Skip to content

Enum: ConfidenceIdEnum

The normalized confidence refers to the accuracy of the rule that created the

finding. A rule with a low confidence means that the finding scope is wide and

may create finding reports that may not be malicious in nature.

URI: ocsf:ConfidenceIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None The normalized confidence is unknown
LOW None Low
MEDIUM None Medium
HIGH None High
OTHER None The confidence is not mapped to the defined enum values

Slots

Name Description
confidence_id The normalized confidence refers to the accuracy of the rule that created the

Identifier and Mapping Information

Schema Source

LinkML Source

name: ConfidenceIdEnum
description: 'The normalized confidence refers to the accuracy of the rule that created
  the

  finding. A rule with a low confidence means that the finding scope is wide and

  may create finding reports that may not be malicious in nature.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The normalized confidence is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  LOW:
    text: LOW
    description: Low
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Low
  MEDIUM:
    text: MEDIUM
    description: Medium
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Medium
  HIGH:
    text: HIGH
    description: High
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: High
  OTHER:
    text: OTHER
    description: 'The confidence is not mapped to the defined enum values. See the

      <code>confidence</code> attribute, which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other