SUPPRESSED
    description: 'The Analytic is suppressed. For example, a user/customer has suppressed
      a

      particular detection signature in a security product.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Suppressed
  EXPERIMENTAL:
    text: EXPERIMENTAL
    description: The Analytic is still under development and considered experimental.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Experimental
  UNKNOWN:
    text: UNKNOWN
    description: The state is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The state is not mapped. See the <code>state</code> attribute, which
      contains a

      data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other